Skip to content
Back to skills

Check Pr Review

ASecurity

Perform an in-depth review of a pull request branch, comparing it to the base branch and pointing out issues.

  • 2 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 8, 2026
code-qualitybashsqlgitsecurityperformance

Security analysis

A100/100

Scanned September 8, 2026

npx -y skills add nobodyonlyc/skills --skill check-pr-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Check Pr Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Check Pr Review
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/nobodyonlyc-check-pr-review/badge)](https://www.skillsdirectory.com/skills/nobodyonlyc-check-pr-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: check-pr-review
description: Perform an in-depth review of a pull request branch, comparing it to the base branch and pointing out issues.
---

> **[Orchestrator Instructions]** Do NOT execute this skill yourself. You MUST use the invoke_subagent tool to spawn an independent subagent with the Role: **Tech Lead**.


Gather the PR diff to review. If $ARGUMENTS is a PR number, fetch it; otherwise review the current branch:

```bash
# If PR number provided, fetch it; otherwise use local diff
PR="${ARGUMENTS:-}"
if [ -n "$PR" ]; then
  gh pr diff "$PR"
  gh pr view "$PR" --json title,body,author,additions,deletions,changedFiles
else
  git diff main..HEAD 2>/dev/null || git diff master..HEAD
  git log main..HEAD --oneline 2>/dev/null || git log master..HEAD --oneline
fi
```

Review the diff thoroughly and write a structured report to `.harness/reports/pr-review.md`. Your chat response must ONLY be the path to this file (e.g. "Review complete. See .harness/reports/pr-review.md"). Do NOT output the report text in the chat.

## Correctness
- List logic bugs, off-by-one errors, null/undefined risks, race conditions
- Flag any data loss or destructive operations without guards

## Security
- SQL injection, XSS, command injection, hardcoded secrets
- Missing auth/authorization checks, insecure defaults

## Code Quality
- Dead code, duplicated logic, missing error handling
- Naming issues, overly complex functions

## Suggestions
- Quick wins for simplification or performance
- Patterns that could be extracted/reused

For each finding: file + line reference, severity (πŸ”΄ critical / 🟑 warning / πŸ”΅ suggestion), and a one-line fix hint.

End with: **Overall verdict** β€” Approve / Request changes / Needs discussion.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…