pr-analysis

Analyze GitHub pull requests for code quality, security, and performance issues.

2|1|Updated Mar 11, 2026
One-click install
npx skills add https://github.com/lloydchang/agentic-reconciliation-engine --skill pr-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pr-analysis
Source: https://github.com/lloydchang/agentic-reconciliation-engine/tree/main/core/ai/skills/pr-analysis
Command: npx skills add https://github.com/lloydchang/agentic-reconciliation-engine --skill pr-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Pull Request Analysis automation helps teams quickly identify code quality issues, security vulnerabilities, and performance implications in changes before they are merged, reducing review time and risk.

Core Features & Use Cases

  • Code Quality Assessment: Detects complexity, code smells, readability issues, and adherence to standards.
  • Security Review: Identifies vulnerabilities, input validation gaps, and access-control concerns.
  • Performance Impact: Evaluates algorithm complexity, resource usage, and database query efficiency.
  • Architectural Impact: Flags breaking changes, new dependencies, and data model alterations.
  • Workflow & Integration: Hooks into GitHub PR events, CI pipelines, and Temporal orchestrations; outputs actionable insights in PR comments or dashboards.

Quick Start

Configure the pr-analysis skill in your PR workflow to automatically analyze a pull request and post a structured report with recommended fixes.

Frequently Asked Questions about pr-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub pull request reviews for code quality and security?

Automated pull request reviews analyze code quality and security by hooking into GitHub PR events and CI pipelines to identify vulnerabilities, complexity, and performance issues. This skill automates that process and posts structured reports with actionable recommendations directly in PR comments.

Can I integrate automated PR analysis with CI/CD pipelines and Temporal Orchestration?

Automated PR analysis supports integration with GitHub Webhooks, CI/CD pipelines, and Temporal Orchestration. This enables durable, long-running analyses to evaluate code quality, security vulnerabilities, and performance impacts across enterprise repositories.

What is the best way to detect security vulnerabilities and performance impacts before merging a pull request?

Detecting security vulnerabilities and performance impacts before merging requires evaluating algorithm complexity, resource usage, and input validation gaps. This skill performs these checks during PR reviews, flagging access-control concerns and database query efficiency issues.

How does automated code review assess architectural impact in open-source repositories?

Automated code review assesses architectural impact by flagging breaking changes, new dependencies, and data model alterations. It evaluates code quality, readability, and adherence to standards across various languages and project sizes, from open-source to enterprise repositories.

Does automated static analysis work with various programming languages and project sizes?

Automated static analysis works across various programming languages and project sizes, from open-source to enterprise repositories. It identifies code smells, complexity issues, and security vulnerabilities, surfacing actionable insights in PR comments and dashboards.

Why use Temporal Orchestration for long-running pull request analysis?

Temporal Orchestration provides durable execution for long-running pull request analysis workflows. It ensures reliable evaluation of complex code quality, security vulnerabilities, and performance implications in large enterprise repositories without timing out.