Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

A5c AI/Code Review Patterns — measured AI agent skill | DecimalAI

a5c-ai/code-review-patterns

SkillScore36Maintained

Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and Router Contract generation.

by a5c-ai

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Coding pack

decimalai skills pull a5c-ai-code-review-patterns

Get this skill — curl · raw file

curl -fsSL https://app.decimal.ai/s/a5c-ai-code-review-patterns/SKILL.md

Raw file: /s/a5c-ai-code-review-patterns/SKILL.md ↗ · machine-readable summary at /s/a5c-ai-code-review-patterns.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

Runs

168

all versions · 30d

Used when offered

used / offered · all versions

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 8d ago

Yes — +36% lift-30% tokens0% turns36% of whole cases pass with skill (8/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-02	✗→✓	▲ Improved	-28%	0%
case-03	✗→✓	▲ Improved	-51%	0%
case-04	✗→✓	▲ Improved	110%	0%
case-05	✗→✓	▲ Improved	-13%	0%
case-07	✗→✓	▲ Improved	-60%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 7/31/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

a5c-ai / babysitter

library/methodologies/cc10x/skills/code-review-patterns/SKILL.md

View on GitHub ↗

License MITImported 7/31/2026Version v1

Skill contents

SKILL.md

Injection vulnerabilities (SQL, XSS, command)
Authentication and authorization patterns
Secrets handling (no hardcoded credentials)
Input validation and sanitization

Quality (weight: 25%)

Naming conventions and consistency
Code structure (SRP, cohesion, coupling)
Error handling completeness
Type safety (no any escapes)

Performance (weight: 20%)

Algorithmic complexity (flag O(n^2) or worse)
Resource and memory leaks
Database query efficiency (N+1)
Caching opportunities

Maintainability (weight: 25%)

Documentation (JSDoc/TSDoc for public APIs)
Test coverage adequacy
Readability (function length, nesting depth)
Tech debt markers (TODO, FIXME)

Confidence Gating

Only report issues with confidence >= 80%
Empty catch blocks are always critical (100% confidence)
Classify: critical, high, medium, low
Include actionable remediation for each issue

Router Contract

Every review must produce: STATUS, BLOCKING, REQUIRES_REMEDIATION, issue counts.

When to Use

Code review step in BUILD workflow
Fix review in DEBUG workflow
Full REVIEW workflow

Agents Used

code-reviewer (primary consumer)
silent-failure-hunter (error handling dimension)

Want to see if a5c-ai/code-review-patterns would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.