Best-of guides

Best Claude skills for code review in 2026

Code review is where bugs die, or sneak through. The best Claude skills for code review act as a tireless second pair of eyes, scanning diffs for correctness, security issues, performance regressions, and missing tests before a human ever opens the PR. Each skill below is a SKILL.md file you can install in one command and use across Claude Code, Cursor, and any MCP-compatible editor. They are ranked by install count, so the list reflects what working developers reach for first. Pick one, install it, and let it ride along on every review you do.

Top 10 skills

See all →

  1. 01code-review

    369 installs

    Thorough code review — checks correctness, security, performance, readability, and test coverage. Gives actionable feedback ranked by severity.

    Review

  2. 02security-review

    66 installs

    Security audit and vulnerability assessment for any codebase. Scans for authentication bypasses, missing auth middleware, broken JWT validation (algorithm confusion, weak secrets, missing expiry), OAuth state and PKCE flaws, IDOR and horizontal privilege escalation.

    Reviewfrom Skills Hub

  3. 03refactor

    58 installs

    Systematic code refactoring — extract functions, reduce complexity, eliminate duplication, improve naming, and split large files. Preserves behavior with tests.

    Review

  4. 04security-audit

    32 installs

    Scan a codebase for security vulnerabilities — OWASP Top 10, secrets in code, dependency CVEs, auth flaws, injection risks, and misconfigurations. Fixes what it finds.

    Review

  5. 05arch-review

    15 installs

    Architect-level story review with component reuse, domain consistency, data privacy, service architecture, and infrastructure checks. Design review before coding or implementation validation after.

    Reviewfrom Skills Hub

  6. 06api-review

    15 installs

    Review API design against REST best practices and internal consistency. Triggers: you need to review an API, audit REST endpoints, check API consistency, fix HTTP status codes, add pagination.

    Reviewfrom Skills Hub

  7. 07api-design

    9 installs

    Review or design REST/GraphQL APIs — checks naming, versioning, pagination, error handling, authentication, rate limiting, and consistency against industry standards.

    Review

  8. 08game-code-review

    6 installs

    Review game code architecture for component coupling, ECS vs OOP design, update loop organization (deltaTime, fixed timestep, frame budget), state machine quality (boolean soup, string states), save/load serialization (versioning, migration, corruption handling).

    Reviewfrom Skills Hub

  9. 09mobile-security-review

    4 installs

    Audit mobile apps against OWASP Mobile Top 10 (M1-M10): credential hardcoding, supply chain dependencies, insecure auth/token storage (Keychain/Keystore), input validation (deep links, WebView XSS), certificate pinning (OkHttp, TrustKit, Alamofire), privacy (PII in logs, clipboard.

    Reviewfrom Skills Hub

  10. 10database-review

    3 installs

    Review database schema design, query patterns, and data access layer for correctness and performance. Triggers: you need to review a database schema, find missing indexes, detect N+1 queries, audit data types.

    Reviewfrom Skills Hub

How to install

Every skill on this page is a SKILL.md file you can install with one command. The CLI writes the skill into the right directory for Claude Code, Cursor, Codex CLI, Windsurf, or any MCP-compatible tool.

$ npx @skills-hub-ai/cli install <skill-slug>