pr-review

Reviews branch diffs against conventions, tests, security, and performance before merge.

1|Updated Jul 20, 2026
One-click install
npx skills add https://github.com/gonzoblasco/ai-developer-stack --skill pr-review-gonzoblasco
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pr-review
Source: https://github.com/gonzoblasco/ai-developer-stack/tree/main/tools-automation/pr-review
Command: npx skills add https://github.com/gonzoblasco/ai-developer-stack --skill pr-review-gonzoblasco

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Merging code without a thorough review lets bugs, security flaws, and convention violations slip into the main branch. This Skill acts as an automated second pair of eyes, auditing the full branch diff (git diff main...HEAD) before consolidation. ## Core Features & Use Cases - Multi-Dimensional Audit: Checks functional correctness and edge cases, test coverage, architectural conventions, early-stage security (secrets, injections, auth guards), and performance issues like N+1 queries. - Blocking vs. Non-Blocking Findings: Classifies issues as blocking (missing tests on critical logic, hardcoded credentials) or optional improvements, so teams know exactly what must be fixed. - Strict Report Template: Produces a standardized Markdown report with positives, blocking findings, suggestions, technical debt notes, and a final APPROVED / REQUEST CHANGES verdict. - Use Case: Before merging a feature branch that adds a new API endpoint, run this review to catch a missing auth middleware, an unhandled promise rejection, and a residual console.log in one structured report. ## Quick Start Review the diff of my current branch against main and give me a pre-merge report with blocking findings and a final verdict.

Frequently Asked Questions about pr-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request diff before merging?▼

Run a pre-merge review on the full branch diff (git diff main...HEAD) checking correctness, test coverage, conventions, security, and performance. This Skill automates that audit and returns a structured report with a final APPROVED or REQUEST CHANGES verdict.

What should an automated code review check for?▼

An automated review should check unhandled error paths, race conditions, missing tests on core logic, leftover debug code, hardcoded secrets, unsanitized inputs, missing auth guards, and performance issues like N+1 database queries.

Which code review findings should block a merge?▼

Blocking findings include security issues like hardcoded credentials or missing auth validation, build-breaking errors, severe logic bugs, and missing test coverage on critical business logic. Style and minor optimization suggestions should not block the merge.

Can this review detect hardcoded secrets and API keys?▼

Yes, the security dimension explicitly prohibits hardcoded credentials, tokens, and API keys in the diff. It also verifies that user inputs are typed, validated, or sanitized before reaching databases or system operations.

What are the limitations of an automated pre-merge review?▼

An automated review analyzes the diff statically and cannot execute the code or verify runtime behavior in production-like environments. It complements but does not replace manual architectural judgment, integration testing, and staging validation.