openonion/review-pr
connectonion/cli/co_ai/skills/builtin/review-pr/SKILL.md
Review GitHub pull requests. Use when user says "review PR", "review pull request", or "/review-pr".
$ install --global
skillsauthnpx skillsauth add openonion/connectonion review-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 9:12 AM169.9s1 file scanned
SKILL.md
- name:
- review-pr
- description:
- Review GitHub pull requests. Use when user says "review PR", "review pull request", or "/review-pr".
PR Review Skill
Review a GitHub pull request for code quality, correctness, and best practices.
Instructions
-
Get PR information:
- If no PR number given:
gh pr listto show open PRs - With PR number:
gh pr view <number>for details - Get diff:
gh pr diff <number>
- If no PR number given:
-
Analyze the changes:
- What does this PR do?
- Does the code follow project conventions?
- Are there any bugs or issues?
- Is the code well-tested?
- Are there security concerns?
-
Provide structured review:
- Overview of what the PR does
- Code quality analysis
- Specific suggestions with line references
- Potential issues or risks
- Whether to approve, request changes, or comment
Review Checklist
- [ ] Code correctness
- [ ] Following project conventions
- [ ] Error handling
- [ ] Performance implications
- [ ] Test coverage
- [ ] Security considerations
- [ ] Documentation updates needed
Output Format
## PR Review: #<number> - <title>
### Summary
<One paragraph about what this PR does>
### What's Good
- Point 1
- Point 2
### Suggestions
1. **File:line** - Description of suggestion
2. **File:line** - Description of suggestion
### Concerns
- Any potential issues
### Recommendation
- [ ] Approve
- [ ] Request Changes
- [ ] Comment only
Example
# Get PR details
gh pr view 123
# Get the diff
gh pr diff 123
# Then analyze and provide review
Related Skills
openonion/ship-feature
testing
VerifiedTrustedCommunity
Ship a feature end-to-end — update tests, docs, docs-site, then release to PyPI. Use when user says "ship", "ship feature", "release", or asks to publish a new version.
1,039SKILL.mdUpdated May 9, 2026
openonion/ship-feature
testing
VerifiedTrustedCommunity
Ship a feature end-to-end — update tests, docs, docs-site, then release to PyPI. Use when user says "ship", "ship feature", "release", or asks to publish a new version.
1,039SKILL.mdUpdated May 9, 2026
openonion/commit
development
VerifiedTrustedCommunity
Create git commits with good messages. Use when user says "commit", "create commit", or asks to commit changes.
841SKILL.mdUpdated Apr 17, 2026
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026