Install
$ agentstack add skill-agentjido-jido-skills-pr-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
PR Review
Purpose
Review a pull request without changing code. This skill may update review-state labels, but it must not commit, push, or fix the PR.
When To Use
Use this skill when asked to:
- Review a PR
- Check if a PR is ready to merge
- Analyze code quality, test coverage, CI, or conflicts
- Apply
ready_to_mergeorneeds_workbased on review results
Use pr-harden instead when the user wants you to fix a needs_work PR.
Requirements
gitghCLI authenticated for PR metadata, checks, labels, and diffs- Clean local worktree if checking out the PR locally
Workflow
1. Identify the PR
Accept a PR URL, PR number, or current branch. Fetch:
gh pr view --json title,body,author,baseRefName,headRefName,labels,reviewDecision,mergeable,statusCheckRollup
gh pr checks
gh pr diff --name-only
Record the title, author, base branch, changed files, labels, check status, and mergeability.
2. Inspect the diff
Use gh pr diff for small PRs. For large PRs, inspect file by file. If local checkout is needed, prefer:
gh pr checkout --detach
Do not use a writable branch unless the user explicitly asks for fixes.
3. Review in priority order
Prioritize findings in this order:
- Correctness bugs and behavior regressions
- Missing or weak regression coverage for changed behavior
- Merge conflicts or dirty merge state against
main - Failing or missing required GitHub CI
- Public API, docs, or README drift caused by the PR
- Security or secret-handling risks
Do not block on formatting that project tooling will handle. Do not nitpick subjective preferences unless they create maintenance or correctness risk.
4. Check Elixir and Jido concerns
Inspect for:
- Pattern matching and function clauses where they simplify control flow
- Clear
{:ok, value}/{:error, reason}boundaries - No swallowed errors at system boundaries
- Public functions documented and specified when repo convention expects it
- Tests focused on behavior, not implementation details
- Jido actions kept pure unless the repo explicitly uses another pattern
- Runtime work delegated to directives, supervisors, or documented boundaries
5. Decide readiness label
Apply ready_to_merge only when all are true:
- No blocking correctness or regression findings
- Test coverage is adequate for the PR risk
- Required GitHub CI is green
- PR is merge-clean with the base branch
- No unresolved blocking review comments remain
Apply or keep needs_work when any blocker remains.
Use:
gh pr edit --add-label ready_to_merge --remove-label needs_work
gh pr edit --add-label needs_work --remove-label ready_to_merge
If labels are unavailable or permission is missing, report the intended label change instead of failing the whole review.
Output Expectations
Lead with findings, ordered by severity. Use file and line references whenever possible.
Use this structure:
## Findings
- [P1] path/to/file.ex:123 - Blocking issue and impact.
- [P2] path/to/file_test.exs:45 - Missing coverage or risky behavior.
## Readiness
Verdict: ready_to_merge | needs_work
CI: passing | failing | pending | unavailable
Merge state: clean | conflicted | unknown
Label update: applied | intended but not applied | not needed
## Notes
Short context, assumptions, or non-blocking suggestions.
If there are no findings, say that clearly and still report residual test or CI risk.
Guardrails
- Do not edit files.
- Do not commit or push.
- Do not merge the PR.
- Do not mark
ready_to_mergewhen CI is failing, mergeability is conflicted,
or blocking findings remain.
- If review requires a code change, stop at findings and recommend
pr-harden.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: agentjido
- Source: agentjido/jido-skills
- License: Apache-2.0
- Homepage: https://agentskills.io
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.