Promptfoo code-review

Reviews code for bugs, security issues, and best practices

install
source · Clone the upstream repo
git clone https://github.com/promptfoo/promptfoo
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/promptfoo/promptfoo "$T" && mkdir -p ~/.claude/skills && cp -r "$T/examples/claude-agent-sdk/skills/sample-project/.claude/skills/code-review" ~/.claude/skills/promptfoo-promptfoo-code-review && rm -rf "$T"
manifest: examples/claude-agent-sdk/skills/sample-project/.claude/skills/code-review/SKILL.md
source content

Code Review Skill

Review the provided code for:

  1. Bugs: Logic errors, off-by-one errors, null/undefined handling
  2. Security: Input validation, injection vulnerabilities, hardcoded secrets
  3. Best practices: Naming conventions, error handling, code structure

Format your review as a list of findings with severity (high/medium/low) and suggested fixes.