skills.rest
OneKeyHQ
OneKeyHQOFFICIAL
Explore all skills by this author →
Website𝕏@OneKeyHQGitHub

pr-review

Review pull request diffs for security risks and vulnerabilities.

2.4k|527|Updated Nov 22, 2021
Search Tags:#security#dependencies#supply-chain#privacy#code-review#PII#pr-review
One-click install
npx skills add https://github.com/OneKeyHQ/app-monorepo --skill pr-review-onekeyhq
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pr-review
Source: https://github.com/OneKeyHQ/app-monorepo/tree/main/.claude/skills/pr-review
Command: npx skills add https://github.com/OneKeyHQ/app-monorepo --skill pr-review-onekeyhq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a security-first PR review checklist to help reviewers focus on risk areas when evaluating diffs/PRs, especially changes involving authentication, networking, sensitive data, or dependency/lockfile updates. Focus on secret/PII leakage risk, supply-chain risk (npm + node_modules inspection), cross-platform architecture (extension/mobile/desktop/web), and React performance (hooks + re-render hotspots). Avoid UI style nitpicks.

Core Features & Use Cases

  • Security-first scope: Prioritize secrets, PII, and privacy in PR diffs.
  • AuthN / AuthZ checks: Ensure authentication/authorization boundaries are correct and cannot be bypassed.
  • Dependency & supply-chain review: Inspect changes to dependencies and lockfiles for potential risks.
  • Cross-platform considerations: Review across extension/mobile/desktop/web layers.

Quick Start

When reviewing a PR, run the pr-review skill to generate a safety-focused diff analysis and remediation checklist.