A pull-request review workflow that compares a proposed code change with the project's rules, design decisions, and linked issue requirements. It reports critical problems, suggestions, and minor issues without changing the code.

Use it to review a GitHub pull request or inspect your own changes before opening one.

It provides a focused review without reading every source file and checks whether the change meets its stated acceptance criteria. It also checks repository and pull-request conventions.

How albertomarturelo/sii configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to albertomarturelo/sii. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/albertomarturelo/sii/main/.agents/skills/review-pr/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/albertomarturelo/sii

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/albertomarturelo/sii/review-pr/github.svg)](https://agentmods.dev/skills/albertomarturelo/sii/review-pr)

Your own site

<a href="https://agentmods.dev/skills/albertomarturelo/sii/review-pr"><img src="https://agentmods.dev/badge/skills/albertomarturelo/sii/review-pr/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/albertomarturelo/sii/review-pr"><img src="https://agentmods.dev/badge/skills/albertomarturelo/sii/review-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 60 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,550 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00060	$0.01550
Opus 5.5	$0.00024	$0.00620
Sonnet 5.5	$0.00012	$0.00310
Haiku 4.5	$0.00006	$0.00155

Measured yesterday against content hash 38eb3b7c4e38, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

review-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/review-pr/SKILL.md · 119 lines

How it starts

The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.

The user passes a PR number. If not provided, infer from the current branch (gh pr status --repo albertomarturelo/sii --json number --jq '.currentBranch.number'). If still none, ask.

1. Fetch PR metadata + diff (do FIRST)

gh pr view <n> --repo albertomarturelo/sii \
  --json baseRefName,headRefName,title,body,labels,commits,closingIssuesReferences
gh pr diff <n> --repo albertomarturelo/sii
git log <base>..<head> --pretty=format:%s

2. Load context indices (do NOT read full source files)

CLAUDE.md, docs/CONVENTIONS.md, docs/decisions/_index.md.
The linked issue body (gh issue view <n>) — extract the AC checklist + the "ADRs to load" list.
Each ADR named in the issue under docs/decisions/NNN-*.md.

Token cost so far ~2–4k. Still no full source-file reads.

3. Cross-check the diff against this checklist

GitHub workflow

Branch name matches <type>/GH-<issue>-<slug> (type ∈ feature/fix/chore/docs).
PR body references Closes #<issue> when there is a linked issue.
PR title is Conventional Commits, subject ≤72 chars; all commits the same.
No AI attribution anywhere (commits, title, body, comments). Block on any.
English everywhere.

Architecture (ADR-002 / ADR-003)

The CLI / MCP packages import ONLY @albertomarturelo/sii-core's task layer (+ seam interfaces). No reaching past tasks into a portal/dte facade.
packages/core/src imports NO Node-only module (node:*, fs, playwright, a keyring lib). Side-effects go through ports. Grep the diff.
No hard-coded SII hostnames outside the core config module. Grep the diff for sii.cl / palena / zeusr / misiir literals.
Adapters are injected at a surface composition root — no service-locator / global singletons reaching into the core.

SII contract (ADR-004)

No third-party SII libraries. Grep the diff for cl-sii, libredte, python-sii, dansanti, or any SII-domain package. Any hit blocks merge.
Every selector / endpoint / payload constant added carries an observation citation (// observed at <URL> on <YYYY-MM-DD>). Missing = block.
Auth detection is URL-based (zeusr.sii.cl ⇒ not authenticated), not DOM-marker based. No retry after a login failure / rate-limit block.

Read the full file on GitHub · 119 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 119 lines · 60 tokens per session scan A 38eb3b7c4e38

Subscribe to this mod's changes

review-pr is a skill published in the GitHub repository albertomarturelo/sii (16 stars, last pushed yesterday), licensed MIT. It adds 60 tokens to every session and 1,550 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-24.

Code review Git and workflow anthropic chile claude cli mcp model-context-protocol

ship-pr

Run the project checks and open a pull request once they pass.

zernie/vigiles · 15 tokens

diffctx

Use when reviewing or explaining a commit, PR, branch or uncommitted diff — "review my last commit", "review before merge", "review my changes", "what else does this change affect" — the callers and tests the change reaches outside its diff, then the surrounding code.

nikolay-e/diffctx · 57 tokens

sii: Skill for Claude Code