AI TOOLS RADAR
全部 Skills / ZHONGSHIXI
zhongshixi/agent-skills

pull-request-code-review

Review a GitHub pull request or a GitLab merge request for correctness, missing tests, and security issues in the diff.

查看源码

使用方法

  1. 复制安装命令，在自己的智能体环境安装前先检查源码包。
  2. 从原始文档核对所需工具、凭据和支持的宿主。
  3. 说明输入材料与期望交付物，并对照来源检查输出。
npx skills add https://github.com/zhongshixi/agent-skills --skill pull-request-code-review

开始前需了解

  • 安装不包含模型订阅、API 额度或访问文件的权限。
  • 仓库星数和安装量反映活跃情况，不等于独立质量或安全测试。
仓库原始内容

按源仓库内容呈现，保留标题、案例、代码、表格、链接以及原文引用的演示图片。

Review Steps

1. Confirm the reviewer

If the user is not an assigned reviewer, ask whether to continue. Review only an open pull request or merge request.

2. Prepare the review

  1. On GitHub, use gh pr diff and gh pr view when the pull request number is known. On GitLab, use glab mr diff and glab mr view when the merge request number is known.
  2. The working directory must be the target repository. If it is not, ask the user to clone it.
  3. Update the local base branch and head branch.
  4. Skip the review when this skill already reviewed the current head commit. Review again when that commit has changed.
  5. Read changed files and the code they call or that calls them. Leave the rest of the repository unread.
  6. Do not modify code.
  7. Do not open credential or secret files.

3. Verify the changed behavior

When the pull request or merge request states its intent, find where the change misses that intent: a stated case left unhandled, or behavior that contradicts the intent. Trace the new path for wrong results, dropped errors, and broken callers. Follow a call outside the diff when the diff can trigger a bug there.

4. Classify review effort

High-risk items

Crashes, exceptions, memory leaks, races, deadlocks, cache corruption, missing retries, missing authentication or permissions, breaking changes to contracts other modules depend on, and code that does not build.

Medium-risk items

Mistakes in feature or bug-fix logic.

Low-risk items

Mechanical changes: renames, formatting, documentation, comments, version bumps, test-only changes, generated code, config values with no logic, and indentation. Treat indentation as high-risk in languages where indentation is syntax, such as Python.

5. Check the tests

Point to a test that fails when the change is reverted, or report the missing test.

6. Write the review comment

Post the comment as the authenticated GitHub or GitLab user. For each finding:

  1. risk-level: high, medium, or low
  2. description: the issue and its category
  3. reason: why it is an issue, and the scenario that triggers it
  4. suggestion: one or more fixes

End the comment with the name of the model that produced the review.

7. Approve the Pull Request

If all high-risk items and medium-risk items are not found or they are addressed by follow-up commits, approve the pull request