mcp-code-reviewer

Review MCP pull requests with security, correctness, architecture, and testing lenses.

3.6k|607|Updated Apr 9, 2025
One-click install
npx skills add https://github.com/microsoft/mcp --skill mcp-code-reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mcp-code-reviewer
Source: https://github.com/microsoft/mcp/tree/main/.github/skills/mcp-code-reviewer
Command: npx skills add https://github.com/microsoft/mcp --skill mcp-code-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Reviewing pull requests in the Microsoft MCP repository requires checking many repository-specific concerns such as security boundaries, AOT compatibility, Azure SDK usage, tool contract compatibility, and test evidence, which is easy to miss in manual reviews.

Core Features & Use Cases

  • Multi-lens review: Applies eight fixed lenses covering security, C# correctness and AOT, Azure service integration, architecture, testing, tool contracts, documentation, and product intent, plus dynamic lenses triggered by changed files.
  • Finding triage: Verifies, deduplicates, and severity-ranks candidate findings so only high-confidence, actionable comments survive.
  • Structured output: Produces line-anchored draft comments in interactive sessions or comment-only reviews in GitHub Copilot Code Review.
  • Use Case: Given a pull request number or diff, the Skill gathers PR context, reads repository guidance like AGENTS.md, builds a change map, and returns a concise set of inline review comments.

Quick Start

Review pull request 123 in this repository and return draft inline comments for any blocking or warning findings.

Frequently Asked Questions about mcp-code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request with this Skill?

Provide a pull request number, URL, branch, or diff. The Skill gathers PR context, reads repository guidance files, builds a change map, applies review lenses, and returns triaged inline comments.

What does the MCP code review check for?

It checks security issues, C# correctness and AOT compatibility, Azure SDK usage, architecture and statelessness, test coverage, tool contract compatibility, documentation accuracy, and alignment with the linked issue.

Can this Skill approve or modify a pull request?

No. It works read-only and never approves, requests changes, resolves threads, or modifies code. In interactive sessions it returns draft comments for human approval before posting.

How are review findings filtered and prioritized?

Candidate findings are verified against the diff and surrounding code, deduplicated, and assigned blocking, warning, or nit severity. Only high-confidence findings worth a maintainer's time survive triage.

Does it work with GitHub Copilot Code Review?

Yes. In GitHub Copilot Code Review it posts qualified inline comments directly as a comment-only review. In interactive IDE and CLI sessions it returns drafts for user approval first.