An automated workflow for GitHub Pull Requests that performs deep security, performance, and quality analysis using the GitHub CLI.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install oc-pr-review
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install oc-pr-review using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is PR Review Skill?
The PR Review skill provides a comprehensive 6-step workflow for auditing Pull Requests directly within your AI agent environment. By leveraging the GitHub CLI, it allows Openclaw Skills to fetch PR metadata, analyze diffs, and generate detailed reports covering security vulnerabilities, test gaps, and code quality. This skill bridges the gap between code submission and final approval by providing actionable technical feedback and facilitating team communication through integrated notification systems.
PR Review Skill Use Cases
- Automating security vulnerability checks during PR reviews to prevent injection or data exposure.
- Analyzing test coverage and suggesting missing edge cases for newly added code.
- Evaluating the performance impact of database queries and algorithm changes before they reach production.
- Generating structured review reports and pushing them to Feishu or Lark for team visibility.
- Conducting rapid code quality audits to ensure compliance with project naming and architecture standards.
How PR Review Skill Works
- Fetch PR metadata and full diffs using the GitHub CLI based on a URL, PR number, or branch name.
- Classify changed files into categories such as security-critical, core logic, dependencies, or configuration.
- Run a multi-dimensional security audit against a checklist of common vulnerabilities like XSS, SQL injection, and hardcoded secrets.
- Assess test quality by verifying if new features have corresponding tests and evaluating the meaningfulness of assertions.
- Review performance and code quality to identify bottlenecks like N+1 queries or high cyclomatic complexity.
- Compile a final review report, submit comments to the PR, and optionally notify the team via messaging tools.
PR Review Skill Setup
To use this skill with Openclaw Skills, you must have the GitHub CLI installed and authenticated.
# Install GitHub CLI (example for macOS)
brew install gh
# Authenticate with your GitHub account
gh auth login
# Verify your authentication status
gh auth status
PR Review Skill Data Schema & Taxonomy
The skill organizes its analysis and output according to the following structure:
| Data Component | Format | Description |
|---|---|---|
| PR Metadata | JSON Object | Includes title, author, state, additions, deletions, and changed files. |
| File Taxonomy | Metadata Table | Categorizes files into Security, Tests, Dependencies, Core Logic, or Docs. |
| Audit Report | Markdown | A structured report with severity levels (Critical, High, Medium, Low). |
| Notification | Card/Rich Text | Formatted summary for integration with Feishu or Lark channels. |
PR Review Skill Advanced Features
- Multi-platform notifications supporting Feishu/Lark rich text cards for instant team feedback.
- Granular security scanning covering authentication, data exposure, injection risks, and dependency vulnerabilities.
- Selective review modes including Fast Security Mode or Fast Test Mode for rapid iteration.
- Automated GitHub actions to approve or request changes via the
gh pr reviewAPI. - Deep diff analysis that filters out noise like lock files or generated code to focus on human-written logic.
SKILL.md
Loading
Related Openclaw Skills
Image to Video Generator Free
A powerful AI skill that breathes life into static images by transforming them into high-quality animated video sequences for free.
Xianyu Publisher
An automated browser-based tool for publishing and managing product listings on the Xianyu (Idle Fish) platform.
Shenzhen Property Tax Calculator
A professional-grade calculator for estimating comprehensive second-hand property transfer taxes and fees within the Shenzhen real estate market.
Custom Skill Request
A dedicated framework for requesting bespoke, private, or commercial AI agent capabilities through professional development channels.
Doc Generator
An automated documentation engine that extracts API metadata and technical specifications directly from source code to generate structured documents.
Daily Lottery Statistics & Trend Analysis
A professional data processing skill designed to aggregate historical lottery results and generate multi-dimensional statistical trend reports.
Featured*
