.claude/skills/review-pr/SKILL.md
Review GitHub pull requests for the Gumroad codebase against project guidelines, code quality, and correctness. Use when the user wants to review a PR, check new comments on a PR, provide feedback on code changes, or asks about PR quality. Triggers on: "review PR", "review this PR", "check PR #NNN", any GitHub PR URL (e.g. https://github.com/antiwork/gumroad/pull/NNNN), "what's new on the PR", "check comments", "review the diff", "give feedback on this PR", or requests to evaluate code changes in a pull request.
npx skillsauth add antiwork/gumroad review-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Review pull requests for code quality, correctness, and CONTRIBUTING.md compliance.
Scope boundary: This skill evaluates how the code is written. For evaluating whether the PR solves the right problem, use the issue-detective skill instead.
gh pr view <number> --repo antiwork/gumroad
gh pr diff <number> --repo antiwork/gumroad
gh pr view <number> --repo antiwork/gumroad --comments
gh api repos/antiwork/gumroad/pulls/<number>/comments
Also read CONTRIBUTING.md from the repo root — it's the source of truth for all guideline checks.
Note PR status (draft, closed, merged). Skip review if merged or closed unless user insists.
From the diff and description, determine:
Read key modified files in full when the diff alone is insufficient to understand context.
Run these review passes on the diff:
Pass 1 — Bugs and Logic Errors Wrong conditionals, missing edge cases, race conditions, nil/null handling, off-by-one errors, security vulnerabilities (injection, XSS, CSRF). Focus on code paths introduced or modified by the PR.
Pass 2 — CONTRIBUTING.md Compliance Check the diff against every applicable rule in CONTRIBUTING.md (code standards, naming conventions, testing standards, Sidekiq patterns, PR structure, etc.). The file is the single source of truth — do not maintain a separate checklist.
Pass 3 — Code Clarity Evaluate readability and maintainability of new/modified code. See references/review-guidance.md for what to flag vs what to leave alone. The goal is clear, explicit code — not clever or compact code.
Pass 4 — PR Structure AI disclosure, description quality (explains why), before/after for UI changes, test results, appropriate size — all per CONTRIBUTING.md.
Assign each finding a confidence score (0–100): how likely is this a genuine problem?
Keep findings >= 80. Drop findings below 80.
See references/review-guidance.md for noise filtering rules and severity levels.
## Summary
[1-2 sentences: what the PR does and overall assessment]
## Issues
### [critical|important|suggestion] Title
**File:** `path/to/file.rb:NN`
**Confidence:** NN/100
[Concise explanation and fix suggestion if straightforward.]
...
## Checklist
[CONTRIBUTING.md items that are missing — e.g., no AI disclosure, no before/after, missing tests]
## Verdict
[approve / request-changes / comment-only — with brief justification]
Write the review to gh-pr-review.md in the repo root. Do NOT stage or commit. Do NOT post to GitHub.
When the user asks to re-check a PR (new comments, updated diff):
gh pr view <number> --repo antiwork/gumroad --comments
gh api repos/antiwork/gumroad/pulls/<number>/comments
gh pr diff <number> --repo antiwork/gumroad
Focus on what changed since the last review. Don't repeat prior findings unless still unaddressed.
gh read-only only. Never approve, comment on, or request changes via CLI.testing
Stage and commit changes with a clear, concise commit message.
documentation
Generate a PR description for the current branch and its linked GitHub issue. Outputs to an unstaged markdown file in the repo root. Never creates or updates PRs. Triggers on: "generate PR description", "write PR description", "PR description", "describe this PR", "draft PR", or after completing implementation work when the user wants to prepare a PR. Also use when the user says "pr", "pull request description", or asks to summarize their branch changes for review.
development
Draft GitHub issues for the Gumroad codebase. Outputs to an unstaged markdown file in the repo root. Never creates issues on GitHub. Triggers on: "create issue", "write issue", "draft issue", "write a bug report", "file an issue", "create a ticket", or when the user describes a problem or feature they want to turn into a GitHub issue.
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.