Skills backend-pr-workflow
🔧

backend-pr-workflow

Safe 🌐 Network access⚙️ External commands

Enforce backend PR workflow standards

Backend pull requests often miss critical workflow steps like proper ClickUp ticket linkage, migration safety checks, or downtime-safe schema changes. This skill provides a pedantic checklist to catch these issues before merge and deployment.

Supports: Claude Codex Code(CC)
📊 69 Adequate
1

Download the skill ZIP

2

Upload in Claude

Go to Settings → Capabilities → Skills → Upload skill

3

Toggle on and start using

Test it

Using "backend-pr-workflow". Review my Django PR. Branch: feature/my-thing. Title: Add user profile. Base: master. I added a required field with default on a large table.

Expected outcome:

  • What is aligned: Title includes descriptive text
  • [BLOCKING] Branch name feature/my-thing must start with clickup_<ticket_id> for CI to run
  • [BLOCKING] PR targets master but should target release for normal feature work
  • [BLOCKING] Adding non-nullable field with default on large table causes table rewrite. Use nullable column first, then two-step migration.

Using "backend-pr-workflow". Check my hotfix PR. Branch: clickup_GH-999_crash-fix. Title: [GH-999] Hotfix for payment bug. Base: master. I need to drop the old column and update all queries.

Expected outcome:

  • What is aligned: Branch follows naming convention
  • What is aligned: Hotfix correctly targets master branch
  • [BLOCKING] Removing field and code in same PR causes deployment errors. Split into two PRs: first remove code usage, then drop column.
  • [SHOULD_FIX] Update PR description to include rollback plan for this hotfix.

Security Audit

Safe
v5 • 1/17/2026

Pure prompt-based skill containing only SKILL.md documentation. No executable code, scripts, or network calls. All 134 static findings are false positives caused by the scanner misinterpreting documentation patterns (ticket IDs, dates, code formatting, branch names) as security-relevant code patterns. Uses only standard Read, Bash, Glob, and Grep tools as permitted by the AI environment.

2
Files scanned
609
Lines analyzed
2
findings
5
Total audits
Audited by: claude View Audit History →

Quality Score

38
Architecture
100
Maintainability
87
Content
22
Community
100
Security
83
Spec Compliance

What You Can Build

Review Django PRs

Ensure PRs follow naming conventions, migration best practices, and downtime-safe deployment patterns.

Standardize PR workflow

Enforce consistent branch naming, ticket linkage, and release processes across the backend team.

Prevent bad migrations

Catch dangerous schema changes before they reach production and cause downtime.

Try These Prompts

Quick PR review
Use the backend-pr-workflow skill to review this PR. Branch: clickup_GH-1234_feature-name. Base: release. Title: [GH-1234] Add new feature.
Pre-merge check
Run backend-pr-workflow on my planned PR. Title: [GH-785] Fix login bug. Description: Fixes timeout issue. Migration: added is_active field with default True on large User table.
Migration safety
Use backend-pr-workflow to check if my Django migration plan is downtime-safe. I am adding a nullable UUID field to a table with 10 million rows, then backfilling in migration.
Hotfix validation
Use backend-pr-workflow to validate my hotfix. Target branch: master. Title: Hotfix release: 2025-08-19. This is an emergency fix for production bug.

Best Practices

  • Always include the ClickUp ticket ID in branch name and PR title for traceability.
  • Use two-step migrations for adding columns to large tables: nullable first, then backfill.
  • Split code removal from schema removal into separate PRs to avoid deployment errors.

Avoid

  • Merging code that removes a field with the migration that drops it in the same PR.
  • Using volatile defaults like UUID or current_timestamp inside atomic migrations on large tables.
  • Reusing the same ClickUp ticket ID across multiple repositories for a single feature.

Frequently Asked Questions

Which AI tools support this skill?
Claude Code, OpenAI Codex, and standard Claude models. Use the installation method for your platform.
What are the blocking issues this skill flags?
Missing ClickUp ticket ID in branch, wrong base branch, and schema changes that risk production downtime.
Does this skill modify my code?
No. It only analyzes and provides recommendations. You must apply changes manually.
Is my data safe with this skill?
Yes. It only reads PR information you provide. No data is stored or transmitted externally.
Why are my migrations flagged as blocking?
Migrations adding non-nullable fields with defaults on large tables cause table locks. Use the two-step pattern recommended.
How does this differ from standard PR reviews?
Focuses on workflow compliance, migration safety, and deployment patterns rather than code logic or style.