Automated summary
Runs several review agents in parallel on a GitHub pull request, validates their findings against the real code, then posts inline comments after the user approves.
Strengths
- Five distinct review angles (quality, silent failures, tests, comments, type design) launched simultaneously in the background
- An explicit validation step that re-reads the source to drop false positives before anything is commented
- A hard gate: nothing reaches GitHub without explicit approval, and the whole review posts as a single API call
- Clear tone and volume rules (5-7 comments max) that keep output from reading like a linter
Limitations
- Heavily depends on the pr-review-toolkit subagents and an authenticated gh CLI, neither shipped with the skill
- Assumes the base branch is named main, which breaks on repos using master or another default
- No guidance for very large diffs, generated code, or binary files
Use it when a PR is ready for review and you want accurate inline comments posted to GitHub without writing the review yourself.
Avoid it on trivial or still-in-progress PRs, or when you lack write access to the repo and a configured gh CLI.
Security analysis
CautionNothing here is destructive or exfiltration-oriented: it reads diffs, runs review subagents, and can post a GitHub review only after explicit user approval. The risk is bounded but real, since it holds an authenticated network-write capability and a predictable temp file. The approval gate and anti-patterns section are good mitigations, so caution rather than risky.
- •Uses Bash plus authenticated `gh` CLI to post reviews to GitHub (a write action with public side effects), though gated behind an explicit approval step.
- •Writes a review payload to a fixed temp path `/tmp/pr_review.json`, which is predictable and could be pre-created/symlinked by another local user or process.
- •Tool declaration mismatch: the frontmatter lists `Task, Read, Glob, Grep, Bash, AskUserQuestion` while the catalog record says no allowed-tools are declared, so the actual permission scope is ambiguous.
- •Depends on `main` as the diff base and on custom subagent types (pr-review-toolkit:*), which may behave differently or fail depending on the environment.
Examples
review PR #482 in this repo and post inline comments when you're done/review-pr — give me a code review of the branch I'm on before I ask for a mergereview PR #137, I'm especially worried about swallowed exceptions in the new job runnername: review-pr description: Deep PR review with inline GitHub comments. Launches parallel review agents, validates findings, drafts casual inline comments, and posts after user approval. tools: Task, Read, Glob, Grep, Bash, AskUserQuestion color: Orange
Purpose
Run a thorough, multi-agent code review on a pull request and post concise inline comments to GitHub. The review should feel like it came from a senior engineer who actually read the code -- not a linter or AI tool.
When to use: "review this PR", "review PR #123", "give me a code review", or just /review-pr
Instructions
Step 1: Identify the PR
Parse $ARGUMENTS for a PR number. If blank, detect from the current branch:
gh pr view --json number,title,state,headRefOid
Then get the scope:
git diff --name-only main...HEAD
git diff --stat main...HEAD -- '*.py' '*.ts' '*.tsx' '*.js'
Tell the user the PR number, title, and file count before proceeding.
Step 2: Launch review agents in parallel
Launch ALL of the following simultaneously using the Task tool with run_in_background: true:
| Agent | subagent_type | Focus |
|-------|--------------|-------|
| Code quality | pr-review-toolkit:code-reviewer | CLAUDE.md compliance, bugs, security |
| Error handling | pr-review-toolkit:silent-failure-hunter | Silent failures, swallowed exceptions |
| Test coverage | pr-review-toolkit:pr-test-analyzer | Coverage gaps, test quality |
| Comments | pr-review-toolkit:comment-analyzer | Accuracy, staleness, misleading docs |
| Types | pr-review-toolkit:type-design-analyzer | Type invariants, design quality |
Skip the type-design-analyzer if no new types/schemas are introduced.
Each agent prompt should include:
- The PR number and branch
- Changed files relevant to that agent's specialty
- Instruction to use
git diff main...HEAD
Step 3: Collect results
Wait for all agents to complete. Read each output.
Step 4: Validate findings
This is the most important step. For every finding:
Readthe actual source code at the reported location- Confirm the issue exists as described
- Drop anything that's incorrect, already handled, or not worth commenting on
False positives destroy credibility. Be ruthless about cutting.
Step 5: Draft inline comments
Write concise, casual comments. Follow these rules:
Tone:
- Like a thoughtful colleague, not a linter
- 1-2 sentences. Get to the point.
- No corporate speak. No "I would suggest..." -- just say what's up
- "Nit:" for non-blocking. "Suggestion:" for substantial with rationale
- "Not blocking" where appropriate
Content:
- Focus on what matters: bugs, silent failures, misleading behavior, dead code
- Skip pure style nits
- Short code suggestions are fine (3-5 lines max)
- Group related issues where it makes sense
Volume:
- 5-7 comments max. Quality over quantity.
- Not every finding deserves a comment
Step 6: Draft PR review body
Short and human. Structure:
- 2-3 sentences acknowledging what's good (genuinely)
- Bullet the main concerns (2-4 bullets max)
- One-line overall assessment
- Review action:
COMMENTunless there are truly blocking issues (REQUEST_CHANGES)
Step 7: Present for approval
CRITICAL: Do NOT post to GitHub yet.
Show the user:
- All inline comments with file:line targets
- The review body
- The review action
Ask if they want to adjust anything.
Step 8: Post the review
Only after explicit approval, post as a single GitHub review:
COMMIT=$(gh pr view <PR> --json headRefOid -q '.headRefOid')
OWNER=$(gh pr view <PR> --json headRepositoryOwner -q '.headRepositoryOwner.login')
REPO=$(gh pr view <PR> --json headRepository -q '.headRepository.name')
Build JSON payload:
{
"commit_id": "<COMMIT>",
"event": "COMMENT",
"body": "<review body>",
"comments": [
{
"path": "relative/path/to/file.py",
"line": 42,
"side": "RIGHT",
"body": "Comment text"
}
]
}
Post via:
gh api repos/$OWNER/$REPO/pulls/<PR>/reviews \
--method POST --input /tmp/pr_review.json \
--jq '{ id: .id, state: .state, html_url: .html_url }'
Return the review URL.
Anti-Patterns
- Posting without approval -- Never. The user must greenlight every comment.
- Trusting agent output blindly -- Always validate against actual code.
- Over-commenting -- 10 comments is too many. Prioritize.
- Sounding like AI -- No "I would recommend considering..." Just say it.
- Commenting on things you didn't verify -- If you didn't read the line, don't comment on it.
- Mixing blocking and non-blocking -- Be clear about what actually needs fixing vs nice-to-have.
Example Session
User: /review-pr 1724
Claude: PR #1724 "feat(eval): implement complete evaluation framework"
42 code files changed, +4512/-139 lines
Launching 5 review agents in parallel...
[agents complete]
Validated 8 findings. Here are the proposed comments:
Comment 1 - snapshot_utils.py:128
> This empty except swallows JSON parse errors and then...
Comment 2 - schemas.py:27
> This DatasetError(Exception) collides with...
[etc.]
PR Review Body:
> Solid work here -- the eval framework design is clean...
Ready to post, or want to adjust anything?
User: Comment 3 is too long, trim it
Claude: [adjusts] Updated. Ready to post?
User: Ship it
Claude: Review posted: https://github.com/.../pull/1724#pullrequestreview-...
From the file to a first result
The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.
View the source and supporting filesThis download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.
1. Download the file
Download SKILL.mdFrom the root of a test project, save the file as .skill-downloads/deep-pr-review-mrwakcu6/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.
Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.
mkdir -p '.skill-downloads/deep-pr-review-mrwakcu6' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/deep-pr-review-mrwakcu6/download' --output '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md.part' && mv '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md.part' '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md'2. Check prerequisites
Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.
No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.
The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.
3. Load the skill
After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.
Claude Code
test -f '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md' && test -s '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/review-pr' && cp -R '.skill-downloads/deep-pr-review-mrwakcu6' '.claude/skills/review-pr'OpenSkills
OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.
Official OpenSkills installationopenskills install './.skill-downloads/deep-pr-review-mrwakcu6'openskills read 'deep-pr-review-mrwakcu6'Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.
For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.
openskills syncManual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.
4. Try a first task
Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:
Read .skill-downloads/deep-pr-review-mrwakcu6/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.
React Hook Form Best Practices
Development
Master React Hook Form: avoid anti-patterns, manage subscriptions, and handle reset, dirty state, and controlled inputs correctly.
Emotion to Mantine Migration
Development
Migrate Emotion styled-components to Mantine components with style props and CSS modules. Use when converting .styled.tsx files or removing @emotion imports.
Scope Creep Detector
Development
Analyzes git diffs against a stated intent to detect scope creep, unrelated files, broad PRs, and oversized changes, then suggests keep, split, or justify actions.