Review PR

End-to-end review of a GitHub pull request. Combines code review, security review, and convention checks. Posts findings back to GitHub.

Invocation

/review-pr <number> — e.g. /review-pr 123. Operates on the current repo's PR. If no number is given, ask the user which PR.

Workflow

1. Fetch the PR

Run scripts/fetch-pr.sh <number>. It emits metadata, commits, changed files, and the diff in one pass. If gh is missing or unauthenticated, surface the error and stop.

Capture the head SHA (headRefOid) — required for inline comments.

2. Check out the PR locally

To read full files (not just the diff) and to run lint/tests against the PR's HEAD, check it out locally: