pr-review

Review GitHub pull requests for correctness, security, and maintainability issues.

7|1|Updated Jul 27, 2021
One-click install
npx skills add https://github.com/podcodar/webapp --skill pr-review-podcodar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pr-review
Source: https://github.com/podcodar/webapp/tree/main/.agents/skills/pr-review
Command: npx skills add https://github.com/podcodar/webapp --skill pr-review-podcodar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps teams catch issues in pull requests early by providing a structured review focused on correctness, security, maintainability, and performance.

Core Features & Use Cases

  • Systematic PR review: Evaluates each changed file in context to produce actionable feedback.
  • Security and best-practice checks: Flags injection risks, secret exposure, and missing authorization/authentication patterns.
  • Clear, severity-based responses: Labels findings as [blocker], [warning], or [suggestion] and recommends next steps with rationale.
  • Use Cases: Reviewing code changes in src/ and tests, validating documentation updates, and handling large PRs by triaging with diff stats.

Quick Start

Ask the AI to review the specified GitHub pull request URL and return a prioritized set of findings with severity labels and next-step recommendations.

Frequently Asked Questions about pr-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a GitHub pull request for security and maintainability issues?

To review a GitHub pull request, fetch the diff using the authenticated `gh` CLI, then evaluate changed files for correctness, security, and performance. The output is structured feedback with severity labels like [blocker] or [warning] and actionable next-step recommendations.

What is the best way to triage large pull requests with many file changes?

The best way to triage large pull requests is using diff stats to perform file-by-file evaluation across src, tests, and documentation. This method isolates critical security and correctness issues, returning a structured response with severity labels for actionable engineering feedback.

Do I need an authenticated GitHub CLI session to analyze a pull request diff?

Yes, you need an authenticated GitHub `gh` CLI session to analyze a pull request diff. The review process uses `gh pr view` and `gh pr diff` commands or URL-based diff fetching to securely retrieve changes and output prioritized feedback with severity labels.

Can I get automated code review feedback for my src and test files before merging?

Yes, you can get automated code review feedback for src and test files before merging. The review evaluates each changed file in context, labeling findings as [blocker], [warning], or [suggestion] to validate documentation updates and catch missing test coverage or security flaws.

How does automated pull request review handle secret exposure and injection risks?

Automated pull request review handles secret exposure and injection risks by performing security and best-practice checks across the diff. It flags these vulnerabilities with clear severity labels and recommends next steps with rationale to prevent insecure code from merging.