Deep PR Review

VerifiedCaution

Thorough multi-agent code review for pull requests. Launches parallel agents to check code quality, test coverage, and comments, then drafts concise inline feedback.

Sby Skills Guide Bot
DevelopmentIntermediate
7/22/2026
Claude Code
#code-review#pull-requests#github#multi-agent#inline-comments

Recommended for

Automated summary

Runs several review agents in parallel on a GitHub pull request, validates their findings against the real code, then posts inline comments after the user approves.

Strengths

  • Five distinct review angles (quality, silent failures, tests, comments, type design) launched simultaneously in the background
  • An explicit validation step that re-reads the source to drop false positives before anything is commented
  • A hard gate: nothing reaches GitHub without explicit approval, and the whole review posts as a single API call
  • Clear tone and volume rules (5-7 comments max) that keep output from reading like a linter

Limitations

  • Heavily depends on the pr-review-toolkit subagents and an authenticated gh CLI, neither shipped with the skill
  • Assumes the base branch is named main, which breaks on repos using master or another default
  • No guidance for very large diffs, generated code, or binary files
When to use it

Use it when a PR is ready for review and you want accurate inline comments posted to GitHub without writing the review yourself.

When not to use it

Avoid it on trivial or still-in-progress PRs, or when you lack write access to the repo and a configured gh CLI.

Security analysis

Caution
Quality score86/100

Nothing here is destructive or exfiltration-oriented: it reads diffs, runs review subagents, and can post a GitHub review only after explicit user approval. The risk is bounded but real, since it holds an authenticated network-write capability and a predictable temp file. The approval gate and anti-patterns section are good mitigations, so caution rather than risky.

Findings
  • •Uses Bash plus authenticated `gh` CLI to post reviews to GitHub (a write action with public side effects), though gated behind an explicit approval step.
  • •Writes a review payload to a fixed temp path `/tmp/pr_review.json`, which is predictable and could be pre-created/symlinked by another local user or process.
  • •Tool declaration mismatch: the frontmatter lists `Task, Read, Glob, Grep, Bash, AskUserQuestion` while the catalog record says no allowed-tools are declared, so the actual permission scope is ambiguous.
  • •Depends on `main` as the diff base and on custom subagent types (pr-review-toolkit:*), which may behave differently or fail depending on the environment.
How this analysis is made

Examples

Review a specific PR
review PR #482 in this repo and post inline comments when you're done
Review current branch
/review-pr — give me a code review of the branch I'm on before I ask for a merge
Focused concern
review PR #137, I'm especially worried about swallowed exceptions in the new job runner

name: review-pr description: Deep PR review with inline GitHub comments. Launches parallel review agents, validates findings, drafts casual inline comments, and posts after user approval. tools: Task, Read, Glob, Grep, Bash, AskUserQuestion color: Orange

Purpose

Run a thorough, multi-agent code review on a pull request and post concise inline comments to GitHub. The review should feel like it came from a senior engineer who actually read the code -- not a linter or AI tool.

When to use: "review this PR", "review PR #123", "give me a code review", or just /review-pr

Instructions

Step 1: Identify the PR

Parse $ARGUMENTS for a PR number. If blank, detect from the current branch:

gh pr view --json number,title,state,headRefOid

Then get the scope:

git diff --name-only main...HEAD
git diff --stat main...HEAD -- '*.py' '*.ts' '*.tsx' '*.js'

Tell the user the PR number, title, and file count before proceeding.

Step 2: Launch review agents in parallel

Launch ALL of the following simultaneously using the Task tool with run_in_background: true:

| Agent | subagent_type | Focus | |-------|--------------|-------| | Code quality | pr-review-toolkit:code-reviewer | CLAUDE.md compliance, bugs, security | | Error handling | pr-review-toolkit:silent-failure-hunter | Silent failures, swallowed exceptions | | Test coverage | pr-review-toolkit:pr-test-analyzer | Coverage gaps, test quality | | Comments | pr-review-toolkit:comment-analyzer | Accuracy, staleness, misleading docs | | Types | pr-review-toolkit:type-design-analyzer | Type invariants, design quality |

Skip the type-design-analyzer if no new types/schemas are introduced.

Each agent prompt should include:

  • The PR number and branch
  • Changed files relevant to that agent's specialty
  • Instruction to use git diff main...HEAD

Step 3: Collect results

Wait for all agents to complete. Read each output.

Step 4: Validate findings

This is the most important step. For every finding:

  • Read the actual source code at the reported location
  • Confirm the issue exists as described
  • Drop anything that's incorrect, already handled, or not worth commenting on

False positives destroy credibility. Be ruthless about cutting.

Step 5: Draft inline comments

Write concise, casual comments. Follow these rules:

Tone:

  • Like a thoughtful colleague, not a linter
  • 1-2 sentences. Get to the point.
  • No corporate speak. No "I would suggest..." -- just say what's up
  • "Nit:" for non-blocking. "Suggestion:" for substantial with rationale
  • "Not blocking" where appropriate

Content:

  • Focus on what matters: bugs, silent failures, misleading behavior, dead code
  • Skip pure style nits
  • Short code suggestions are fine (3-5 lines max)
  • Group related issues where it makes sense

Volume:

  • 5-7 comments max. Quality over quantity.
  • Not every finding deserves a comment

Step 6: Draft PR review body

Short and human. Structure:

  • 2-3 sentences acknowledging what's good (genuinely)
  • Bullet the main concerns (2-4 bullets max)
  • One-line overall assessment
  • Review action: COMMENT unless there are truly blocking issues (REQUEST_CHANGES)

Step 7: Present for approval

CRITICAL: Do NOT post to GitHub yet.

Show the user:

  • All inline comments with file:line targets
  • The review body
  • The review action

Ask if they want to adjust anything.

Step 8: Post the review

Only after explicit approval, post as a single GitHub review:

COMMIT=$(gh pr view <PR> --json headRefOid -q '.headRefOid')
OWNER=$(gh pr view <PR> --json headRepositoryOwner -q '.headRepositoryOwner.login')
REPO=$(gh pr view <PR> --json headRepository -q '.headRepository.name')

Build JSON payload:

{
  "commit_id": "<COMMIT>",
  "event": "COMMENT",
  "body": "<review body>",
  "comments": [
    {
      "path": "relative/path/to/file.py",
      "line": 42,
      "side": "RIGHT",
      "body": "Comment text"
    }
  ]
}

Post via:

gh api repos/$OWNER/$REPO/pulls/<PR>/reviews \
  --method POST --input /tmp/pr_review.json \
  --jq '{ id: .id, state: .state, html_url: .html_url }'

Return the review URL.


Anti-Patterns

  • Posting without approval -- Never. The user must greenlight every comment.
  • Trusting agent output blindly -- Always validate against actual code.
  • Over-commenting -- 10 comments is too many. Prioritize.
  • Sounding like AI -- No "I would recommend considering..." Just say it.
  • Commenting on things you didn't verify -- If you didn't read the line, don't comment on it.
  • Mixing blocking and non-blocking -- Be clear about what actually needs fixing vs nice-to-have.

Example Session

User: /review-pr 1724

Claude: PR #1724 "feat(eval): implement complete evaluation framework"
        42 code files changed, +4512/-139 lines
        Launching 5 review agents in parallel...

        [agents complete]

        Validated 8 findings. Here are the proposed comments:

        Comment 1 - snapshot_utils.py:128
        > This empty except swallows JSON parse errors and then...

        Comment 2 - schemas.py:27
        > This DatasetError(Exception) collides with...

        [etc.]

        PR Review Body:
        > Solid work here -- the eval framework design is clean...

        Ready to post, or want to adjust anything?

User: Comment 3 is too long, trim it

Claude: [adjusts] Updated. Ready to post?

User: Ship it

Claude: Review posted: https://github.com/.../pull/1724#pullrequestreview-...

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/deep-pr-review-mrwakcu6/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/deep-pr-review-mrwakcu6' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/deep-pr-review-mrwakcu6/download' --output '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md.part' && mv '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md.part' '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md' && test -s '.skill-downloads/deep-pr-review-mrwakcu6/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/review-pr' && cp -R '.skill-downloads/deep-pr-review-mrwakcu6' '.claude/skills/review-pr'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/deep-pr-review-mrwakcu6'

openskills read 'deep-pr-review-mrwakcu6'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/deep-pr-review-mrwakcu6/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills