project/.claude/skills/pr-review/SKILL.md
Review pull requests with comprehensive analysis covering code quality, security vulnerabilities, performance implications, test coverage, documentation completeness, and architectural impact. Use when reviewing PRs, conducting code reviews, evaluating merge readiness, or assessing change impact across the codebase.
npx skillsauth add kcenon/claude-config pr-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Review pull requests with comprehensive analysis.
/pr-review [PR_NUMBER]
PR_NUMBER: Pull request number to review
| Option | Default | Description | |--------|---------|-------------| | --depth | standard | Review depth (quick, standard, thorough) | | --focus | all | Focus area (security, performance, all) |
When reviewing a PR, analyze the following:
| Level | Criteria | Examples | Required Action | |-------|----------|----------|-----------------| | Critical | Security risk, data loss, crashes | SQL injection, null pointer, auth bypass | Must fix before merge | | Major | Bugs, significant performance issues | Logic errors, N+1 queries, memory leaks | Should fix | | Minor | Style, minor optimization | Naming convention, redundant code | Nice to have | | Info | Suggestions, observations | Alternative approaches, documentation | Optional |
| Recommendation | Criteria | |----------------|----------| | APPROVE | No Critical or Major issues | | REQUEST_CHANGES | Any Critical issue OR ≥3 Major issues | | NEEDS_DISCUSSION | Architectural concerns, trade-off decisions |
Provide feedback in this format:
## PR Review: #[NUMBER]
### Summary
[Brief summary of the PR]
### Findings
#### Critical
- [List critical issues]
#### Suggestions
- [List suggestions for improvement]
#### Positive
- [List positive aspects]
### Recommendation
[APPROVE / REQUEST_CHANGES / NEEDS_DISCUSSION]
| Requirement | Error Message | Resolution |
|-------------|---------------|------------|
| gh CLI installed | "GitHub CLI is not installed" | Install from https://cli.github.com |
| gh authenticated | "Not authenticated with GitHub" | Run gh auth login |
| Repository access | "No access to repository" | Verify permissions or request access |
| Error Condition | Behavior | User Action |
|-----------------|----------|-------------|
| PR not found | Report "PR #X not found" and suggest gh pr list | Verify PR number exists |
| PR already merged | Report "PR #X is already merged - showing historical review" | No action needed |
| PR closed | Report "PR #X is closed without merge" | Reopen PR if review still needed |
| No PR for branch | Report "No open PR found for current branch" and show how to create | Create PR with gh pr create |
| Large PR (>1000 lines) | Warn about review complexity, offer to split by file type | Consider splitting PR |
| API rate limit | Report "GitHub API rate limit exceeded, resets at [time]" | Wait or authenticate with different token |
| Network timeout | Report "Cannot reach GitHub - check connection" | Verify internet connection |
testing
Comprehensive security audit covering OWASP Top 10, input validation, authentication, authorization, secret management, dependency vulnerabilities, and injection attack prevention. Use when reviewing security posture, implementing auth flows, handling user input, auditing dependencies, conducting penetration test prep, or before production deployment.
development
Provides workflow guidelines for problem-solving, git commits, GitHub issues, PRs, build management, and testing. Use when planning tasks, creating issues, submitting PRs, managing builds, or writing tests.
development
Performance optimization analysis: CPU/memory profiling, caching strategies, database query optimization, connection pooling, concurrency patterns, memory leak detection, and throughput improvement. Use when code is slow, memory usage is high, latency needs reduction, or conducting performance reviews before release.
tools
Comprehensive git repository status with actionable insights. Shows working directory, branch info, recent activity, and potential issues.