code-review Skill
Review SynapseML Python and Scala code changes. Use before finalizing PR reviews or implementation changes to check security, compatibility, style, generated code, and targeted tests. Published by microsoft in SynapseML.
What is code-review Skill?
Review SynapseML Python and Scala code changes. Use before finalizing PR reviews or implementation changes to check security, compatibility, style, generated code, and targeted tests. Published by microsoft in SynapseML. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Testing
- Security review
- Documentation
- Testing use cases
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use code-review Skill
- Use it for testing.
- Use it for security review.
- Use it for documentation.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/SynapseML
- Skill file: .github/skills/code-review/SKILL.md
What it does
Review SynapseML Python and Scala code changes. Use before finalizing PR reviews or implementation changes to check security, compatibility, style, generated code, and targeted tests.
Skill instructions
Code Review Use this skill when reviewing SynapseML changes. Steps 1. Inspect diff: git --no-pager diff --stat && git --no-pager diff 2. Run Scala style: sbt scalastyle test:scalastyle 3. Run Python format check: black --check --extend-exclude 'docs/' . 4. Run targeted tests for touched code. 5. Apply the checklists below to every changed file. 6. Report only concrete issues with file paths and fixes. Security Checklist Apply when changes touch serialization, I/O, network, or authentication code. Deserialization (CWE-502) - [ ] No raw ObjectInputStream.readObject(): use SafeObjectInputStream with an allowlist - [ ] resolveClass allowlist validates array component types. Never allowlist the [ prefix directly; array handling must extract and validate the component class name - [ ] resolveProxyClass is overridden to block or validate dynamic proxy interfaces - [ ] Allowlist uses package-prefix matching, not blocklisting - [ ] Allowlist presets contain no catch-all entries that bypass the
Explore related resources
Frequently asked questions
What is code-review?
code-review is a open-source AI agent skill with Copy skill directory. Review SynapseML Python and Scala code changes. Use before finalizing PR reviews or implementation changes to check security, compatibility, style, generated code, and targeted tests.
Who is code-review best for?
code-review is best for reusing agent instructions, scripts, and references, testing workflows, security review workflows, documentation workflows.
How do I install code-review?
Install or run code-review using Copy skill directory. Check code-review for the latest setup command.
Is code-review actively maintained?
code-review may need a closer maintenance check before production use.
Auto-fetched from GitHub.
