Open Code Review Agent Skill by alibaba
by alibabaSecure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
Open Code Review is an open-source agent skill by alibaba, written mainly in Go, with 49,215 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026. The latest npm release is @alibaba-group/open-code-review 1.13.9, published Nov 13, 2026, with 171,021 downloads last week.
Scan summary: scanned Nov 5, 2026 at commit 891df1b. Seen able to run dynamic code. Scan policy
What Open Code Review can touch
- Our checks did not find this. The tool may still do it.Run shell commandsNot seen in this scan
- Seen in this scan, either in the code or while it ran.Run dynamic codeFound in the code by our scan
- Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
- Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
- Our checks did not find this. The tool may still do it.Connect to databasesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
- Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
- Our checks did not find this. The tool may still do it.Connect to the internetNot run in this scan
"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 891df1b, Nov 5, 2026. See the scan policy.
Before you install Open Code Review
AgenticMart scanned Open Code Review on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What it can access
- A skill is instructions plus optional scripts. The instructions steer your agent; any scripts run on your machine when the agent uses the skill.
- Based on its description and topics, it likely needs to connect to a database.
Before you install
- Give it a read-only database user unless it must write.
- Pin the version you reviewed instead of always installing the latest release.
- Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
- Maintained by alibaba on GitHub, 49,215 stars and 3,604 forks. Popularity is not proof of safety.
- Last code change: Oct 30, 2026.
- Open-source license: Apache-2.0.
Open Code Review is an open-source agent skill by alibaba, written mainly in Go. Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
At a glance
- Stars
- 49k
- Forks
- 3.6k
- Language
- Go
- License
- Apache-2.0
- Created
- May 2026
- Last update
- Oct 30, 2026
- Type
- Agent Skill
- Price
- Free
Topics
Questions about Open Code Review
What is Open Code Review?
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
Who maintains Open Code Review?
Open Code Review is maintained by alibaba on GitHub (alibaba/open-code-review). AgenticMart lists it from public repository data.
Is Open Code Review safe to use?
AgenticMart scanned Open Code Review on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What license does Open Code Review use?
It is published under the Apache-2.0 license.
Open Code Review alternatives
View more →Similar agent skills in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Open Code Review (this page) alibaba | 49k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Rea morluto | 417k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Agent Skills addyosmani | 112k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| I Have Adhd ayghri | 60k | MIT | Oct 19, 2026 | Scanned, no flagged issues |
| Agent Skills For Context Engineering muratcankoylan | 18k | MIT | Oct 12, 2026 | Scanned, no flagged issues |
| React Doctor millionco | 15k | None found | Nov 1, 2026 | Not scanned yet |