Borrowing it
Nothing to install: this file belongs to dynatrace-oss/dtctl. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dynatrace-oss/dtctl/main/.agents/skills/pr-review/SKILL.mdgit clone --depth 1 https://github.com/dynatrace-oss/dtctlWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dynatrace-oss/dtctl/pr-review)<a href="https://agentmods.dev/skills/dynatrace-oss/dtctl/pr-review"><img src="https://agentmods.dev/badge/skills/dynatrace-oss/dtctl/pr-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dynatrace-oss/dtctl/pr-review"><img src="https://agentmods.dev/badge/skills/dynatrace-oss/dtctl/pr-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00082 | $0.02186 |
| Opus 5.5 | $0.00033 | $0.00874 |
| Sonnet 5.5 | $0.00016 | $0.00437 |
| Haiku 4.5 | $0.00008 | $0.00219 |
Grade A, and why
pr-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- pr-review — 86% identical, 25 lines differ
How it starts
The opening of the file, as written. The whole thing — 199 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PR Quality Review
Perform a comprehensive quality review of a pull request or feature branch. This skill covers production readiness, code quality, UX, documentation, tests, and safety.
The review is structured as a checklist across seven dimensions. For each dimension, investigate the actual code and report specific findings -- not just "looks good" but concrete observations with file paths and line numbers.
Getting Started
First, understand the scope of the change:
# What branch are we on, what's the base?
git branch --show-current
git log main..HEAD --oneline
# What files changed?
git diff main...HEAD --stat
# Full diff for review
git diff main...HEAD
If reviewing a remote PR, fetch it first:
gh pr view <number> --json title,body,files
gh pr diff <number>
Read the PR description and all commits to understand the intent before diving into code.
Review Dimensions
Work through each dimension below. For each one, report a status:
- Pass -- meets the bar, no issues
- Needs work -- specific issues found (list them)
- N/A -- not applicable to this change
1. Production Readiness
Does this code behave correctly and handle failure gracefully?
- Error handling: Are all errors checked? Are they wrapped with context (
fmt.Errorf("context: %w", err))? Do they surface actionable messages to users? - Edge cases: Empty inputs, nil values, missing config, network failures, API rate limits, large datasets, pagination boundaries
- Safety checks: All mutating commands (create, edit, apply, delete, update) must include safety checks after
LoadConfig()and before client operations. Pattern:
Verify correct operation type. Skip only in dry-run paths.checker, err := NewSafetyChecker(cfg) if err := checker.CheckError(safety.OperationXXX, safety.OwnershipUnknown); err != nil { return err } - No stdout in library code:
pkg/must return data, not print. Onlycmd/handles output. - No hardcoded secrets or customer data: No real names, env IDs, tokens, or emails in code or tests. Use
@example.invalidfor emails (RFC 2606).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -1 lines 91d76ccef2b5
- 2mo ago First seen · 200 lines · 82 tokens per session scan A 688f8ebe81a5
pr-review is a skill published in the GitHub repository dynatrace-oss/dtctl (198 stars, last pushed 17d ago), licensed Apache-2.0. It adds 82 tokens to every session and 2,186 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
autofix-pr
Watch a pull request and fix it from a worktree of its own (or, with --in-place, the user's own checkout) - CI failures, review feedback from trusted authors and merge conflicts are fixed, pushed to the PR branch and answered on the PR under the user's git and gh identity. Usage - /autofix-pr [ | ] [--once]…
gh-find-prs
Survey open Codewhale PRs and triage each for mergeability and disposition against the real landing branch.
hunk-launch-video
Produces Hunk videos by driving the real TUI headlessly in a PTY, compositing captioned 1080p frames in Chromium, and encoding with ffmpeg. Use for feature demos, workflow explainers, announcements, launch videos, and full-release roundups.
hunk-release
Prepares, publishes, verifies, and curates Hunk releases. Use for release metadata, benchmarks, tags, publishing, release videos, backports, or recovery.
git
Git and code hosting platform management — GitHub, GitLab, Codeberg, Forgejo. Zero barrier — install x-cmd and manage repos from the terminal. Use for "git", "github", "gitlab", "repo", "pull request", "code hosting".
vhs-e2e-gif
Record a test run, a TUI session, or any terminal command as a GIF with VHS and attach it to a GitHub PR as a release-hosted asset, never a repo commit. Use when asked to record an e2e run, demo a fix on a PR, attach a GIF or screen recording to a pull request, show a test passing visually, or produce a terminal…