pr-reviewer
by @briancolinger
Automated GitHub PR code review with diff analysis, lint integration, and structured reports. Use when reviewing pull requests, checking for security issues,...
clawhub install pr-reviewerπ About This Skill
name: pr-reviewer version: 1.0.1 description: Automated GitHub PR code review with diff analysis, lint integration, and structured reports. Use when reviewing pull requests, checking for security issues, error handling gaps, test coverage, or code style problems. Supports Go, Python, and JavaScript/TypeScript. Requires
gh CLI authenticated with repo access.
metadata:
openclaw:
requires:
bins: ["gh", "python3"]
anyBins: ["golangci-lint", "ruff"]
PR Reviewer
Automated code review for GitHub pull requests. Analyzes diffs for security issues, error handling gaps, style problems, and test coverage.
Prerequisites
gh CLI installed and authenticated (gh auth status)golangci-lint for Go linting, ruff for Python lintingQuick Start
# Review all open PRs in current repo
scripts/github/pr-reviewer.sh checkReview a specific PR
scripts/github/pr-reviewer.sh review 42Post review as GitHub comment
scripts/github/pr-reviewer.sh post 42Check status of all open PRs
scripts/github/pr-reviewer.sh statusList unreviewed PRs (useful for heartbeat/cron integration)
scripts/github/pr-reviewer.sh list-unreviewed
Configuration
Set these environment variables or the script auto-detects from the current git repo:
PR_REVIEW_REPO β GitHub repo in owner/repo format (default: detected from gh repo view)PR_REVIEW_DIR β Local checkout path for lint (default: git root of cwd)PR_REVIEW_STATE β State file path (default: ./data/pr-reviews.json)PR_REVIEW_OUTDIR β Report output directory (default: ./data/pr-reviews/)Directories Written
PR_REVIEW_STATE (default: ./data/pr-reviews.json) β Tracks reviewed PRs and their HEAD SHAsPR_REVIEW_OUTDIR (default: ./data/pr-reviews/) β Markdown review reportsWhat It Checks
| Category | Icon | Examples |
|----------|------|----------|
| Security | π΄ | Hardcoded credentials, AWS keys, secrets in code |
| Error Handling | π‘ | Discarded errors (Go _ :=), bare except: (Python), unchecked Close() |
| Risk | π | panic() calls, process.exit() |
| Style | π΅ | fmt.Print/print()/console.log in prod, very long lines |
| TODOs | π | TODO, FIXME, HACK, XXX markers |
| Test Coverage | π | Source files changed without corresponding test changes |
Smart Re-Review
Tracks HEAD SHA per PR. Only re-reviews when new commits are pushed. Use review to force re-review.
Report Format
Reports are saved as markdown files in the output directory. Each report includes:
Heartbeat/Cron Integration
Add to a periodic check (heartbeat, cron job, or CI):
UNREVIEWED=$(scripts/github/pr-reviewer.sh list-unreviewed)
if [ -n "$UNREVIEWED" ]; then
scripts/github/pr-reviewer.sh check
fi
Extending
The analysis patterns in the script are organized by language. Add new patterns by appending to the relevant pattern list in the analyze_diff() function:
# Add a new Go pattern
go_patterns.append((r'^\+.*os\.Exit\(', 'RISK', 'Direct os.Exit() β consider returning error'))
π‘ Examples
# Review all open PRs in current repo
scripts/github/pr-reviewer.sh checkReview a specific PR
scripts/github/pr-reviewer.sh review 42Post review as GitHub comment
scripts/github/pr-reviewer.sh post 42Check status of all open PRs
scripts/github/pr-reviewer.sh statusList unreviewed PRs (useful for heartbeat/cron integration)
scripts/github/pr-reviewer.sh list-unreviewed
βοΈ Configuration
Set these environment variables or the script auto-detects from the current git repo:
PR_REVIEW_REPO β GitHub repo in owner/repo format (default: detected from gh repo view)PR_REVIEW_DIR β Local checkout path for lint (default: git root of cwd)PR_REVIEW_STATE β State file path (default: ./data/pr-reviews.json)PR_REVIEW_OUTDIR β Report output directory (default: ./data/pr-reviews/)