Code Review Service

This skill is an instruction-only code-review template and appears coherent with its purpose. Points to consider before installing or using it in automated workflows: - Source is unknown (no homepage); prefer skills from known maintainers when possible. - The skill itself requests no credentials, but following its advice (running SonarQube, ESLint, or performing MR reviews) will require access tokens and repository read access — grant those minimally (read-only, scoped service accounts) and avoid reusing admin credentials. - If you plan to let an agent automatically fetch repositories or run analysis tools, isolate that capability (dedicated service account, limited permissions) and review logs/outputs for leaked secrets. - Review generated reports before sharing externally — code reviews can inadvertently include sensitive snippets (API keys, internal URLs). - Because this is guidance-only (no code/install), the direct risk from the skill is low; the primary risk comes from how you connect it to your code and tools. Ensure standard operational precautions when integrating with CI/CD or repo hosting.