
from dev10x-claude9
Review GitHub pull requests and post structured inline review comments that follow project guidelines and minimize duplicate feedback.
This skill performs a full GitHub pull request review: it gathers PR metadata and diffs, analyzes changed files for interface and architecture impacts, applies project review guidelines, drafts a summary and inline comments (including suggestion blocks), and posts a COMMENT review to GitHub. It also minimizes obsolete automated review summaries when appropriate.
Use this skill when you need an automated, reproducible review of someone else's PR and want findings posted directly to GitHub. Trigger when given a PR URL or number, and not for pre-PR self-reviews.
Designed for agents with GitHub CLI access (e.g., Claude Code or other agents able to call gh/Write/Bash).
A thorough GitHub PR review skill with detailed workflow steps covering diff fetching, spec compliance gating, impact analysis, courtesy fixups, and dual transport posting. Well-structured with clear escalation gates and anti-patterns documented. No scripts included — all logic is in the SKILL.md orchestration instructions. Relies on `gh` CLI and custom MCP tools (Dev10x plugin). No security concerns beyond standard `gh` API access; no hardcoded creds, no destructive commands, no exfiltration patterns.
Well-crafted skill with strong procedural documentation. The orchestration pattern with task creation, dependency chains, and user interaction gates is sophisticated. Security score reduced by 15 due to allowed-tools granting Bash access to gh commands (shell injection risk if PR content is interpolated unsafely) and the gh-bot-comment.py script being invoked from user home directory without checksum verification. Architecture is strong but the skill is tightly coupled to the Dev10x ecosystem — less portable as a standalone.