pr-review

pr-review is a command for GitHub Copilot from yuri-semenenko/ai-engineering-workspace. It costs 11 tokens per session (419 once invoked), scanned A, original, MIT.

A prompt for reviewing a pull request, the proposed change submitted for code review, against its intended behavior. It looks for correctness, security, reliability, maintainability, scalability, and readability issues, then labels findings by severity.

In plain words
What is it for?
Use it to review a branch, diff, or pull request and produce classified findings with file and line references where possible.
Why use it?
It helps separate evidence-based problems from personal style preferences and prevents low-cost nitpicks from crowding out important issues. It also asks the reviewer to inspect tests and surrounding code before judging.

Command for GitHub Copilot

Written for GitHub Copilot: a Copilot chat mode or prompt.

Good fit Use it to review a branch, diff, or pull request and produce classified findings with file and line references where possible.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/yuri-semenenko/ai-engineering-workspace/pr-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/yuri-semenenko/ai-engineering-workspace

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pr-review

README.md
[![agentmods](https://agentmods.dev/badge/commands/yuri-semenenko/ai-engineering-workspace/pr-review/github.svg)](https://agentmods.dev/commands/yuri-semenenko/ai-engineering-workspace/pr-review)
Your own site
<a href="https://agentmods.dev/commands/yuri-semenenko/ai-engineering-workspace/pr-review"><img src="https://agentmods.dev/badge/commands/yuri-semenenko/ai-engineering-workspace/pr-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for pr-review

Your own site · 80×15
<a href="https://agentmods.dev/commands/yuri-semenenko/ai-engineering-workspace/pr-review"><img src="https://agentmods.dev/badge/commands/yuri-semenenko/ai-engineering-workspace/pr-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 11 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 419 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00011 $0.00419
Opus 5.5 $0.00004 $0.00168
Sonnet 5.5 $0.00002 $0.00084
Haiku 4.5 $0.00001 $0.00042

Measured 5d ago against content hash 7b8ab37145cc, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

pr-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

copilot/workspace-template/.github/prompts/pr-review.prompt.md · 52 lines

What it actually says

PR Review Prompt

Role: Act as a Staff-level code reviewer.

Context: Review the current branch, diff, or PR. Focus on meaningful engineering concerns, not preference-driven nitpicks.

Task: Find correctness, security, reliability, maintainability, scalability, and readability issues. Where the diff touches them, these include two writers racing on one piece of state, a step that corrupts data when retried after a partial failure, and outside data passed inward without being parsed at its trust boundary.

Constraints:

  • Read the tests and PR description first to recover intended behavior, then read the implementation against that intent.
  • Read enough surrounding code to understand the changed behavior.
  • Cite file and line references when possible, and name the input or sequence that triggers each issue and what breaks.
  • Classify every finding before writing it.
  • Classification is severity, not certainty: when unsure a finding is real, phrase it as a question rather than an assertion, and do not inflate a Critical you cannot fully trace.
  • Run the same gather-then-judge sequence every review, not only on large diffs: first orient on the changed surface, then gather findings by angle (correctness, tests, security when the surface is sensitive, performance), then classify and rule as one judgment pass. Gathering is evidence, not the verdict.
  • Drop Optional findings if ignoring them has no concrete cost.
  • Write in English unless explicitly requested otherwise.

Output Format:

## Summary
<one paragraph: scope, overall direction, verdict>

## Critical
- `path/to/file.ts:42` - <issue> - <why it is critical> - <suggested fix>

## Important
- ...

## Optional
- ...

## Verdict
<approve | request changes | needs discussion> - <one sentence>

If a bucket is empty, write _None._.

Success Criteria:

  • Findings are actionable and grounded in code.
  • Severity matches actual impact.
  • The review avoids style-only noise.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago Changed 7b8ab37145cc
  2. 6d ago First seen · 52 lines · 11 tokens per session scan A 52bdde1559c6

Subscribe to this mod's changes

pr-review is a command published in the GitHub repository yuri-semenenko/ai-engineering-workspace (4 stars, last pushed 3d ago), licensed MIT. It adds 11 tokens to every session and 419 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-31.

Related

pr-review compared with commands from other repositories

pr-review next to 6 commands from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
pr-reviewyuri-semenenko/ai-engineering-workspaceCommand43d agoMITA11GitHub Copilot
pr-quality-gate-qarjmurillo/ai-agentsCommand49yesterdayMITA0GitHub Copilot
pr-quality-gate-agent-safetyrjmurillo/ai-agentsCommand49yesterdayMITA0Claude Code, GitHub Copilot
pr-quality-gate-code-qualityrjmurillo/ai-agentsCommand49yesterdayMITA0GitHub Copilot
pr-quality-gate-decision-rigorrjmurillo/ai-agentsCommand49yesterdayMITA0GitHub Copilot
pr-quality-gate-reliabilityrjmurillo/ai-agentsCommand49yesterdayMITA0GitHub Copilot
pr-quality-gate-roadmaprjmurillo/ai-agentsCommand49yesterdayMITA0GitHub Copilot