q-kdb-code-reviewAI-powered code review for Q/kdb+ — catch bugs in the most terse language in finance
Install via ClawdBot CLI:
clawdbot install beee003/q-kdb-code-reviewGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Contains telemetry, tracking, or analytics calls not mentioned in documentation
telemetry:** The skill does not sendCalls external URL not in known-safe list
https://github.com/beee003/astrai-openclawAI Analysis
The skill's external calls are to its own GitHub repository for documentation/updates and to the legitimate Astrai API service (as-trai.com) for its core functionality. There is no evidence of unauthorized data exfiltration, credential harvesting, hidden instructions, or obfuscated malicious behavior. The telemetry mentioned appears to be related to skill operation, not user data.
Audited Apr 18, 2026 · audit v1.0
Generated Mar 22, 2026
A quantitative trading firm uses this skill to review real-time market data processing scripts in Q/kdb+. It catches performance bottlenecks like missing sorted attributes on time columns, ensuring asof joins remain microseconds-fast to maintain low-latency execution. This prevents costly slowdowns during peak trading hours.
A financial institution employs the skill to audit Q code for risk calculation models, identifying type errors and unsafe eval usage that could lead to incorrect risk assessments. Security mode checks protect against injection vulnerabilities in user-supplied queries, ensuring compliance with regulatory standards.
A research team uses the skill during development of new trading algorithms, leveraging strict mode to optimize vector operations and parallel processing with peach. It helps catch subtle bugs in complex signal generation code, reducing backtesting errors and improving model accuracy.
An asset management firm applies the skill to review and refactor legacy Q/kdb+ databases, identifying memory-inefficient queries and missing grouped attributes. This enhances query performance for large historical datasets, reducing server costs and improving report generation times.
A trading platform operator uses security mode to scan IPC handlers and timer callbacks in Q code for vulnerabilities like unprotected .z.pg or race conditions. This prevents unauthorized access and ensures robust, secure handling of client requests in high-stakes environments.
Users pay a subscription fee to Astrai for routing and optimization services while providing their own API keys from AI providers like OpenAI or Anthropic. This model reduces costs by leveraging cheaper models for simple tasks and routes complex reviews to more powerful models, optimizing spend.
Sell annual licenses to financial institutions or trading firms for team-wide access, including custom integrations, priority support, and enhanced security features. This targets organizations needing scalable, secure code review across multiple developers and projects.
Offer a free tier with limited reviews per month using Astrai's default API keys, and premium tiers with higher limits, advanced strictness modes, and BYOK support. This attracts individual developers and small teams, converting them to paid plans as usage grows.
💬 Integration Tip
Set the REVIEW_STRICTNESS environment variable to default to your preferred mode, and ensure all required API keys are exported before running reviews to avoid interruptions.
Scored Apr 19, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.