This automates the tedious parts of code review by running git diff against your base branch and systematically checking for common issues across security, performance, code quality, and testing. It looks for hardcoded secrets, SQL injection risks, N+1 queries, missing error handling, and test coverage gaps, then gives you a structured markdown summary with critical issues, warnings, and suggestions. The checklist approach is solid because it catches things you might miss at 4pm on a Friday. Works best when you want a second pair of eyes before merging or need to review a large PR where manual inspection would take forever.

skills.sh installs
334
GitHub stars
422
last updated
Aug 21, 2026

Install

$ npx -y skills add onewave-ai/claude-skills --skill git-pr-reviewer --agent claude-code

Installs into .claude/skills of the current project.

Files

Git PR Reviewer

Instructions

When reviewing a pull request:

  1. Get the diff: Run git diff main...HEAD or git diff <base-branch>...HEAD
  2. Analyze changed files: Identify all modified, added, and deleted files
  3. Review each file for:
    • Logic errors and bugs
    • Security vulnerabilities (SQL injection, XSS, hardcoded secrets)
    • Performance issues (N+1 queries, unnecessary re-renders, memory leaks)
    • Code style and consistency
    • Missing error handling
    • Test coverage gaps

Review Checklist

Security

  • No hardcoded credentials or API keys
  • Input validation on user data
  • Proper authentication/authorization checks
  • No SQL injection vulnerabilities
  • XSS prevention in place

Code Quality

  • Functions are small and focused
  • No code duplication
  • Clear variable/function naming
  • Proper error handling
  • No unused imports or dead code

Performance

  • No unnecessary database queries
  • Efficient algorithms used
  • Proper caching where needed
  • No memory leaks

Testing

  • New code has tests
  • Edge cases covered
  • Tests are meaningful, not just for coverage

Sponsors

Details

Repository
github.com/onewave-ai/claude-skills
Categories
Security, Git & Pull Requests, Code Review & Quality
First seen
Jun 3, 2026

More from onewave-ai/claude-skills

All 108

Recommended

More Security
1wsimmonds avatarnextjs-client-cookie-patternwsimmonds/claude-nextjs-skillsPattern for client components calling server actions to set cookies in Next.js. Covers the two-file pattern of a client component with user interaction (onClick325skills.sh installs
2levnikolaevich avatarln-625-dependencies-auditorlevnikolaevich/claude-code-skillsChecks outdated packages, unused deps, reinvented wheels, CVE/CVSS vulnerability scan. Use when auditing dependencies.324skills.sh installs
3jezweb avatarstreamlit-snowflakejezweb/claude-skillsBuild and deploy Streamlit apps natively in Snowflake. Covers snowflake.yml scaffolding, Snowpark sessions, multi-page structure, Marketplace publishing as Nati320skills.sh installs
4syncfusion avatarsyncfusion-angular-blockeditorsyncfusion/angular-ui-components-skillsImplement the Syncfusion Angular Block Editor component. Use this skill for block-based editing with advanced formatting, custom menus, event handling, content 314skills.sh installs
5jezweb avatarclerk-authjezweb/claude-skillsClerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webh310skills.sh installs
6decebals avatarmaven-dependency-auditdecebals/claude-code-javaAudit Maven dependencies for outdated versions, security vulnerabilities, and conflicts. Use when user says "check dependencies", "audit dependencies", "outdate308skills.sh installs