关于
This skill reviews pull requests by analyzing code diffs against a base branch for correctness, test coverage, and documentation accuracy. It automatically examines changed code for edge cases, error handling, and tests for new logic. Use it when asked to review branches, diffs, or pull requests in development workflows.
快速安装
Claude Code
推荐npx skills add trailofbits/skills -a claude-code/plugin add https://github.com/trailofbits/skillsgit clone https://github.com/trailofbits/skills.git ~/.claude/skills/review-pr在 Claude Code 中复制并粘贴此命令以安装该技能
技能文档
PR Review
Review the branch's change surface, not the whole repository.
- Establish the diff:
git diff <base>...HEAD(andgit diff <base>when the working tree carries uncommitted changes that belong to the branch). The base branch is named by the caller; fall back tomain. - Review every changed hunk for correctness: wrong results on edge inputs, unhandled error paths, and behavior that contradicts the function's name or callers.
- Check test coverage for the changed behavior: new logic without a test exercising its edge cases is a finding.
- Check documentation the diff made stale: statements in README or docs that were true on the base branch and are false after the change.
- Report every defect found, each with a severity; include minor and informational findings. Do not report defects in files the branch did not touch — they are outside the pull request.
GitHub 仓库
常见问题
什么是 review-pr Skill?
review-pr 是一个 Claude Skill,作者为 trailofbits。Skill 将 Claude 按需加载的说明和资源打包,让 Claude 无需额外提示即可执行与 review-pr 相关的任务。
如何安装 review-pr?
使用本页的安装命令:将 review-pr 作为插件添加到 Claude Code,或将其仓库克隆到 skills 目录,然后重启 Claude 以加载该 Skill。
review-pr 属于哪个分类?
review-pr 属于测试分类。
review-pr 可以免费使用吗?
可以。review-pr 已收录在 AIMCP,可免费安装。
相关推荐技能
该Skill通过60+个学术基准测试(如MMLU、GSM8K等)评估大语言模型质量,适用于模型对比、学术研究及训练进度追踪。它支持HuggingFace、vLLM和API接口,被EleutherAI等行业领先机构广泛采用。开发者可通过简单命令行快速对模型进行多任务批量评估。
这个Claude Skill提供了关于Cloudflare Cron Triggers的完整知识库,用于通过cron表达式定时执行Workers。它支持配置周期性任务、维护作业和自动化工作流,并能处理常见的cron触发错误。开发者可以用它来设置定时任务、测试cron处理器,并集成Workflows和Green Compute功能。
该Skill为开发者提供了基于Playwright的本地Web应用测试工具集,支持自动化测试前端功能、调试UI行为、捕获屏幕截图和查看浏览器日志。它包含管理服务器生命周期的辅助脚本,可直接作为黑盒工具运行而无需阅读源码。适用于需要快速验证本地Web应用界面和交互功能的开发场景。
这个Skill用于开发分支完成后的集成决策,当代码实现完成且测试通过时,它会引导开发者选择合适的工作流。它首先验证测试状态,然后提供合并、创建PR或清理等结构化选项。核心价值在于确保代码质量的同时,标准化分支收尾流程。
