
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
create-code-reviewer
Advanced tools
Interactive CLI to install a framework-aware code review skill for AI coding assistants.
npx create-code-reviewer
.opencode/opencode.json configclaude_desktop_config.json config| Framework | Rules |
|---|---|
| Next.js | Server/Client boundaries, data fetching, image optimization |
| React | Hooks rules, performance, key props |
| Vue 3 | Composition API, reactivity, v-for keys |
| TypeScript | Strict mode, no-any, null checks |
| Django | N+1 queries, security, migrations |
| Express | Async errors, security middleware, input validation |
./.opencode/skills/code-reviewer/~/.config/opencode/skills/code-reviewer/.opencode/
├── opencode.json # MCP server config
├── code-reviewer.json # Review settings
└── skills/
└── code-reviewer/
├── SKILL.md # Skill instructions
└── references/
├── security-patterns.md
├── performance-patterns.md
├── quality-patterns.md
└── framework-rules/
├── nextjs.md
├── react.md
├── vue.md
├── typescript.md
├── django.md
└── express.md
# Review a file
opencode "review src/auth.ts"
# Review a directory
opencode "review src/services/"
# Use slash command
/code-reviewer src/
# Review staged changes
/code-reviewer --staged
Rules are applied in this order (highest to lowest priority):
The installer configures MCP servers for enhanced code review:
| Server | Purpose | Config |
|---|---|---|
| GitHub | PR reviews, issues | npx @anthropic/mcp-server-github |
| GitLab | MR reviews, issues | npx @anthropic/mcp-server-gitlab |
| Linear | Issue tracking | HTTP: https://mcp.linear.app/mcp |
| Jira | Issue tracking | npx @anthropic/mcp-server-jira |
Tokens are stored in .env (gitignored) and referenced via ${env.TOKEN_NAME}.
{
"version": "1.0.0",
"project": {
"detected": {
"packageManager": "pnpm",
"language": "typescript",
"framework": "nextjs",
"styling": ["tailwind"],
"linting": ["eslint", "prettier"]
}
},
"rules": {
"framework": {
"nextjs": { "enabled": true }
},
"language": {
"typescript": { "enabled": true, "strict": true }
},
"builtin": {
"security": { "enabled": true },
"performance": { "enabled": true }
},
"custom": []
}
}
Add custom rules to code-reviewer.json:
{
"rules": {
"custom": [
{
"name": "no-console-log",
"severity": "warning",
"pattern": "console.log",
"message": "Remove console.log before merging"
}
]
}
}
# Clone and install
cd packages/create-code-reviewer
npm install
# Build
npm run build
# Test locally
node dist/index.js
MIT
FAQs
Interactive installer for code-reviewer skill with MCP integrations
The npm package create-code-reviewer receives a total of 0 weekly downloads. As such, create-code-reviewer popularity was classified as not popular.
We found that create-code-reviewer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.