20 Engineering Code Review alternatives
Engineering Code Review: Review pull requests against a real engineering practice — security, performance, testing, and design, in that order. 20 agent skills do similar work, most sharing Performance, Code Review and Security, ranked by how much they have in common with Engineering Code Review.
Back to Engineering Code Review
-
by Jesse Vincent
Respond to code review feedback with technical rigour — verify each point instead of agreeing with everything.
Also: Code Review, Quality
-
by Jesse Vincent
Prepare and request a code review that checks the work against its original requirements, not just its syntax.
Also: Code Review, Quality
-
by Vercel
Vercel Engineering's React and Next.js performance playbook as an agent skill — 70 rules across 8 categories, ordered by impact, for writing and refactoring fast components.
Also: Code Review, Performance
-
by Sentry
Sentry's Django performance review skill — hunts N+1 queries, unbounded querysets, missing indexes and write loops, and reports only findings it can prove.
Also: Code Review, Performance
-
by Microsoft
The .NET team's official skill for scanning C# against ~50 performance anti-patterns across async, memory, strings, collections, LINQ, regex and I/O.
Also: Code Review, Performance
-
by Supabase
Supabase's official Postgres skill — eight rule categories ranked by impact, each with wrong-vs-right SQL and EXPLAIN output, for schema, RLS, indexing and query work on Postgres anywhere.
Also: Performance, Security
-
by Trail of Bits
CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
Also: Code Review, Security
-
by Trail of Bits
Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits.
Also: Code Review, Security
-
by OpenQodex
Open source pre-push AI code review for Claude Code and Codex: scanners plus a separate reviewer that verifies every finding.
Also: Code Review, Security
-
by OpenAI
OpenAI's skill for language- and framework-specific secure coding: detect the stack, load the matching reference guidance, then write secure-by-default code, flag critical issues passively, or produce a prioritised vulnerability report with fixes.
Also: Code Review, Security
-
by OpenAI
OpenAI's skill for repository-grounded threat modelling: derive trust boundaries, assets and attacker capabilities from the actual code, rank abuse paths by likelihood and impact, and write a reviewable Markdown threat model.
Also: Code Review, Security
-
by Jesse Vincent
Never claim work is complete, fixed, or passing without running the check and reading the output first.
Also: Quality
-
by Jesse Vincent
Enforce a real red-green-refactor loop when implementing features or fixes, so behaviour is specified before it is written.
Also: Quality
-
by AMD
AMD's official skill for benchmarking vLLM/SGLang inference and driving GPU kernel optimization with Magpie and TraceLens trace analysis.
Also: Performance
-
by Grafana Labs
Grafana's official k6 skill: generate a load, stress, spike or soak test from a plain-language brief, then actually run the script before handing it over.
Also: Performance
-
by Callstack
Callstack's official React Native performance skill: a priority-ordered framework for FPS, time-to-interactive, bundle size, memory leaks and re-render problems.
Also: Performance
-
by MongoDB
MongoDB's official skill for connection pools and timeouts — it refuses to hand you numbers until it knows your deployment, workload and concurrency.
Also: Performance
-
by Inngest
Seven ways to throttle agent and background workloads — concurrency keys, throttling, rate limiting, debounce, singleton, priority and batching — with a decision guide that picks the right one.
Also: Performance
-
by .NET Team at Microsoft
Make slow Entity Framework Core queries fast — read the generated SQL first, fix N+1s, cartesian Include explosions and non-sargable predicates, then re-measure one change at a time.
Also: Performance
-
by Cloudflare
Audits Core Web Vitals through the Chrome DevTools MCP server — LCP, INP, CLS plus FCP, TBT and Speed Index — and traces each one back to the render-blocking resource or layout shift causing it.
Also: Performance
