CookiesForAI

code-review

Code review

code-review is Sentry's agent skill for reviewing pull requests by Sentry's engineering practices: runtime errors, performance, side effects, compatibility, security, design, tests and the tone of feedback.

Agent skill by Sentry Official · Updated

Install Code review

Install this skill with the skills CLI

Terminal
npx skills add getsentry/skills --skill code-review

Or, for Claude Code, add Sentry's plugin marketplace

Terminal
claude plugin marketplace add getsentry/skills

Then install the sentry-skills plugin, which holds all 28 skills

Terminal
claude plugin install sentry-skills@sentry-skills

Restart Claude Code after installing the plugin. Sentry's README says its skills were written for Sentry employees, so some carry Sentry conventions.

Or paste this into your coding agent: Install the agent skill code-review from github.com/getsentry/skills. A skill can include scripts that run on your computer, so read its source first.

What Code review does

code-review is an agent skill from Sentry that turns Sentry's published code review guidelines into a checklist for an agent. The agent looks for runtime errors, performance traps such as quadratic loops and N+1 queries, unintended side effects, breaking API changes without a migration path, heavy Django ORM queries and security issues such as injection, XSS, access control gaps and exposed secrets.

Beyond bugs, the code-review skill asks whether the change fits the existing architecture, whether tests cover the real requirements at the right level, and whether the change needs a senior reviewer: schema changes, API contract changes, new libraries, hot code paths and security-sensitive code all qualify. Feedback should be polite, specific and phrased as a question when the reviewer is unsure.

The skill is short, about 370 words, and its examples are Python with Django and TypeScript with React. It tells the agent to approve once only small issues are left and not to block a pull request over style, since the goal is lower risk rather than perfect code.

When to use Code review

  • You want an agent to review a pull request with a consistent checklist.
  • You want review comments that are specific and polite rather than vague.
  • You need to know which changes deserve a second, senior reviewer.
  • You work on a Django or React codebase and want common pitfalls flagged.

When to pick something else

  • A security-focused review: use security-review from the same repository, or Trail of Bits' differential-review.

Which agents Code review works in

Sentry documents Code review for Claude Code, Cursor, Cline, GitHub Copilot. The open skills CLI also installs it into 78 agents, including Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode (we listed it with the CLI on October 1, 2026). See where each agent looks for skills.

Code review license

Code review is published under Apache-2.0.

  • Finishing a Development Branch: Finishing a Development Branch is an agent skill from Superpowers: when work is done, your agent runs the tests, offers to merge, open a pull request or keep the branch, then cleans up. (293,976 repository stars on October 2, 2026)
  • GitHub address comments: gh-address-comments is OpenAI's agent skill for pull request review feedback: the agent fetches every comment and review thread on the open PR, numbers them, and fixes only the ones you pick. (27,839 repository stars on October 2, 2026)
  • GitHub fix CI: gh-fix-ci is OpenAI's agent skill for failing pull request checks: the agent uses the GitHub CLI to find failing GitHub Actions runs, pulls the logs, summarizes the failure and proposes a fix plan. (27,839 repository stars on October 2, 2026)
  • Receiving Code Review: Receiving Code Review is an agent skill from Superpowers: your agent checks review feedback against the code before acting, pushes back with reasons when it is wrong, and skips the flattery. (293,976 repository stars on October 2, 2026)

More from Sentry

  • GitHub Actions security review: gha-security-review is Sentry's agent skill for auditing GitHub Actions workflows for attacks an outsider can run, such as pwn requests, expression injection and credential theft, with a concrete exploit for each finding. (1,031 repository stars on October 2, 2026)
  • Iterate on PR: iterate-pr is Sentry's agent skill that keeps working on a GitHub pull request until CI passes and high and medium priority review comments are fixed, using bundled scripts and the gh CLI. (1,031 repository stars on October 2, 2026)
  • Security review: security-review is Sentry's agent skill for reviewing code for exploitable vulnerabilities, such as injection, XSS, broken access control and weak crypto, reporting only findings it has confirmed with high confidence. (1,031 repository stars on October 2, 2026)

Lists that include code-review