# Pr Review > Project-aware PR review grounded in AGENTS.md conventions and vault memory. Runs a multi-dimension review: correctness, convention compliance, test quality, security, performance, and conditional checks (TDQS scoring, feature surface docs). Use when asked to "review this PR", "review PR #X", "do a thorough review", "review against AGENTS.md", or "review with my preferences in mind". Complements the built-in /code-review (which is generic) by loading project-specific conventions and personal preferences. NOT for: quick CI failure diagnosis (use pr-monitor), post-merge testing (use verify), or code simplification without a PR context (use code-quality). - Skill: `aliasunder/pr-review` (Agent Skill) - Install (CLI): `npx skillmds@latest add aliasunder/pr-review` - Raw SKILL.md: https://api.skillmd.com/api/skills/aliasunder/pr-review/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: aliasunder (https://skillmd.com/u/aliasunder) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/aliasunder/pr-review --- # PR Review Multi-dimension, project-aware PR review. This skill orchestrates the review — the knowledge lives in the project's AGENTS.md and the user's vault memory. ## Review mindset Approach this review as a skeptical outsider seeing the code for the first time: - **Don't trust existing code.** Code that "is already there" or "was just written" is not assumed correct. Every line in the diff is under review. - **Default to thorough.** No shortcuts, no skimming. If you'd need to pause to verify something, verify it. - **Follow fable-mode discipline.** Write a stage map before starting. Verify each stage with a check that can fail. Self-critique before delivering findings. ## Before reviewing Load these sources fresh every time — do not rely on what is already in context: 1. **Project conventions**: Read the project's `AGENTS.md` (or `CLAUDE.md` if no AGENTS.md exists) from the repo root. Pay attention to: code style, test conventions, module layering, naming rules, logging conventions, MCP tool description conventions. 2. **Code standards + preference recall**: Discover the cross-project standards notes first — the set grows and hardcoded lists go stale: `vault_search({ query: "code standards", filters: { tags: ["code-standards"], type: "reference", properties: { lifecycle: "living" } } })` Then `vault_read_note` EVERY note the tag returns (distilled current consensus — currently typescript, testing, logging-observability, docs). Then recall the dated evidence trail for the change's domain — it surfaces preferences newer than the notes: `vault_memory_recall({ query: "" })` 3. **The diff**: Read the full diff and all source files touched by the PR. For large PRs, read file-by-file rather than just the diff — context around changes matters. ## Review dimensions Structure the review by dimension. Use sequential thinking to organize findings. ### 1. Correctness - Logic errors, edge cases, off-by-one, null handling - Error paths exercised, not just happy path - Race conditions, concurrency issues - API contract violations - **Documentation accuracy** (when the PR adds or modifies user-facing docs): verify that factual claims — privacy/security guarantees, architecture, data flow, storage locations, capability descriptions — match the implementation. A guide that says "no external communication" when the system has an outbound sync service is a correctness bug, not a style issue - **Documentation coherence** (when the PR adds or restructures user-facing guides, READMEs, or setup instructions): line-level fact-checking cannot catch these — every sentence can be individually true while the document contradicts itself. Check coherence by simulating readers, not by scanning sentences: - **Multi-path walkthrough**: when a doc offers more than one way to accomplish the same goal (alternative install methods, setup tools, runtimes, OS variants), enumerate the offered paths, then walk EACH path through the entire document. Every operational section — update, restart, monitor, verify, troubleshoot, apply-config-change — must either work for every offered path or explicitly scope itself to the paths it serves. A status command that returns nothing for the default path's users, a lifecycle section covering two of three offered methods, or a platform note attached to one path when it applies to all are each findings. Check the reverse too: a section must not reference a path the document never offers. Skip the walkthrough only when the doc offers a single path. - **Default-shift framing**: when the PR (or the change it documents) changes which method or option is default/recommended, check that every doc's framing agrees with the new default — intro prose, section ordering, which method is the main body vs folded into a collapsible aside. Individual commands survive a default shift; framing sentences ("X is used below") and document structure go stale silently. Skip when no default or recommendation changed. - **Sibling-doc consistency**: when the repo has parallel variants of the same document (per-environment, per-OS, per-version guides), review the set together, section-by-section — per-file review structurally cannot catch cross-file contradictions. Expect the same lead method and the same section skeleton; divergence is a finding unless the variant's real differences justify it. ### 2. Convention compliance (high-level scan) - Scan for obvious convention violations — naming, structure, module layering - Focus on what /code-quality won't catch: module boundary violations (wrong dependency direction), logging convention mismatches (info vs debug boundary, two-arg pattern), API wire format issues (snake_case vs camelCase) - **For thorough convention review, follow up with /code-quality** ### 3. Test quality (high-level scan) - Confirm tests exist for new behavior and error paths - Spot-check for obvious two-bar violations (silent no-op, wrong-error pass) - Check test naming matches what tests actually assert - **For thorough test audit, follow up with /test-audit** ### 4. Security and performance - OWASP top 10 (injection, XSS, auth issues) - No committed secrets, even in tests (use fake fixtures) - Performance: unnecessary allocations, N+1 queries, unbounded loops - Logging security: no PII, credentials, or sensitive data in logs - **CI/workflow security** (when `.yml` workflow files changed): - **Action pinning**: third-party actions must be pinned to a full commit SHA, not a mutable tag (`v2`, `v3`, `latest`). Tags can be force-pushed — a compromised tag is a supply chain attack. Pin to the SHA and add a comment with the version: `uses: org/action@ # v2.1.0`. First-party `actions/*` are lower risk but should still be pinned in security-sensitive workflows - **Permissions least privilege**: `permissions:` at job or workflow level should grant only what the job actually needs. If all steps authenticate via a GitHub App token (`create-github-app-token`), the default `GITHUB_TOKEN` only needs `read` (or can be omitted). Write permissions on `GITHUB_TOKEN` when unused is unnecessary attack surface. Check each permission key against actual usage in the job's steps - Secrets scoped to the narrowest level — job-level `env:` exposes secrets to every step; prefer step-level `env:` or `${{ secrets.X }}` inline - `persist-credentials: false` on `actions/checkout` — prevents the token from leaking to subsequent steps - Deploy workflows need `concurrency:` blocks to prevent overlapping deploys - `if:` conditions can't see step-level `env:` — GitHub evaluates `if:` before the step runs on the runner - **Filesystem security** (when code reads/writes/indexes files from a directory tree): - Path traversal: are user-controlled or externally-sourced paths validated with `realpath()` containment checks, not just lexical prefix matching? A symlink or `../` sequence can escape a root directory that passes a string-prefix check - Symlink safety: does code that accepts symlinks verify the target is within bounds, is the expected type (file vs directory), and exists (not dangling)? - Defense in depth: are containment checks applied at every entry point (root, folder, individual file), not just the innermost level? Per-entry validation is bypassed if the search root itself is a symlink pointing outside the allowed tree - Widened eligibility: when a filter is broadened (e.g., `isFile()` → `isFile() || isSymbolicLink()`), check that validation covers the guarantees the old filter implicitly provided ### 5. TDQS scoring (conditional) - **Only when tool descriptions changed.** If the PR modifies MCP tool descriptions in `tool-definitions.ts` (or equivalent), self-score against the TDQS rubric. - Check the project's CLAUDE.local.md or AGENTS.md for links to the TDQS rubric and scoring references. ### 6. Feature surface docs (conditional) - **Trigger: the PR adds, removes, or changes a feature.** A feature surface change is any of: new exported function/class, new tool or API endpoint, new env var or config option, new search mode or query capability, changed behavior of an existing feature (not just refactoring internals). If the PR summary or commit messages use words like "add", "feat", "new", "support", "enable", or "hybrid" — it's likely a feature surface change. - **Step 1 — identify which docs track feature surface.** Check AGENTS.md for a "Files that track feature surface" table. If one exists, use it. If not, check for these common doc files in the repo root: `README.md`, `ARCHITECTURE.md`, `DEPLOY.md`, `.env.example`, `AGENTS.md` (structure tree section), `.devin/wiki.json`, `CHANGELOG.md`, `docs/`. Also check for deploy-specific env files (`deploy/*/.env.example`). - **Step 2 — for each doc file that exists**, grep for terms related to the changed feature area (the module name, function names, env var names). If the doc describes the area that changed but doesn't reflect the new behavior, that's a finding. - **Step 3 — check for docs that SHOULD mention the new feature but don't.** A new search mode added to the codebase should appear in ARCHITECTURE.md's search section. A new env var should appear in DEPLOY.md and `.env.example`. A new tool should appear in README.md's capabilities section. Missing mentions are findings. - **Report as**: `[D6] ARCHITECTURE.md — no mention of hybridSearch/RRF fusion → needs update` or `[D6] .env.example — EMBEDDING_ENABLED description still says "vector search", should mention "hybrid search" → fixed`. Flag as `needs design decision` if you're unsure what the docs should say (the author knows the feature better than the reviewer). ### 7. Stale path references (conditional) - **When files are moved, renamed, or directories created/removed.** Grep AGENTS.md (and ARCHITECTURE.md if it exists) for the old path or directory name. The structure tree, module layering prose, logger chain, and naming convention sections all reference specific file paths — a refactor that moves code without updating these references leaves the docs contradicting the codebase. Check every path mentioned in the diff's renamed/added/deleted files against the docs. ## How to report and fix **Default is fix, not report-only.** Always apply fixes unless the dispatch prompt says comment mode. **One line per finding, then fix it.** Keep reports compact — the diff shows the fix: ``` [D1] file.ts:42 — issue description → fixed [D4] file.ts:88 — issue description → fixed (low confidence, trivial fix) [D4] file.ts:200 — issue description → flagged (complex fix — needs mutex or queue) ``` 1. **Report each finding** as a one-liner: `[dimension] file:line — what's wrong → fixed / flagged (category)`. Group by dimension when multiple findings exist. Don't describe the planned fix — the diff speaks for itself. 2. **Decide fix vs. flag on two axes** — diagnosis confidence and fix complexity. **Call `sequentialthinking` before each disposition decision** — input the finding, confidence level, and fix complexity; output which matrix cell it falls in and why: - **High/medium confidence** → fix directly, regardless of fix complexity. - **Low confidence + trivial fix** (< 5 lines, no interface change, no behavioral risk) → fix it. A safe no-op change costs nothing; a real bug left unfixed does. "Low-risk" is a reason TO fix, not a reason to defer. - **Low confidence + complex/risky fix** → flag with category. - When in doubt about the diagnosis but not about the fix: **fix it.** 3. **When flagging, categorize** — the orchestrator needs this to triage: - `uncertain diagnosis` — not sure the issue is real, fix is non-trivial - `complex fix` — diagnosis is sound but fix is non-trivial (> 10 lines, interface changes, or behavioral risk). **Grep for call sites before claiming this** — the difference between "every call site" and "one call site" is the difference between deferring and a 30-second fix. - `needs design decision` — multiple valid approaches, user must choose - `pre-existing gap` — issue predates the PR but was revealed by it 4. **Run tests** after all fixes to confirm no behavior change. 5. **Summarize**: count by dimension, test status, verdict (ship / ship-with-minor-fixes / needs-changes). **Output honesty (both modes):** - **State what you reviewed.** The summary names the PR head SHA actually reviewed — a review that doesn't say what it checked is indistinguishable from one that checked nothing. It also lets the orchestrator cross-check what this phase actually saw against the delta-review baseline it records itself at Phase 4 close. - **Close with proof of dismissal.** One line per suspicion you seriously considered and dropped, with the reason it doesn't bite — or "none". The clean-bill claims are part of the review: without them, "no findings" could mean a clean diff or an unexamined one, and the reader can't tell which. ## Comment mode When the dispatch prompt says **COMMENT MODE**, do not edit files, commit, or push. Instead, collect all findings and post them as a single GitHub PR review with inline comments. ### Procedure 1. **Review normally** — run all dimensions, use sequential thinking for disposition decisions, apply the same dual-axis (confidence × complexity) framework. The only difference is the output path. 2. **Collect findings** as you go. Each finding needs: file path (relative to repo root), line number, dimension tag, and description. 3. **Categorize each finding** the same way as default mode: `fixed` becomes `would fix` (trivial, high confidence), and flagged findings keep their category (`uncertain diagnosis`, `complex fix`, `needs design decision`, `pre-existing gap`). 4. **Post a single PR review** with all findings as inline comments. Use this template: ```bash gh api "repos/OWNER_REPO/pulls/PR_NUMBER/reviews" \ --method POST --input - <<'REVIEW' { "event": "COMMENT", "body": "## Phase 1: PR Review\n\nN findings across M files. Reviewed at .\n\n**Verdict**: ship / ship-with-minor-fixes / needs-changes\n\nDismissed: \n\n---\n*🔍 ship-check · pr-review · MODEL_ID*", "comments": [ { "path": "src/file.ts", "line": 42, "body": "**[D1]** Description-vs-implementation mismatch\n\n
\n\n---\n*🔍 ship-check · pr-review · MODEL_ID*" } ] } REVIEW ``` Replace `OWNER_REPO` and `PR_NUMBER` with values from the dispatch prompt. Replace `MODEL_ID` with your own model ID (from your system prompt). 5. **If 0 findings and no dismissals**, skip the API call — report "0 findings" to the orchestrator only. With 0 findings but cleared suspicions, post a body-only review carrying the dismissal list — that is the artifact that lets a PR reader tell a clean diff from an unexamined one. 6. **For findings without a specific line** (e.g., missing docs, cross-cutting concerns), put them in the review `body` rather than as inline comments. 7. **Footer on every comment.** Append `\n\n---\n*🔍 ship-check · pr-review · MODEL_ID*` to the review body AND each inline comment body. This distinguishes automated findings from the repo owner's own comments. 8. **Format each inline comment body** as: - Bold dimension tag: `**[D1]**`, `**[D4]**`, etc. - One-line description of the issue - Suggested fix (code snippet or description) - Disposition: `Would fix (trivial)` or `Flagged: ` - Footer (see above)