pr-review

Review pull requests and branch diffs for security vulnerabilities and correctness issues.

16|2|Updated May 26, 2026
One-click install
npx skills add https://github.com/mindfortai/security-skills --skill pr-review-mindfortai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pr-review
Source: https://github.com/mindfortai/security-skills/tree/main/skills/pr-review
Command: npx skills add https://github.com/mindfortai/security-skills --skill pr-review-mindfortai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities and correctness issues in pull requests or branch diffs, ensuring the codebase remains secure and functional.

Core Features & Use Cases

  • Security Review: Detects security vulnerabilities such as authentication bypasses, data leaks, and injection flaws.
  • Correctness Check: Identifies issues like broken API contracts, schema mismatches, and operational regressions.
  • Automated Reporting: Generates a CSV report with findings, including severity, confidence, and potential fixes.

Quick Start

Run the pr-review skill on your pull request to automatically review it for security and correctness issues.

Frequently Asked Questions about pr-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a pull request for security vulnerabilities and correctness issues?

To check a pull request for security vulnerabilities and correctness issues, run an automated review that applies threat modeling and code analysis against security and correctness standards.

What is branch diff analysis for code review?

Branch diff analysis for code review is the process of evaluating code changes between branches to identify security vulnerabilities, broken API contracts, and schema mismatches.

Can I automatically generate a report of security findings from a code review?

Yes, you can automatically generate a report of security findings from a code review, producing a CSV file that details severity, confidence levels, and potential fixes for each issue.

Does automated pull request review detect authentication bypasses and data leaks?

Yes, automated pull request review detects authentication bypasses, data leaks, and injection flaws by applying threat modeling and comparing code changes against security standards.

When do I need to use automated security analysis on code changes?

You need to use automated security analysis on code changes when integrating pull requests into your software development workflow to ensure continuous code quality and security compliance.