Pr Review Expert

Description

Structured, systematic code review for GitHub PRs and GitLab MRs. Goes beyond style nits — this skill performs blast radius analysis, security scanning, breaking change detection, and test coverage delta calculation. Produces a reviewer-ready report with a 30+ item checklist and prioritized findings.

What this skill does

1. 1Fetches the PR diff and metadata using the GitHub CLI or GitLab CLI and identifies all changed files and their downstream dependents.
2. 2Runs blast radius analysis to assess which services, shared libraries, and API contracts could break, with CRITICAL/HIGH/MEDIUM/LOW severity ratings.
3. 3Scans the diff for security vulnerabilities — SQL injection, hardcoded secrets, XSS, auth bypass, insecure hashing, and prototype pollution.
4. 4Calculates test coverage delta, flags new functions without tests, and enforces 100% coverage on auth and payment paths.
5. 5Delivers a structured review with MUST FIX, SHOULD FIX, and SUGGESTIONS sections plus a 30-item checklist covering scope, security, testing, breaking changes, and performance.

When to use

• A PR touches shared libraries, API contracts, or database schema and needs blast radius analysis before merge.
• A PR is large (200+ lines changed) and requires structured feedback rather than informal review.
• The changed code involves authentication, payments, or PII handling and needs mandatory security scanning.
• A new contributor submitted a PR and needs thorough, educational feedback before their first merge.

Frequently asked questions