open-code-review
Installation
SKILL.md
Open Code Review — AI Code Quality Scanner
Scan codebases for AI-specific defects that traditional linters (ESLint, SonarQube, Checkstyle) cannot detect.
What It Detects
| Category | Example | Severity |
|---|---|---|
| Hallucinated packages | import { parseJson } from 'fast-json-utils' (package doesn't exist on npm) |
🔴 Critical |
| Stale APIs | response.json().then() with v2 API that was removed in v4 |
🟡 Warning |
| Context breaks | Two files reference the same function name with different signatures | 🟡 Warning |
| Security anti-patterns | Hardcoded secrets, deprecated crypto, insecure defaults | 🔴 Critical |
| Over-engineering | Unnecessary abstraction layers, dead code, excessive indirection | 🔵 Info |
Quick Start
# Install
npx @opencodereview/cli scan ./src --sla L1