Does the skill perform the same checks for core team members?

The skill intelligently distinguishes between team members and community contributors using the repository's team configuration, skipping certain template and size checks for authorized members.

Can this skill detect duplicate pull requests?

Yes, it analyzes linked issues and searches for other open PRs referencing the same issue to alert maintainers of potential work duplication.

Does this skill have permission to post comments directly on GitHub?

No, this skill operates with read-only access. It outputs a structured 'review-decision.json' file which a downstream, deterministic CI/CD step uses to apply labels or post comments.

How are blocking points communicated?

The skill identifies up to five specific blocking points and includes them in a summary within the generated JSON output to help contributors fix issues quickly.

What specific security risks does the skill look for?

It audits code for missing authentication middleware, bypassed authorization checks, raw SQL injection, and potential privilege escalation within the diff.

Medusa PR Reviewer | Claude Code Skill for GitHub Reviews

This skill acts as an automated first-pass reviewer for the Medusa commerce platform repository, ensuring all incoming contributions meet the project's high standards. It systematically analyzes pull requests for template completeness, contribution guidelines, and strict code conventions across documentation, admin, and core packages. Beyond administrative checks, the skill performs deep security and performance audits on new code, identifying potential vulnerabilities like SQL injection or missing authentication. By generating a standardized JSON decision file, it allows maintainers to integrate deterministic labeling and commenting workflows into their CI/CD pipelines.

Key Features

01Deep security analysis focusing on authentication, authorization, and injection

0234,302 GitHub stars

03Context-aware code convention enforcement for Medusa's multi-package architecture

04Duplicate PR detection through linked issue cross-referencing

05Automated PR template and contribution guideline compliance verification

06Structured JSON output for seamless integration with GitHub Actions

Use Cases

01Automating the initial triage and feedback loop for high-volume open-source contributions

02Enforcing security best practices and coding standards before human review starts

03Standardizing the review decision process for maintainers across different repository areas

Tieline — product intent grounded in code

Medusa PR Reviewer

Key Features

Use Cases

OpenClaw Channel Configurator

Surrogacy Due Diligence

GH Issues Auto-Fixer

Key Features

Use Cases