菜单
Review pull requests and staged changes before merge. Focuses on silent errors, unexpected behavior, and non-obvious bugs. Use when the user asks to review a PR, diff, or changes before merging into main. Does not propose major architectural changes.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | review-pr |
| description | Review pull requests and staged changes before merge. Focuses on silent errors, unexpected behavior, and non-obvious bugs. Use when the user asks to review a PR, diff, or changes before merging into main. Does not propose major architectural changes. |
Review pull requests and changes before merging into main. Focus on issues that can cause silent errors, unexpected behavior, or non-obvious bugs. Do not propose major architectural changes—the main structure is accepted.
git diff main...HEAD
For uncommitted changes:
git diff main
Summarize:
Walk through the diff and check each category below. Flag issues with file:line references.
Produce a structured plan with prioritized, actionable items (see Output format).
In scope: Silent errors, unexpected behavior, non-obvious bugs, edge cases, data integrity, security gaps, async/race issues.
Out of scope: Major refactors, new patterns, structural changes to the codebase.
| Category | What to look for |
|---|---|
| Silent failures | Swallowed errors, catch without rethrow/log, missing error handling in async flows |
| Null/undefined | Optional chaining gaps, ?. vs . misuse, unguarded access after nullable checks |
| Async/race | Missing await, parallel vs sequential ordering, stale closures |
| Data integrity | Schema/validation mismatches, missing Zod/validation, type coercion risks |
| Auth/security | Missing auth checks, IDOR risks, injection (SQL, XSS) |
| Edge cases | Empty arrays, zero, empty string, boundary conditions |
| Conventions | Project rules from root and app AGENTS.md (e.g. "avoid pulling to globals") |
apps/backend/AGENTS.md) for conventions..ai/memory/decisions/—do not propose new ADRs or structural changes.# PR Review: [branch/scope]
## Summary
[1–2 sentences on scope and risk level]
## Improvement Plan
### Critical (fix before merge)
- [ ] [Issue] — [file:line] — [suggestion]
### Should fix
- [ ] ...
### Consider
- [ ] ...
Work with Storybook in apps/ui (colocated stories, MSW, TanStack Start, Storybook MCP). Use when writing or updating stories, using the ctxpipe-storybook MCP, previewing components in Storybook, or when adding new UI components or pages in apps/ui.
React UI patterns for apps/ui—Effects vs rendering, TanStack Query for all server data, useMemo, keys, event handlers. Start here when creating or editing React components.
Initialize the ConKeeper memory system for the current project. Creates the directory structure and starter files for persistent AI context.
Track recurring session friction and success patterns across memory (sessions/, patterns). Use periodically or when improving agent instructions—not every turn.
Lightweight session retrospective: summarize what worked, what confused the agent, and propose a sessions/ note or pattern bullet. Use after substantial tasks or before handoff.
Search .ai/memory for keywords, topics, or ADR numbers before loading large files. Use when you need relevant memory without reading patterns.md or all ADRs whole.