# Review Pull Requests with Multi-Agent Checks

Manual PR review can miss security, test, and quality issues. This skill coordinates specialized checks and prepares merge feedback for Claude, Codex, and Claude Code workflows.

## Install

```bash
npx skillstore add dnyoussef/code-review-assistant
```

## Metadata

- Status: approved
- Slug: dnyoussef-code-review-assistant
- Version: 1.0.0
- Author version: 1.0.0
- Skillstore revision: r1
- Version status: valid
- Tree hash: 4150866fe794a5da007fe4004b7563507f3c9421f14be3d05262187ff0a35f9f
- Author: DNYoussef
- GitHub username: DNYoussef
- License: MIT
- Repository: https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/code-review-assistant
- Ref: c579efd02184f1128d6741d16e6c8d951d7d4208
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, filesystem
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/dnyoussef-code-review-assistant
- Manifest: https://skillstore.pages.dev/api/skills/dnyoussef-code-review-assistant/manifest

## Capabilities

- Gather PR metadata and changed file paths through GitHub CLI.
- Run security, performance, style, test, and documentation review checks.
- Aggregate review outputs into a merged score and category summary.
- Generate fix suggestions from collected review findings using Codex.
- Post a PR review comment and approve or request changes.

## Use Cases

- Pre-Merge Repository Review: Run a broad PR quality check before maintainers decide whether a change is ready to merge.
- Focused Security Pass: Review changed files for unsafe patterns, secrets, and critical security blockers before approval.
- Release Readiness Audit: Combine quality, test, and documentation signals into a merge readiness summary for release branches.

## Prompt Templates

### Review One Pull Request

```
Review pull request 123 with all default checks. Summarize blockers, warnings, suggestions, and merge readiness.
```

### Focus on Security and Tests

```
Review pull request 123 with focus areas security and tests. Prioritize issues that should block merge.
```

### Prepare Fix Suggestions

```
Review pull request 123 and generate fix suggestions for each confirmed issue. Group suggestions by severity and file area.
```

### Run a Supervised Quality Gate

```
Review pull request 123 for release readiness. Do not approve or request changes until I confirm the final decision.
```

## Limitations

- Requires authenticated GitHub CLI and repository review permissions.
- Depends on claude-flow and Codex CLI behavior in the local environment.
- Does not fully escape all PR metadata before writing generated artifacts.
- Can alter PR review state, so supervised execution is recommended.

## Best Practices

- Run the skill from a clean working tree with an authenticated GitHub CLI session.
- Use comment-only or dry-run behavior when testing it on active repositories.
- Confirm generated findings before approving or requesting changes on protected branches.

## Anti Patterns

- Running the workflow on untrusted repositories with broad GitHub tokens.
- Letting automated approvals replace required human review for sensitive changes.
- Treating generated scores as final proof that a pull request is safe.

## Security Audit

- Audited at: 2026-07-05T12:44:39.542\+00:00
- Summary: Most static backtick and /dev/null alerts are Markdown or benign shell redirection false positives. The skill still contains a real Bash automation workflow that runs unpinned npx tools, invokes GitHub CLI actions, and writes generated PR artifacts.

## Stats

- Views: 175
- Downloads: 6
- Favorites: 0
- Popularity score: 0