Agent skill · Security

pr-review-expert

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

Alireza Rezvani23,369★ · +428/wk · 1 repos on radarProfile →
claude-codecodexcursorMIT
Install
npx skills add alirezarezvani/claude-skills --skill pr-review-expert --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 12 KB
Bundled scripts: none
Path: engineering/skills/pr-review-expert/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 23,791 · +422 this week
Language: Python
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# PR Review Expert **Tier:** POWERFUL **Category:** Engineering **Domain:** Code Review / Quality Assurance --- ## Overview Structured, systematic code review for GitHub PRs and GitLab MRs. Goes beyond style nits — this skill performs blast radius analysis, security scanning, breaking change detection, and test coverage delta calculation. Produces a reviewer-ready report with a 30+ item checklist and prioritized findings. --- ## Core Capabilities - **Blast radius analysis** — trace which files, services, and downstream consumers could break - **Security scan** — SQL injection, XSS, auth bypass, secret exposure, dependency vulns - **Test coverage delta** — new code vs new tests ratio - **Breaking change detection** — API contracts, DB schema migrations, config keys - **Ticket linking** — verify Jira/Linear ticket exists and matches scope - **Performance impact** — N+1 queries, bundle size regression, memory allocations --- ## When to Use - Before merging any PR/MR that touches shared libraries, APIs, or DB schema - When a PR is large (>200 lines changed) and needs structured review - Onboarding new contributors whose PRs need thorough feedback - Security-sensitive code paths (auth,

What's inside
Steps it walks through
  1. Overview
  2. Core Capabilities
  3. When to Use
  4. Fetching the Diff
  5. GitHub (gh CLI)
  6. GitLab (glab CLI)
  7. Workflow
  8. Step 1 — Fetch Context
  9. Step 2 — Blast Radius Analysis
  10. Step 3 — Security Scan
  11. Step 4 — Test Coverage Delta
  12. Step 5 — Breaking Change Detection
  13. Step 6 — Performance Impact
  14. Ticket Linking Verification
Commands it runs
View diff in terminal
gh pr diff <PR_NUMBER>
Get PR metadata (title, body, labels, linked issues)
gh pr view <PR_NUMBER> --json title,body,labels,assignees,milestone
List files changed
gh pr diff <PR_NUMBER> --name-only
Check CI status
gh pr checks <PR_NUMBER>
Download diff to file for analysis
gh pr diff <PR_NUMBER> > /tmp/pr-<PR_NUMBER>.diff
More from claude-skills
All skills →
About this skill
What does the pr-review-expert skill do?

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

How do I install it?

Run `npx skills add alirezarezvani/claude-skills --skill pr-review-expert --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going