pr-review-expert

What This Skill Does

The pr-review-expert is a comprehensive code review automation agent designed for engineers who demand high-quality, secure, and maintainable software. Unlike basic linting tools, this skill performs a deep-dive analysis of GitHub PRs and GitLab MRs. It treats every code submission with a rigorous, systematic approach, focusing on blast radius analysis, security vulnerabilities, breaking changes, and performance impacts. It automatically parses diffs to check for potential breaking changes in API contracts or database schemas, audits for security flaws like SQL injections and secret leaks, and evaluates whether the test coverage meets the requirements of the changes. By producing a reviewer-ready, 30+ item checklist, it helps teams catch critical defects before they reach production, effectively acting as an automated Senior Staff Engineer.

Installation

To integrate the PR Review Expert into your OpenClaw environment, execute the following command in your terminal:

clawhub install openclaw/skills/skills/alirezarezvani/pr-review-expert

Ensure that your environment has the necessary CLI tools configured (GitHub CLI gh or GitLab CLI glab) and that your authenticated session has read access to the target repository. Once installed, the agent will hook into your workflows, allowing you to fetch diffs, perform static analysis, and generate reports on demand.

Use Cases

This skill is essential in high-stakes engineering environments, particularly when handling shared libraries, public-facing APIs, or complex database migrations. It is the perfect tool for auditing large PRs exceeding 200 lines, ensuring that new contributors follow best practices, and validating high-security areas like authentication or payment gateways. Use this tool proactively after an incident to perform a retrospective analysis of similar code paths to prevent regression.

Example Prompts

1. "@pr-review-expert Review PR #442. Pay special attention to potential N+1 query issues in the user repository layer and check for any breaking changes to the /v1/auth API contract."
2. "@pr-review-expert Perform a full blast radius analysis on PR #982. Identify all services that depend on the modified shared logging module and verify that test coverage for the edge cases has increased accordingly."
3. "@pr-review-expert Analyze the security posture of PR #105. Check for any exposed secrets, improper input validation, or SQL injection vectors in the new billing service endpoint."

Tips & Limitations

To get the best results, ensure your PR descriptions are informative, as the agent correlates existing ticket metadata with the code diff. While the skill is powerful, it should be treated as a technical assistant; human oversight is always recommended for architectural decisions. Note that the agent relies on local file-read access to perform cross-file dependency analysis; ensure your execution environment has permission to read the source code tree. Large repositories may require additional timeout allowances for the agent to complete a full blast-radius scan.