Skim through the code? Sure it's likely to miss something, but it still catches low-effort and if enough people do it someone will see it.