PR Review Expert
PR Review Expert performs structured, systematic code reviews of GitHub PRs and GitLab MRs. It goes beyond style checks to analyze blast radius, security vulnerabilities, test coverage deltas, breaking changes, and performance impacts, producing a reviewer-ready report with a 30+ item checklist and prioritized findings.
✨ What it does
- Performs blast radius analysis to identify affected files, services, and consumers
- Scans for security issues like SQL injection, XSS, hardcoded secrets, and auth bypass
- Calculates test coverage delta between new code and new tests
- Detects breaking changes in API contracts, DB schema, and config keys
- Verifies ticket linking (Jira/Linear) and checks performance impacts like N+1 queries
- Generates a comprehensive review report with a 30+ item checklist
🎯 When to use it
- Before merging any PR/MR that touches shared libraries, APIs, or DB schema
- When a PR is large (>200 lines changed) and needs structured review
- Onboarding new contributors whose PRs need thorough feedback
- Security-sensitive code paths (auth, payments, PII handling)
- After an incident — review similar PRs proactively
🚀 How to use
Trigger by asking to review a pull request or merge request, e.g., 'Review PR #123' or 'Analyze the code changes in this MR'. The skill expects the PR/MR number and access to the repository via GitHub (gh) or GitLab (glab) CLI. It fetches the diff and metadata, then runs analyses. Example prompts:
Review PR #456 for security issues and breaking changes.
Check the test coverage delta for MR !789.
📄 Output: A structured code review report with prioritized findings (must fix, should fix, suggestions) and a checklist of 30+ items.
📦 Add this skill to Claude Code
# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills
# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/engineering/skills/pr-review-expert .claude/skills/pr-review-expertSkill source: engineering/skills/pr-review-expert/SKILL.md
⚠️ Good to know
Requires gh or glab CLI installed and authenticated, and for Jira/Linear verification, API tokens must be set as environment variables (JIRA_API_TOKEN, LINEAR_API_KEY).
❓ FAQ
What does the skill do beyond style checks?
It performs blast radius analysis, security scanning, test coverage delta calculation, breaking change detection, and performance impact analysis.
How does it handle security scanning?
It greps the diff for patterns like SQL injection, hardcoded secrets, XSS vectors, auth bypass, and insecure hash algorithms.
What is the output format?
A structured review comment with sections for MUST FIX, SHOULD FIX, SUGGESTIONS, and LOOKS GOOD, plus a checklist.
🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.