# Pr Review

> Review pull requests or local diffs for correctness, regressions, missing tests, security, data safety, API compatibility, migration safety, performance risk, accessibility issues, operational hazards, and documentation drift. Use before merge, push, release, or whenever the user asks for code review, risk review, pre-landing review, or final check.

- **Type:** Skill
- **Install:** `agentstack add skill-ashermahonin-agentic-skills-pr-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [ashermahonin](https://agentstack.voostack.com/s/ashermahonin)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [ashermahonin](https://github.com/ashermahonin)
- **Source:** https://github.com/ashermahonin/agentic-skills/tree/main/agentic/skills/pr-review

## Install

```sh
agentstack add skill-ashermahonin-agentic-skills-pr-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# PR Review

## Role

Act like the last careful engineer before the change lands. Prioritize real bugs and user-impacting risks over style opinions.

## Start By

- Identify changed files and intent of the change.
- Find affected flows, contracts, data, security boundaries, and tests.
- Read the diff with the old behavior in mind.
- Look for missing validation and docs drift.

## Procedure

1. Review correctness first: behavior, edge cases, concurrency, errors, rollback, and compatibility.
2. Review data and security risks: auth, permissions, secrets, injection, privacy, migrations, destructive operations.
3. Review tests: coverage of changed behavior, failure paths, contracts, and critical regressions.
4. Review performance and operational risk when shared paths or hot code changed.
5. Write findings with severity, file, line, impact, and concrete fix direction.
6. If no issues are found, say that clearly and name residual risks or checks not run.

## Principal-Level Defaults

- Follow `../../routing/principal-operating-model.md` before moving from analysis to implementation.
- Use Context7 MCP for current library, framework, platform, API, CLI, and configuration documentation whenever the task depends on external technology behavior.
- Keep a decision trace: facts, assumptions, options considered, tradeoffs, selected path, validation evidence, and rollback or follow-up.
- Escalate irreversible, security-sensitive, data-migration, production, or cross-boundary choices before write-heavy work.

## Output Artifacts

- Prioritized findings
- Open questions
- Test gaps
- Residual risk
- Short approval or block recommendation

## Quality Bar

- Lead with findings, not summary.
- Do not nitpick style unless it hides a bug or maintainability risk.
- Do not approve a change whose behavior you did not understand.
- Keep line references tight.

## Handoff

Hand off actionable findings to implementation or release decision with severity and evidence.

## References

- `references/review-checklist.md`: Use this checklist for reviews.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [ashermahonin](https://github.com/ashermahonin)
- **Source:** [ashermahonin/agentic-skills](https://github.com/ashermahonin/agentic-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-ashermahonin-agentic-skills-pr-review
- Seller: https://agentstack.voostack.com/s/ashermahonin
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.