Install
$ agentstack add skill-mec07-claude-skills-reviewpr ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Customization
Before executing, check for user customizations at: ~/.claude/PAI/USER/SKILLCUSTOMIZATIONS/ReviewPR/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)
You MUST send this notification BEFORE doing anything else when this skill is invoked.
- Send voice notification:
``bash curl -s -X POST http://localhost:8888/notify \ -H "Content-Type: application/json" \ -d '{"message": "Running the ReviewPR workflow to review pull request"}' \ > /dev/null 2>&1 & ``
- Output text notification:
`` Running the **Review** workflow in the **ReviewPR** skill... ``
ReviewPR
Comprehensive pull request review that creates a pending GitHub review with inline comments on the actual diff lines. The user controls submission — this skill creates the review in PENDING state so the user can:
- Go to the PR in GitHub
- See inline comments in context on the diff
- Edit, delete, or add to the comments
- Submit the review when satisfied
How It Works
- Fetches PR diff and project CLAUDE.md files for context
- Analyses changes using parallel specialist agents for large PRs (bug hunter, guidelines checker, security reviewer, git history checker)
- Scores every finding on 0-100 confidence scale — only surfaces issues with confidence >= 80
- Creates a
PENDINGreview via GitHub API with inline comments on specific diff lines - Pending reviews are only visible to the review author until submitted
Key Design Decisions
- Collaborative tone — comments read like spoken English from a teammate, not a report. No headings, no bold severity labels, no em dashes. Questions and suggestions, never demands.
- Emoji intent signals — each comment starts with an emoji (💭 ❓ 👍 🔧 ⛏️ etc.) per the code review emoji guide convention, so the author instantly knows the intent.
- Confidence scoring filters noise — no pedantic nits, no false positives, no pre-existing issues
- CLAUDE.md awareness — checks changes against project-specific rules, not just generic quality
- Positive framing — acknowledges what's well done generously. If something looks wrong, asks questions to understand the author's reasoning first.
- GitHub permalinks — links use full SHA for permanent references
Companion Skills
ReviewPR is the write side of PR work — it produces a pending review. For read-only PR context, use the FetchPR skill, which is the dedicated counterpart:
| Need | Skill | Why | |------|-------|-----| | Brief me on a PR / pull metadata, CI, reviewer states | FetchPR (Full workflow) | Read-only, fast | | Pull existing review comments / "what did X say" | FetchPR (Comments workflow) | Surfaces resolved/outdated state, splits inline threads vs review summaries | | Fetch the diff (especially large ones) | FetchPR (Diff workflow) | --save flag avoids dumping huge diffs into context | | Critique code without posting to GitHub | CodeReview | Writes findings into the conversation, not the PR | | Post a pending review with inline comments | ReviewPR (this skill) | Creates GitHub-side review |
The Review workflow below uses FetchPR's tools internally for fetching PR data — see Steps 1-3 in Workflows/Review.md.
Workflow Routing
| Workflow | Trigger | File | |----------|---------|------| | Review | "review PR", PR number, "check this PR" | Workflows/Review.md |
Examples
Example 1: Review a PR by number
User: "/ReviewPR 5001"
-> Detects repo from git remote
-> Fetches PR metadata and diff
-> Analyzes all changes (parallel agents for large PRs)
-> Creates PENDING review with inline comments on diff lines
-> Shows summary in conversation
-> User goes to GitHub to review, edit, and submit
Example 2: Review current branch's PR
User: "/ReviewPR"
-> Detects current branch, finds associated PR
-> Same analysis and pending review flow
Example 3: Review with context
User: "/ReviewPR 42 — this is a database migration"
-> Uses context to focus analysis on migration safety
-> Inline comments prioritize data integrity, rollback, schema issues
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mec07
- Source: mec07/claude_skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.