Bytesagain Code Reviewer Cn

Review code files for bugs, security issues, and style problems. Use when auditing Python, JavaScript, Go, or Bash code, checking for injection risks, measur...

Security Scan

The skill is internally coherent with its stated purpose (a local, pattern-based code reviewer) and contains no network exfiltration or unexpected credential requests, but there are a few minor mismatches and a runtime bug you should be aware of.

Purpose & Capability

The name/description match the included script: the tool reads code files and runs simple pattern checks, complexity counts, and checklists. One inconsistency: SKILL.md lists runtime requirements (bash, python3) but the registry metadata declared no required binaries; the included script clearly requires python3 to work.

Instruction Scope

Runtime instructions and the script operate on files explicitly passed by the user (review/security/complexity/diff). The script reads only the target files and prints local analyses; it does not call external endpoints or access unrelated system paths or environment variables.

Install Mechanism

There is no install spec — this is an instruction-only skill with an accompanying shell script. Nothing is downloaded or executed from external URLs during install.

Credentials

The skill requests no environment variables or credentials. Minor note: SKILL.md requires bash + python3 but these were not declared in registry metadata; ensure python3 is available before use.

Persistence & Privilege

always is false and the skill does not attempt to modify other skills or system-wide settings. It does not request persistent privileges.

Assessment

This skill appears to do what it says: a local, pattern-based code reviewer implemented as a bash wrapper around small Python analyzers. Things to consider before installing/running: 1) Ensure python3 is available (SKILL.md requires it but registry metadata omits it). 2) The tool only reads files you pass to it — don't point it at files containing secrets you don't want examined (the security scan looks for obvious hardcoded secrets but is basic and can miss things). 3) There is a bug in the security subcommand: the Python code tries to open "$file" literally rather than using the passed filename, which will likely cause a runtime error; you may want to review/fix that code before relying on the security scan. 4) Because the checks are pattern-based, expect false positives/negatives; review results manually for critical code. If you need stronger guarantees, inspect the script locally or run it in an isolated environment before granting it broader use.

Automated code review assistant with pattern-based issue detection, language-specific checklists, security scanning, and complexity metrics. Supports Python, JavaScript, Go, Java, and Bash.

Usage

bytesagain-code-reviewer-cn review <file>
bytesagain-code-reviewer-cn checklist <lang>
bytesagain-code-reviewer-cn security <file>
bytesagain-code-reviewer-cn complexity <file>
bytesagain-code-reviewer-cn diff <file1> <file2>

Commands

• review — Auto-detect language, check for common issues, warnings, and style suggestions
• checklist — Print language-specific review checklist (python/js/go/generic)
• security — Scan for hardcoded secrets, injection risks, weak crypto, unsafe patterns
• complexity — Calculate lines, branching, nesting depth, and complexity score
• diff — Side-by-side unified diff of two code files

Examples

bytesagain-code-reviewer-cn review app.py
bytesagain-code-reviewer-cn review server.js
bytesagain-code-reviewer-cn checklist python
bytesagain-code-reviewer-cn checklist go
bytesagain-code-reviewer-cn security config.py
bytesagain-code-reviewer-cn complexity main.go
bytesagain-code-reviewer-cn diff old.py new.py

Requirements

• bash
• python3

When to Use

Use before committing code, during PR review, when onboarding new team members to coding standards, or when auditing a codebase for security issues and complexity hotspots.