# Review Pr

> Read a pull request diff like a senior engineer. Flag risk, suggest tests, point out missing edge cases. Use when the user asks to "review PR", "look at this diff", or pastes a GitHub PR URL.

- **Type:** Skill
- **Install:** `agentstack add skill-spencerpauly-skills-repo-review-pr`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [spencerpauly](https://agentstack.voostack.com/s/spencerpauly)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [spencerpauly](https://github.com/spencerpauly)
- **Source:** https://github.com/spencerpauly/skills-repo/tree/main/skills/review-pr
- **Website:** https://skillsovermcp.com

## Install

```sh
agentstack add skill-spencerpauly-skills-repo-review-pr
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Review PR

Read a diff the way a thoughtful senior engineer would. Optimize for **catching bugs and missing tests**, not for nitpicks.

## When to use

- User pastes a GitHub PR URL.
- User says "review this PR", "what do you think of this diff", "ship-check this".

## Steps

1. **Fetch the diff.** If a URL was given, run `gh pr diff ` (or `gh pr view  --json files,title,body`). If it's a local branch, `git diff main...HEAD`.

2. **Read the description first.** What is this PR trying to accomplish? Hold that intent in mind for the rest of the review.

3. **Walk the diff in this order:**
   1. New files / new entry points (highest risk).
   2. Modified business logic.
   3. Tests.
   4. Configuration, dependencies, infra.

4. **For each substantive change, check the checklist** in `references/checklist.md`.

5. **Write the review** in this shape:

   ```markdown
   ## Summary
   

   ## Must-fix
   - [ ] 

   ## Should-fix
   - [ ] 

   ## Nits
   - [ ] 

   ## Questions
   - 
   ```

6. **Default posture: approve unless there's a Must-fix.** Senior reviewers unblock; they don't gatekeep.

## Don't

- Don't comment on formatting if the repo has a formatter — that's the linter's job.
- Don't suggest renames unless the existing name is genuinely misleading.
- Don't ask the author to "consider" something — either it's a Must-fix, a Should-fix, or it's not in the review.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [spencerpauly](https://github.com/spencerpauly)
- **Source:** [spencerpauly/skills-repo](https://github.com/spencerpauly/skills-repo)
- **License:** MIT
- **Homepage:** https://skillsovermcp.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-spencerpauly-skills-repo-review-pr
- Seller: https://agentstack.voostack.com/s/spencerpauly
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.