# Review GitHub Pull Requests With Agent Teams

Manual PR review is slow when security, performance, tests, and documentation all need attention. This skill coordinates specialized Claude, Codex, or Claude Code agents to produce structured merge guidance.

## Install

```bash
npx skillstore add dnyoussef/when-reviewing-github-pr-use-github-code-review
```

## Metadata

- Status: approved
- Slug: dnyoussef-when-reviewing-github-pr-use-github-code-review
- Skillstore revision: r1
- Version status: missing
- Tree hash: 3f21b64d7e6059c832edbdf943fd02ac88aa54eac829090e328ed0f2e78ba582
- Author: DNYoussef
- GitHub username: DNYoussef
- License: MIT
- Repository: https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/github-integration/when-reviewing-github-pr-use-github-code-review
- Ref: 0519034dad657fb1f7706e0550e962beeda73fdf
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/dnyoussef-when-reviewing-github-pr-use-github-code-review
- Manifest: https://skillstore.pages.dev/api/skills/dnyoussef-when-reviewing-github-pr-use-github-code-review/manifest

## Capabilities

- Defines a five-agent mesh workflow for GitHub pull request review.
- Assigns security, performance, quality, testing, and documentation review roles.
- Explains how to collect PR context and share findings between agents.
- Provides weighted merge readiness scoring across review categories.
- Defines report sections, action items, and fix suggestion workflow.
- Describes GitHub feedback steps for reviews, inline comments, labels, and monitoring.

## Use Cases

- Pre-Merge Review: Run a structured review before approving a feature branch for merge.
- Security-Focused PR Audit: Coordinate security, dependency, and authorization checks for sensitive changes.
- Large Change Triage: Split a large pull request into focused review areas and summarize blockers.

## Prompt Templates

### Review One Pull Request

```
Review PR <url> with this skill. Produce a local report covering security, performance, quality, tests, and documentation. Do not post comments.
```

### Review Changed Files

```
Use this skill on these changed files: <files>. Identify merge blockers, test gaps, and documentation needs. Return prioritized action items.
```

### Assess Merge Readiness

```
Review PR <url> and calculate merge readiness. Explain the score by category. Separate blocking issues from recommended improvements.
```

### Run Gated Multi-Agent Review

```
Run the full multi-agent review for PR <url>. Ask before running shell commands or writing to GitHub. Produce the final review draft locally.
```

## Limitations

- It depends on Claude Flow and Flow-Nexus tools that may not be installed.
- It references scripts and reference files that are not included in this package.
- Shell commands and GitHub write actions require manual trust review before use.
- It provides a review process, not guaranteed vulnerability detection.

## Best Practices

- Confirm repository trust before enabling shell commands or external tools.
- Generate a local report first, then post GitHub comments after human review.
- Provide project-specific review criteria before using merge readiness scores.

## Anti Patterns

- Running referenced scripts from an untrusted pull request workspace.
- Allowing automated approval or label changes without human confirmation.
- Treating agent findings as a replacement for required human code owner review.

## Security Audit

- Audited at: 2026-07-09T12:34:28.543\+00:00
- Summary: All 46 static findings are false positives caused by Markdown backticks and fenced code blocks, not Ruby shell execution. Manual review found separate security risks in the workflow: untrusted relative script execution, unpinned npx package execution, and GitHub state mutation without a confirmation gate. No prompt injection text was found in the reviewed files.

## Stats

- Views: 174
- Downloads: 6
- Favorites: 0
- Popularity score: 0