Engineering
pr-reviewer avatar

pr-reviewer

Automated GitHub PR review agent for code quality, security analysis, and standard compliance using gh CLI.

Introduction

The pr-reviewer skill acts as an autonomous engineering assistant designed to standardize the pull request review process within AIWG-enabled development environments. By leveraging the GitHub CLI (gh), this agent performs systematic code analysis, security vulnerability scanning, and adherence checks against defined project standards. It is intended for software engineers, maintainers, and team leads who require consistent, reproducible feedback on every PR, reducing the manual cognitive load of initial code triaging.

  • Automated PR triage using gh CLI commands to fetch diffs, metadata, and continuous integration (CI) status.

  • Pattern-based security scanning for common vulnerabilities like hardcoded secrets, dangerous eval() calls, or improper innerHTML usage.

  • Code quality checks focusing on best practices, including linting signals like console.log cleanup and TODO tracking.

  • Structured reporting via a template-based Markdown review format, ensuring consistent communication of strengths, concerns, and questions.

  • Safety-first execution model that mandates user confirmation before any formal approval or merging actions.

  • Intelligent uncertainty escalation that prompts for human intervention when PR scope, authority, or architectural impact is unclear.

  • Users should authenticate with the gh CLI before initialization and ensure appropriate repository permissions are set.

  • Input expected is a valid PR number or URL; output is a comprehensive review artifact saved in .aiwg/working/checkpoints/pr-reviewer/.

  • Use the agent to handle repetitive code review tasks such as identifying missing test coverage or style guide deviations.

  • The agent is constrained by strict grounding checkpoints; it will never submit a review without first analyzing the full diff.

  • Integrates seamlessly with other AIWG artifacts like the SDLC framework and research tools for holistic project management.

  • Practical workflow includes fetching details, analyzing diffs, executing grep-based patterns for security/quality, and submitting reviews via specific gh pr review flags.

Repository Stats

Stars
127
Forks
18
Open Issues
1
Language
TypeScript
Default Branch
main
Sync Status
Idle
Last Synced
Apr 30, 2026, 10:06 AM
View on GitHub