Review diffs, catch bugs before the merge and reduce technical debt.
Code review is the moment when someone, or something, looks at a change before it goes into the main branch. On a small project, a quick read of the diff is enough. The trouble starts when the repository grows, when several people touch the same files and when part of the code starts being written by assistants: the volume of changes goes up and human attention cannot keep pace.
The components on this page give Claude Code a defined role at that moment. One agent reads the diff and returns issues with file and line, another looks only for security flaws, another checks whether the tests really cover the new path. There are skills that post inline comments on the pull request and automations that run the linter on every file edit, before a review even exists.
Start with the general-purpose reviewer and the linting automation, which cover most cases with little setup. Only then add specialized reviewers, and only the ones that match real risks in your project: security, architecture, API contracts, test coverage. For old code, the refactoring and technical debt agents are a different path, slower and more deliberate.
21 hand-picked components, from 4 different angles.
Reviewers that work on a diff or a pull request. They cover the moment when the code is ready but has not been merged yet.
A good starting point if you have no reviewer set up yet: it analyzes the changes submitted in a pull request and classifies quality, security and best-practice issues.
Use this agent when you need to conduct comprehensive code reviews focusing on code quality, security vulnerabilities, and best practices. Specificall
For work that has not left your machine yet: it reads the git diff and the untracked files and returns suggestions before a commit even exists.
Review your local uncommitted working-tree changes (git diff plus untracked files) and return actionable improvement suggestions. Use before committin
When the change is already in a GitHub pull request, it posts the comments directly on the diff lines through gh, instead of leaving them in the terminal.
Review an existing GitHub pull request and post inline review comments on its diff. Use when the changes are on an opened PR rather than your local wo
Focuses only on bugs and critical issues, with root cause analysis. It helps when a generic review returns lots of style notes and little substance.
Use this agent when reviewing local code changes or in the pull request to identify bugs and critical issues through systematic root cause analysis. T
For when you suspect the model is agreeing too readily with the code it just wrote: it uses hostile reviewer personas to expose blind spots it shares with the author.
Adversarial code review that breaks the self-review monoculture. Use when you want a genuinely critical review of recent changes, before merging a PR,
A second opinion generated by a model from another family, in read-only mode. It makes sense for contested diffs or sensitive changes, where two opinions are worth having.
Runs a Codex-powered read-only code review using a SOTA GPT model. Use as a second-opinion reviewer alongside Claude's own review for PRs, contentious
Each of these reviewers looks at just one dimension of the code. Use them when a generic review is not enough, or in parallel on a project with concrete risks.
Looks at the change from a structural point of view: layers, SOLID principles and consistency with existing patterns. A good fit for pull requests that change how the code is organized.
Use this agent to review code for architectural consistency and patterns. Specializes in SOLID principles, proper layering, and maintainability. Examp
When the diff touches authentication, user input or sensitive data, it applies the OWASP Top 10 and enterprise security criteria instead of generic comments.
Security-focused code review specialist with OWASP Top 10, Zero Trust, LLM security, and enterprise security standards
Checks whether the tests that come with the change really cover the new functionality and the edge cases, instead of just pushing up the coverage percentage.
Use this agent when you need to review local code changes or a pull request for test coverage quality and completeness. This agent should be invoked a
Built for changes to public APIs, data models, database schemas and type definitions, where a design mistake is expensive to undo later.
Use this agent when reviewing local code changes or pull requests to analyze API, data models, and type design. This agent should be invoked proactive
If you run several reviewers in parallel, it handles the tedious part: it removes duplicate findings, calibrates severity and merges everything into a single report.
Coordinate parallel code reviews across multiple quality dimensions with finding deduplication, severity calibration, and consolidated reporting. Use
Here the goal is not to approve or reject a change, it is to improve code that already exists without changing what it does.
Designed for code nobody wants to touch: huge methods, duplicated logic, confusing structure. It rewrites while preserving the existing behavior.
Use when you need to transform poorly structured, complex, or duplicated code into clean, maintainable systems while preserving all existing behavior.
Works on recently changed code and reduces complexity without changing functionality. It fits well as the next step after a review that flagged a lot of unclear code.
Simplifies and refines code for clarity, consistency, and maintainability while preserving all functionality. Focuses on recently modified code unless
For whoever has to decide what goes into the next sprint: it assesses the health of the code and proposes a refactoring order, instead of treating debt as an endless list.
Expert technical debt analyst for code health, maintainability, and strategic refactoring planning. Use PROACTIVELY when codebase shows complexity gro
Removing a feature always leaves something behind: imports, functions and classes nobody calls anymore. It detects them in several languages and removes them with safety checks.
Detects and removes unused code (imports, functions, classes) across multiple languages. Use PROACTIVELY after refactoring, when removing features, or
Made for branches written with AI help: it compares against the main branch and strips out excess comments, unnecessary defensive checks and type casts to any.
Remove AI-generated code slop from a branch. Use when cleaning up AI-generated code, removing unnecessary comments, defensive checks, or type casts. C
Automations, commands and connectors that make the repetitive work happen without anyone having to remember it.
Runs ESLint, Pylint or RuboCop right after every file edit, so formatting and style errors never reach the actual review.
Automatically run linting tools after file modifications. Supports ESLint for JavaScript/TypeScript, Pylint for Python, and RuboCop for Ruby.
Handles the initial setup of static analysis tools on a project that has none yet, with language detection and automatic application of the rules.
Configure comprehensive code linting and quality analysis tools with automated enforcement
A checklist for teams that want the same criteria in every review, with sections for functionality, security, performance and maintainability.
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
The other side of the table: how to evaluate review comments that seem debatable, checking before implementing instead of accepting everything out of deference.
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires
A connector for the Codacy API that gives Claude Code access to the quality, coverage and security reports the platform has already gathered about the repository.
MCP Server for the Codacy API, enabling access to repositories, files, quality, coverage, security and more.
Agents are markdown files that you put in .claude/agents/ inside the project, or in ~/.claude/agents/ if you want them in every repository. Skills follow the same logic in .claude/skills/ and are triggered by the intent of the request, without needing a command. Commands go in .claude/commands/ and become available with a slash. Automations live in the settings.json file, in the hooks section, and run on their own after each edit. MCP connectors are added to the MCP server configuration and usually ask for a token from the platform. After copying any of these files, restart the session so Claude Code picks it up.
The most common mistake is to install six reviewers and start getting hundred-line reports that nobody reads. A sequence that works: automatic linting on every save, a general-purpose reviewer on local changes before the commit, and only then one or two specialized reviewers chosen by what the change touches. If the diff touches authentication, call the security reviewer. If it changes schemas or public types, call the contracts reviewer. When you run more than two in parallel, use a consolidation skill to merge repeated findings and standardize severity, otherwise the same issue shows up described in three different ways.
An automated reviewer reads what is in the diff. It does not know what the client asked for, or why that defensive function was written two years ago, or whether the feature makes sense for the business. It also tends to produce low-value findings when you do not give it enough project context, and to agree with code the model itself wrote, which is exactly why adversarial and second-opinion reviewers exist. Treat the reports as a first pass that catches the obvious and frees up human attention for the decisions that need context: design, priorities and real risk.
An agent runs in its own session, with its own separate context, and returns a report at the end. It is useful for long reviews that should not clutter the main conversation. A skill loads instructions into the current session when the request matches its description, and is better suited to short procedures, such as applying a checklist or posting comments on a pull request.
Prompts and resources curated from international sources, normalized and categorized: over 11 thousand. A Doutor AI bot checks the sources every day and brings in what is new.
Need a tailor-made solution?
Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.
Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.
