Skip to content

Feature/4 implement skill pr review#6

Open
miroslavpojer wants to merge 10 commits into
masterfrom
feature/4-implement-skill-pr-review
Open

Feature/4 implement skill pr review#6
miroslavpojer wants to merge 10 commits into
masterfrom
feature/4-implement-skill-pr-review

Conversation

@miroslavpojer
Copy link
Copy Markdown
Contributor

Add pr-review skill

Adds a unified pull request review skill that applies structured, risk-aware code review based on the files a PR touches. Produces concise Blocker / Important / Nit comments grouped by severity.

  • Updated README.md — added pr-review to the Skill Catalog table
  • Updated docs/README.md — added pr-review to the Skill Guides table
  • Added docs/pr-review.md — end-user guide covering sections, trigger phrases, helpers, and install

Release Notes

  • Added skills/pr-review/SKILL.md — full review instructions covering standard, API contracts, dependency bumps, CI/CD, infrastructure, DB migrations, and elevated-risk sections
  • Added skills/pr-review/references/output-template.md — canonical output format examples for reviews
  • Added skills/pr-review/references/security-antipatterns.md — security patterns the skill actively scans for
  • Added skills/pr-review/scripts/fetch_pr.sh — fetches PR diff and file list via gh
  • Added skills/pr-review/scripts/classify_sections.py — determines which review sections apply from a file list
  • Added skills/pr-review/evals/ — trigger eval, fixture map, eval fixtures, and results summary

Closes #4

…pts for PR review

- Created `results-summary.md` to document evaluation results for the pr-review skill, detailing iterations, fixes, and overall trajectory.
- Added `trigger-eval.json` containing a set of queries for evaluating trigger conditions, including both triggering and non-triggering examples.
- Introduced `output-template.md` for standardized PR review output examples, outlining formatting rules and section guidelines.
- Developed `security-antipatterns.md` as a reference for identifying security issues during PR reviews, including common patterns and severity guidance.
- Implemented `classify_sections.py` to classify changed files into relevant PR review sections based on defined patterns.
- Created `fetch_pr.sh` script to fetch PR details and changed files using the GitHub CLI, facilitating integration with the classification script.
@miroslavpojer miroslavpojer self-assigned this May 21, 2026
@miroslavpojer miroslavpojer added the work in progress Work on this item is not yet finished (mainly intended for PRs) label May 21, 2026
@miroslavpojer miroslavpojer added work in progress Work on this item is not yet finished (mainly intended for PRs) and removed work in progress Work on this item is not yet finished (mainly intended for PRs) labels May 22, 2026
@miroslavpojer miroslavpojer removed the work in progress Work on this item is not yet finished (mainly intended for PRs) label May 22, 2026
@@ -0,0 +1,36 @@
# Sprint 23 — User Service Changelog
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why also the token saving skill in the PR?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR is build on top of previous as I am doing also folder moves.
Let's review.merge token-saving skill first, pls.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new pr-review skill to the toolkit, including structured review instructions, helper scripts to fetch/classify PR context, reference templates, and an eval suite; also updates documentation indexes and introduces a workflow to enforce release-notes presence in PR descriptions.

Changes:

  • Introduces skills/pr-review/ with SKILL definition, references, scripts, and eval fixtures/results.
  • Adds end-user documentation for the new skill and updates README indexes/catalogs.
  • Adds a GitHub Actions workflow to check for “Release Notes” in PR descriptions.

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated 8 comments.

Show a summary per file
File Description
.github/copilot-instructions.md Points PR review flow at the new pr-review skill (removes duplicated inline checks).
.github/workflows/check_pr_release_notes.yml Adds a workflow to require release notes presence in PR descriptions.
README.md Adds pr-review to the Skill Catalog.
docs/README.md Adds pr-review to the docs index tables and normalizes table formatting.
docs/getting-started.md Minor formatting/line-wrapping cleanup.
docs/pr-review.md New user guide explaining purpose, sections, triggers, helpers, and installation.
skills/pr-review/SKILL.md Core PR review skill definition and structured review checklist/format rules.
skills/pr-review/evals/evals.json Adds eval suite definitions for the skill (fixtures + expectations).
skills/pr-review/evals/fixture-map.md Maps eval IDs to fixture diffs and summarizes coverage.
skills/pr-review/evals/results-summary.md Documents evaluation iterations and outcomes.
skills/pr-review/evals/trigger-eval.json Adds trigger/negative-trigger queries to validate skill activation boundaries.
skills/pr-review/evals/files/api-rename.diff Eval fixture for API contract rename scenario.
skills/pr-review/evals/files/ci-gate-bypass.diff Eval fixture for CI gate bypass + secrets in workflow scenario.
skills/pr-review/evals/files/db-migration-risks.diff Eval fixture for migration rollback/data-loss risk scenario.
skills/pr-review/evals/files/dependency-bump-risk.diff Eval fixture for dependency bump risk scenario.
skills/pr-review/evals/files/docs-release-notes.diff Eval fixture for “release notes” (non-review) negative case.
skills/pr-review/evals/files/elevated-risk-auth-refactor.diff Eval fixture for elevated-risk auth change scenario.
skills/pr-review/evals/files/iac-wildcard-iam.diff Eval fixture for IaC wildcard IAM scenario.
skills/pr-review/evals/files/large-pr-and-vague-desc.diff Eval fixture for “large PR + vague description” scenario.
skills/pr-review/evals/files/multi-section-risks.diff Eval fixture combining DB/API/CI risks in one PR.
skills/pr-review/evals/files/skill-definition-clean.diff Eval fixture for a clean SKILL.md addition.
skills/pr-review/evals/files/skill-definition-violations.diff Eval fixture for SKILL.md convention violations.
skills/pr-review/evals/files/standard-clean-pr.diff Eval fixture for a clean “LGTM” utility PR.
skills/pr-review/references/output-template.md Canonical output formatting examples for reviews.
skills/pr-review/references/security-antipatterns.md Security anti-pattern reference for elevated-risk/security reviews.
skills/pr-review/scripts/classify_sections.py Helper to infer which review sections apply based on changed file paths.
skills/pr-review/scripts/fetch_pr.sh Helper to fetch PR description/files/diff via gh CLI.

Comment thread skills/pr-review/scripts/classify_sections.py Outdated
Comment thread skills/pr-review/scripts/classify_sections.py
Comment thread skills/pr-review/references/output-template.md Outdated
Comment thread skills/pr-review/evals/fixture-map.md Outdated
Comment thread docs/pr-review.md
Comment thread skills/pr-review/SKILL.md Outdated
Comment thread docs/pr-review.md Outdated
Comment thread skills/pr-review/scripts/fetch_pr.sh Outdated
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 27 out of 28 changed files in this pull request and generated 15 comments.

Comment thread .github/workflows/check_pr_release_notes.yml Outdated
Comment thread skills/pr-review/scripts/fetch_pr.sh Outdated
Comment thread skills/pr-review/SKILL.md Outdated
Comment thread skills/pr-review/evals/results-summary.md Outdated
Comment thread skills/pr-review/evals/fixture-map.md Outdated
Comment thread .github/workflows/check_pr_release_notes.yml Outdated
Comment thread skills/pr-review/scripts/fetch_pr.sh Outdated
Comment thread skills/pr-review/SKILL.md Outdated
Comment thread skills/pr-review/evals/results-summary.md Outdated
Comment thread skills/pr-review/evals/fixture-map.md Outdated
…ile paths in evaluation documentation and scripts for consistency.
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 26 out of 27 changed files in this pull request and generated 9 comments.

Comment thread skills/pr-review/SKILL.md
Comment thread skills/pr-review/scripts/fetch_pr.sh
Comment on lines +13 to +21
Output example:
Sections to apply:
[x] Standard review (always)
[x] API contracts (router.py, schemas.py)
[ ] Elevated risk
[ ] Dependency bumps
[ ] CI/CD
[ ] Infrastructure
"""
Comment thread skills/pr-review/evals/results-summary.md
Comment thread skills/pr-review/evals/fixture-map.md
Comment thread skills/pr-review/evals/fixture-map.md
Comment thread skills/pr-review/evals/fixture-map.md
"CI/CD: skipping test_user_api tests (-k flag) flagged as quality gate bypass (Blocker)",
"CI/CD: deploy trigger widened from branch-scoped to all pushes flagged",
"Elevated-risk overlay is NOT applied \u2014 PR has no auth/security/infra/wide-refactor touches despite touching multiple sections"
] },
"Missing trigger keywords in description is flagged",
"Hardcoded absolute path is flagged",
"Unreferenced script is flagged"
] }
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

implement skill - pr-review

3 participants