Code Review for Openclaw

An automated code review protocol that systematically analyzes source code, pull requests, or commit diffs across quality, security, maintainability, and performance dimensions to generate structured quality reports.

bobbhchen
v1.0.0
Jun 9, 2026
0
937
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install enterprise-code-review

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install enterprise-code-review using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is Code Review?

The Code Review skill is a specialized automation protocol designed for Openclaw Skills environments. It orchestrates a standardized, multi-dimensional code auditing process that replicates the thoroughness of a senior engineer. By integrating directly with source repositories and version control data, it ensures that every line of code introduced meets rigorous engineering standards before hitting production.

This skill addresses the operational bottleneck of manual code assessments by evaluating code assets across four critical technical dimensions. It abstracts away the cognitive load of syntax parsing, vulnerability scanning, and structural evaluation, providing engineering teams with a predictable and high-fidelity feedback loop that enhances continuous integration workflows.

Code Review Use Cases

  • A developer triggers a manual evaluation of a newly written source file before staging.
  • An automated continuous integration pipeline invokes the skill when a Pull Request is opened or updated.
  • Team leads require a comprehensive technical assessment of specific commit history branches to identify technical debt.

How Code Review Works

  1. Code Acquisition: The skill leverages the exec or git-read sub-tools to access target source code or fetches the raw diff directly if a Pull Request URL is passed.
  2. Dimensional Analysis: The skill sequentially executes four deep-dive evaluation steps covering Code Quality (SRP, DRY, Naming), Security (SQLi, XSS, Hardcoded secrets), Maintainability (Comments, Test Coverage, Error Handling), and Performance (N+1 queries, Redundant calculations).
  3. Report Generation: Synthesizes the telemetry data and analytical insights into a highly structured markdown report containing a categorized issue matrix, positive design notes, and prioritized recommendations.

Code Review Setup

To deploy this capability within your Openclaw Skills environment, ensure your agent runtime has access to the Git executable.

# Verify your system satisfies the executable dependencies
git --version

# Register the code-review skill definition within your Openclaw configuration directory
openclaw skill install code-review

Code Review Data Schema & Taxonomy

The skill generates structured metadata and reports according to the following schema:

Report Metadata Taxonomy

Field Type Description
Review Target String Filename, commit hash, or Pull Request title evaluated
Review Date Date ISO or localized timestamp of execution
Overall Rating Character Performance tier grade assigned from A (Excellent) to D (Requires Remaking)

Issue Severity Classification

  • High (🔴): Severe security vulnerabilities (e.g., SQL Injection, unvalidated inputs) or functional blockers.
  • Medium (🟡): Code quality or maintainability issues violating DRY/SRP principles or failing complexity thresholds.

Code Review Advanced Features

  • Multi-Dimensional Matrix Scoring: Evaluates codebase changes dynamically using distinct validation profiles for targeted quality metrics.
  • PR Diff Isolation: Intelligently handles remote repository URLs to parse and isolate incoming line diffs, minimizing context token overhead.
  • Strict Technical Isolation Guardrail: Intentionally bypasses subjective business logic validation to focus purely on programmatic quality, performance, and infrastructure security metrics.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*