asonas/pr-review
.claude/skills/pr-review/SKILL.md
Review GitHub Pull Requests. When given a PR URL, fetches diff and comments using gh command, then performs objective and critical code review.
$ install --global
skillsauthnpx skillsauth add asonas/dotfiles pr-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 5:26 PM86.9s1 file scanned
SKILL.md
- name:
- pr-review
- description:
- Review GitHub Pull Requests. When given a PR URL, fetches diff and comments using gh command, then performs objective and critical code review.
- argument-hint:
- <PR_URL>
- allowed-tools:
- Bash(ghro:*), WebFetch, WebSearch
- user-invocable:
- true
- context:
- fork
PR Review Skill
Perform objective code reviews for GitHub Pull Requests.
Principles
Objectivity and Critical Stance
- No flattery: Skip pleasantries like "looks good" or "great work". Focus on issues and improvements
- Evidence-based: Base feedback on actual code behavior and official documentation, not assumptions
- Constructive: Provide specific improvement suggestions, not just criticism
Review Perspectives
- Correctness: Check for bugs, logic errors, and unhandled edge cases
- Design: Evaluate abstraction, separation of concerns, and dependencies
- Security: Identify vulnerabilities (injection, auth issues, etc.)
- Performance: Look for N+1 queries, unnecessary computation, memory leaks
- Readability: Assess naming, structure, and comments
- Testing: Verify adequate test coverage for changes
Procedure
1. Fetch PR Information
# Get PR overview
gh pr view <PR_URL> --json title,body,author,baseRefName,headRefName,additions,deletions,changedFiles
# Get diff
gh pr diff <PR_URL>
# Get existing comments
gh pr view <PR_URL> --comments
# Get review comments (inline comments on files)
gh api repos/{owner}/{repo}/pulls/{pr_number}/comments
2. Analyze Changes
- List changed files and understand scope
- Understand the purpose from PR description
- Identify impact areas
3. Technical Verification
- Check official documentation for libraries/APIs used (use WebSearch/WebFetch)
- Compare against best practices
- Verify consistency with existing codebase
4. Create Review Comments
Review Output Format
## Summary
[1-2 sentence summary of PR changes]
## Critical Issues
[Security vulnerabilities, data loss risks, serious bugs that must be fixed before merge]
## Improvement Suggestions
[Better implementation approaches, performance improvements, readability enhancements]
## Questions
[Points requiring clarification on design intent or requirements]
## Minor Issues
[Typos, formatting, naming - issues that don't block merge]
Notes
- For large PRs, focus on the most important files
- Check existing review comments to avoid duplicates
- Reference related issues or discussions if available
Command Examples
# Get full PR information
gh pr view https://github.com/owner/repo/pull/123
# Get diff for specific file only
gh pr diff https://github.com/owner/repo/pull/123 -- path/to/file.ts
# Post comment on PR
gh pr comment https://github.com/owner/repo/pull/123 --body "Review comment"
# Submit PR review
gh pr review https://github.com/owner/repo/pull/123 --comment --body "Review content"
Related Skills
asonas/wrapup
data-ai
VerifiedTrustedCommunity
Summarize the day's work and append to the daily note in Obsidian.
5SKILL.mdUpdated Apr 16, 2026
asonas/recall
data-ai
VerifiedTrustedCommunity
memory-vector と memory-graph を横断検索して過去の記憶を呼び出す。「思い出して」「覚えていますか」「前に話した」等の記憶呼び出し時に使う。
5SKILL.mdUpdated Apr 16, 2026
asonas/morning
tools
VerifiedTrustedCommunity
Use when starting the day. Organizes tasks, calendar, and context from previous sessions, then coaches through blockers on Linear issues via interactive dialogue.
5SKILL.mdUpdated Apr 16, 2026
asonas/linear-issue
testing
VerifiedTrustedCommunity
Create Linear issues following the Linear Method principles. Use when the user wants to create an issue, task, or ticket in Linear. Enforces clear task descriptions instead of user stories.
5SKILL.mdUpdated Apr 16, 2026