shenxingy/review-pr
configs/skills/review-pr/SKILL.md
AI checks out a PR into a worktree, runs the project's CI commands, and posts a structured review with execution evidence — parallel to OpenClaw's /review-pr
$ install --global
skillsauthnpx skillsauth add shenxingy/claude-code-kit review-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 13, 2026, 5:14 AM10.3s2 files scanned
SKILL.md
- name:
- review-pr
- description:
- AI checks out a PR into a worktree, runs the project's CI commands, and posts a structured review with execution evidence — parallel to OpenClaw's /review-pr
- when_to_use:
- review PR, code review pull request, PR feedback
- argument-hint:
- [PR_NUMBER_OR_URL]
- user_invocable:
- true
Review PR Skill
Checks out the PR into a worktree, discovers and runs the project's CI commands, writes a structured review (summary, evidence, risks, suggestions), and posts it as a PR comment via gh. The verdict is grounded in the Evidence section — tests that fail force ❌, and a review that couldn't execute the change never posts ✅.
Usage
/review-pr # Review the PR for the current branch
/review-pr 42 # Review PR #42
/review-pr https://github.com/owner/repo/pull/42
Related Skills
shenxingy/codex-orchestrate
development
VerifiedTrustedCommunity
Orchestrate a fleet of parallel `codex exec` workers with you (Claude Code) as the supervisor — spawn one per isolated git worktree, dispatch headless, verify each INDEPENDENTLY, PR/merge. The manual "codex-ultracode" pattern for fanning out real implementation, research, or review work onto Codex. Bakes in the hard gotchas (stdin blocking, background tracking, don't-trust-self-reports, writer isolation). Triggers on — orchestrate codex, codex workers, codex fleet, spawn codex, delegate to codex in parallel, manual ultracode, 开 codex 小弟, 派 codex worker — NOT for a single cross-vendor opinion (use the `second-opinion-codex` agent), NOT for web-UI worker decomposition (use `/orchestrate`).
8SKILL.mdUpdated Jul 16, 2026
shenxingy/worktree
development
VerifiedTrustedCommunity
Create and manage git worktrees for parallel Codex sessions
8SKILL.mdUpdated Jul 14, 2026
shenxingy/verify
development
VerifiedTrustedCommunity
Verify project behavior anchors — compilation, tests, and interaction checks after autonomous runs. NOT the Codex built-in /verify (which runs the app to observe a single change working) — this one walks the AGENTS.md "Features (Behavior Anchors)" list.
8SKILL.mdUpdated Jul 14, 2026
shenxingy/sync
documentation
VerifiedTrustedCommunity
End-of-session documentation sync — updates TODO.md and PROGRESS.md only (run /commit after to commit everything)
8SKILL.mdUpdated Jul 14, 2026