Review a Pull Request
Thorough PR review workflow covering correctness, security, and style
CLAUDE.md
When reviewing a pull request:
- Read the PR description to understand the intent and scope of the change.
- Review the diff file by file. Read each change completely — don’t skim.
- Check for correctness: logic errors, off-by-one mistakes, unhandled edge cases, missing null checks.
- Check for security: injection risks, hardcoded secrets, missing auth checks, unsafe deserialization.
- Check for consistency: does the new code follow the project’s existing patterns and naming conventions?
- Check for test coverage: are the new behaviors tested? Are edge cases covered?
- If the change affects UI, pull the branch and test it visually.
- Leave specific, actionable comments with file:line references. Explain why, not just what.
- Distinguish blocking issues from suggestions. Mark non-blocking feedback as “nit” or “suggestion.”
Copy this workflow into your CLAUDE.md or agent config file so your agent follows this process automatically.