tmeister/pr-review
skills/pr-review/SKILL.md
Review a GitHub pull request, run targeted checks, and provide a decision-ready summary.
testing
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add tmeister/skills pr-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 9:03 PM1.8s1 file scanned
SKILL.md
- name:
- pr-review
- description:
- Review a GitHub pull request, run targeted checks, and provide a decision-ready summary.
PR Review
Use this skill to review a GitHub PR and summarize risks, tests, and recommendations.
Inputs
- Require a PR number or URL. If missing, ask for it.
- If the user provides a specific test command, use it.
Safety Rules
- Do not merge unless the user explicitly asks.
- Do not delete branches unless the user explicitly asks.
- Avoid destructive commands like
git reset --hard.
Workflow
-
Prerequisites
- Confirm
ghis installed and authenticated.
- Confirm
-
Collect PR data
gh pr view <PR> --json title,body,labels,assignees,state,url,createdAt,updatedAt,additions,deletions,changedFiles,commits,mergeable,draftgh pr view <PR> --json filesgh pr diff <PR>gh pr checks <PR>when available.
-
Checkout (optional)
- If tests or deeper inspection are needed, checkout the PR branch.
- Record the current branch first and return to it when done.
-
Run tests
- If no command is provided, infer a reasonable default or ask the user.
- Record command, exit status, and failures.
-
Review changes
- Summarize key changes by area.
- Identify risks: breaking changes, security, performance, migrations, missing tests.
- Call out large or cross-cutting changes.
-
Provide summary
- Use the summary template.
- End with a clear recommendation and any required follow-ups.
Related Skills
tmeister/write-post
documentation
VerifiedTrustedCommunity
Use when a JWT site content issue is ready for execution and you need to draft or finalize the post directly in jwt-site, keep the same draft PR moving, and sync HQ tracking.
SKILL.mdUpdated Apr 17, 2026
tmeister/wp-plugin-version
tools
VerifiedTrustedCommunity
Analyze changes and update WordPress plugin version references safely.
SKILL.mdUpdated Apr 17, 2026
tmeister/wp-plugin-tag
tools
VerifiedTrustedCommunity
Create, verify, list, or delete WordPress plugin version tags safely.
SKILL.mdUpdated Apr 17, 2026
tmeister/wp-plugin-changelog
tools
VerifiedTrustedCommunity
Generate a WordPress plugin changelog focused on user value and update readme.txt when requested.
SKILL.mdUpdated Apr 17, 2026