Code review helper

Skill maxwellokumu/okaudit-claude-skills/application-security/code-review-helper

Claude-ready IT audit skills for identity, compliance, appsec, privacy, network, logging, vendor risk, and audit leadership workflows

Install

npx -y skills add maxwellokumu/okaudit-claude-skills --skill code-review-helper

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
5 stars5 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Analyze source code for common security weaknesses across multiple languages and help Claude explain findings, severity, and remediation clearly.

SKILL.md

1.7 KB, as published. Nobody here has run it

Code Review Helper

Use this skill when the user wants a lightweight application security code review, needs help identifying insecure coding patterns, or wants findings summarized in audit-friendly language.

Goal

Help Claude inspect source files for common security issues, explain why they matter, and present practical remediation advice without overstating certainty.

Workflow

Confirm the source language and the code or file the user wants reviewed.
Inspect the input for patterns associated with secrets exposure, injection risks, unsafe execution, or similar weaknesses.
Distinguish likely security findings from low-confidence matches or contextual false positives.
Summarize the highest-risk issues first and include practical remediation guidance.
Present results in a concise format suitable for engineers, auditors, or security reviewers.

Inputs

Expected inputs from the bundled tool metadata:

code: Path to the source file or code sample to analyze.
language: Source language such as Python, JavaScript, Java, or Go.
output: Optional output format.

Bundled Files

main.py contains the executable analysis logic.
README.md provides usage notes and examples.
skill.yaml captures the repo-native metadata for this skill.
sample_input may contain representative code samples for testing.

Guidance

Be careful with certainty. Flag suspicious patterns clearly, but say when a result is heuristic and may need human review to confirm exploitability or business impact.