pr-review

pr-review is a skill for Claude Code, Codex from procoders/superpowers-v. It costs 96 tokens per session (5,135 once invoked), scanned A, original, MIT.

A structured review process for pull requests and other code changes. A pull request is a proposed change to a codebase before it is merged.

In plain words
What is it for?
Use it for deep reviews of GitHub or GitLab changes, local branches, and feature work, checking both project standards and the original requirements.
Why use it?
It catches bugs, overlooked edge cases, project-convention violations, and differences between the requested behavior and the implemented behavior.

Skill for Claude CodeCodex

Part of the superpowers-v plugin — 3 skills, 17 commands, 6 agents, 3 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/procoders/superpowers-v/pr-review
Any agent
npx skills add procoders/superpowers-v --skill pr-review
Clone the repo
git clone --depth 1 https://github.com/procoders/superpowers-v

Made for: Claude Code, Codex.

Or install superpowers-v, the plugin that ships this one along with the rest of its 3 skills, 17 commands, 6 agents, 3 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pr-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/procoders/superpowers-v/pr-review.svg)](https://agentmods.dev/skills/procoders/superpowers-v/pr-review)
Your own site
<a href="https://agentmods.dev/skills/procoders/superpowers-v/pr-review"><img src="https://agentmods.dev/badge/skills/procoders/superpowers-v/pr-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 96 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,135 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00096 $0.05135
Opus 5 $0.00048 $0.02567
Sonnet 5 $0.00019 $0.01027
Haiku 4.5 $0.00010 $0.00513

Measured 4d ago against content hash e85674955145, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pr-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/pr-review/SKILL.md · 271 lines

How it starts

The opening of the file, as written. The whole thing — 271 lines — stays where its author put it; the contents beside it link to each section on GitHub.

PR Review — Two-Axis, Stack-Agnostic Deep Code Review

Philosophy

The purpose of reviewing a change is to build shared understanding of what the change is trying to do, then systematically hunt for the bugs and edge cases that intent reveals. Every diff carries implicit assumptions, unstated invariants, and ambiguous decisions. The review walks through them one by one.

When neither the codebase nor the user can resolve a question deterministically — when it's a real unknown about author intent or non-local context — that question itself becomes a review comment for the author to answer. The goal is zero unexamined assumptions before the review is finalized.

The two review axes (Standards ⊥ Spec)

The diff is checked along two deliberately separate axes by parallel, context-isolated sub-agents (Phase 3.5):

  • Standards — does the code conform to this repo's documented conventions (discovered in Phase 0)?
  • Spec — does the code faithfully implement the originating spec / issue / story / PRD?

A change can pass one axis and fail the other:

  • Code that follows every standard but implements the wrong thing → Standards pass, Spec fail.
  • Code that does exactly what the issue asked but breaks the project's conventions → Spec pass, Standards fail.

The two axes run as separate sub-agents so neither pollutes the other's context, and their findings are reported side by side, never merged or reranked across axes — separation stops one axis from masking the other.

Prime Directives

  1. Review only — never modify code. No edits, fixes, commits, pushes, or merges. If the user asks for a fix mid-review, stop and confirm they want to leave the review before touching code.
  2. Exhaust the codebase before asking. Every question to the user (or the author) must include an Already checked: line citing what you grepped/read and why it didn't answer it. If you can't write that line, you haven't explored enough. See references/exploration-checklist.md.
  3. Use AskUserQuestion for every judgment question. Never plain-text a question. Lead with your recommendation (first option, (Recommended)). Batch up to 4 same-domain questions per call.
  4. Don't surface what the code already answers. Anti-pattern: asking something that 30 seconds of grep resolves. Reserve user questions for genuine judgment calls and author-intent for genuine non-local unknowns.
  5. Stay concrete. Anchor every question and finding to a specific file:line and a specific failure mode.
  6. Promote real unknowns to review comments. When neither code nor user can answer, record as an Open Question for the Author (defaults to post = [x]).
  7. Verdict and confidence are mandatory. Every finding gets both before the user sees the triage table.

Read the full file on GitHub · 271 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 271 lines · 96 tokens per session scan A e85674955145

Subscribe to this mod's changes

pr-review is a skill published in the GitHub repository procoders/superpowers-v (35 stars, last pushed 5d ago), licensed MIT. It adds 96 tokens to every session and 5,135 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

subagent-driven-development

Use when executing implementation plans with independent tasks in the current session.

DollarDill/beads-superpowers · 17 tokens

write-documentation

Use when writing or substantially rewriting human-facing prose: documentation, README, guides, blog posts, emails, Slack messages, PR descriptions, release notes, or any text a human will read. Not for code comments, commit messages, or agent-to-agent communication.

DollarDill/beads-superpowers · 56 tokens

brainstorming

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

DollarDill/beads-superpowers · 37 tokens

research-driven-development

Use when the user asks a question about a topic, requests research, or when understanding something is needed before planning. Triggers on "research this", "what is X", "how does Y work", "compare A vs B", "investigate", "deep dive", "look into".

DollarDill/beads-superpowers · 63 tokens

document-release

Use when implementation on a branch is complete and it is about to be merged or PR'd — or when finishing-a-development-branch reaches its docs-audit gate — and after code changes are committed, to ensure all project documentation accurately reflects shipped code. Covers README, ARCHITECTURE, CONTRIBUTING, CHANGELOG…

DollarDill/beads-superpowers · 103 tokens

finishing-a-development-branch

Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup.

DollarDill/beads-superpowers · 44 tokens