github-review-pr

An agent skill by daymade, from daymade/claude-code-skills. Tags: code-review, github, review, testing, validation.

What it does

Reviews or re-reviews one contributor pull request—including an explicitly named closed PR being reconsidered—or a bounded newest-to-oldest sweep of all open contributor PRs, for a GitHub repository maintainer against the current base branch. Handles base drift, history discontinuities, polluted branches, ownership, curation, supersession, and review-conditioned repair or landing using immutable Git snapshots, three-way merge results, isolated contribution projection, checks, tests, and findings-first reporting. Use for a PR URL or number, "main changed, review again", "review all open PRs newest to oldest", "apply our maintainer principles", "can we merge this and fix the rest ourselves?", or merge readiness. Do not use for general GitHub CRUD, repository-wide audits, CI-only diagnosis, security-only diff audits, unpushed local diffs, merely addressing existing review comments, or merging without a fresh review.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add daymade/claude-code-skills --skill github-review-pr

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/github-review-pr ~/.claude/skills/github-review-pr

Safety box score

Grade C, moderate risk: 33 of 100 risk points, rated 2026-09-22. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a GitHub PR review-and-landing workflow: it fetches PR metadata, analyzes git objects, runs repository tests in isolated clones, and can optionally comment, approve, update branches, merge, or close PRs after explicit authorization. The main risks are its broad repository-level mutation capability and its outbound network/test execution against untrusted PR content, plus a third-party web check in personal-maintainer mode.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It shells out to `gh` and `git` (`gh pr view`, `git merge-tree`, `git cherry-pick`, `git write-tree`) and explicitly runs repository tests on untrusted heads, but it does not ship `eval`/`curl \| sh`-style code or binaries.
Network access	2 (moderate)	It relies on GitHub API/CLI calls throughout (`gh api`, `gh pr list`, `gh pr merge`) and personal-maintainer mode also reaches an external URL, `https://claude.com/contact-sales/claude-for-oss`.
Filesystem reach	1 (low)	It writes only local git metadata such as `refs/review-pr/$PR_NUMBER/...` and uses disposable clones/sandboxes; it does not direct writes outside the working clone.
Secrets & credentials	1 (low)	It requires authenticated GitHub access (`gh auth status`, authenticated permission checks) and mentions protecting repo/cloud/SSH-agent secrets, but it does not ask the user to paste secrets or read key stores.
Privilege & persistence	0 (none)	There is no sudo, global install, service registration, shell startup edit, or other OS-level privilege change in the shipped files.
Instruction hijack surface	0 (none)	The files repeatedly constrain the agent to explicit authorization and to ignore PR-controlled instructions; the regex hits are false positives rather than prompt-injection behavior.
Irreversible actions	3 (high)	The workflow can comment, approve, request changes, update branches, push repairs, merge, close, enable auto-merge, or delete branches when authorized, which is a broad irreversible GitHub capability.
Transparency	0 (none)	All shipped files are readable Markdown/text; there are no binaries, obfuscated blobs, or generated installers.

Before installing

Read `references/remediation_and_landing.md` to confirm you want a tool that can merge/close/delete branches when authorized.
If you use personal-maintainer mode, check the outbound `claude.com` lookup and decide whether that external network dependency is acceptable.
Run it first in a disposable clone or sandbox because it executes PR-controlled tests and git commands.
Verify your local `gh` login has exactly the GitHub account/permissions you expect before letting it review or land PRs.

Rated 2026-09-22 by an automated review of 4 files from the skill's repository.

Source

Repository: daymade/claude-code-skills (all skills from this repository)
Path: github-review-pr/SKILL.md
Branch: main
Updated: 2026-09-20

code-review — Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes.
analyzing-release-readiness — Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch.
maintain-verification-skill — Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature.
make-pr-easy-to-review — Prepare PRs for review by cleaning noisy history, improving PR descriptions, and adding reviewer guidance without changing code behavior.
no-comments — Spawn Comment Sicko, fix accepted findings, and offer encodings for claimed constraints.
pr-review-canvas — Generate an interactive PR review walkthrough as an HTML page.