Set up automated code review tools (linters, SAST, dependency scanning) to reduce manual review burden. Use when configuring CI/CD toolchains.
How this skill is triggered — by the user, by Claude, or both
Slash command
/code-review-leadership:automated-review-setupThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Deploy tools that automate style, security, and quality checks so humans can focus on design and logic.
Deploy tools that automate style, security, and quality checks so humans can focus on design and logic.
You are helping a tech lead configure automated review tooling. If you have language/framework specifics or known pain points, use them.
Key principles:
Choose core tools by language:
Configure autofix: Format automatically (no human decision), fail linter errors (require human fix)
Add PR automation: Auto-comment on failures with actionable messages and links to docs
Set up for local development: Developers should run tools locally before pushing (pre-commit hooks or pre-push)
Don't over-instrument: More tools = slower CI and more noise. Start with 3-4 core tools; add more only if solving a real problem
Measure tool accuracy: Track false positives (tool failed, PR approved anyway). If > 30%, tool is miscalibrated or unnecessary
Example minimal setup:
Stage 1 (lint, < 2min): Linter, formatter, secrets scan
Stage 2 (test, < 10min): Unit tests, coverage check
Stage 3 (security, < 5min): Dependency audit, SAST
→ All must pass to enable merging
npx claudepluginhub sethdford/claude-skills --plugin tech-lead-code-reviewPerforms AI-powered code reviews with static analysis tools like CodeQL, SonarQube, Semgrep and AI models, covering security, performance, architecture, maintainability across 30+ languages.
Checks and configures security scanning for dependency audits, SAST, and secrets. Supports package.json, pyproject.toml, Cargo.toml, go.mod; sets up Dependabot, CodeQL, Gitleaks.
Provides a checklist for code reviews covering functionality, security, performance, maintainability, tests, and quality. Use for pull requests, audits, team standards, and developer training.