pr-improver — Claude Code skill: what it does, how to install
pr-improver runs repeated PR review and fix passes on the current branch until blocking findings are cleared. Use it before opening or updating a pull request.
npx skills add trailofbits/skills --skill pr-improver -a claude-codeWhat pr-improver does
pr-improver works on the current branch rather than performing a single review. It resolves the base branch, reads the branch diff, and turns the changed files into directory-level scope. That lets related tests added beside modified code stay inside the review area.
The skill starts the workflows/improve.js workflow, which sends the changes to an installed PR reviewer and then to a fixer subagent. The default reviewer is pr-review-toolkit:review-pr; the cycle records its progress, checks scope after fix rounds, and can stop when it detects escalation or a guard violation. Changes stay in the working tree, and the skill does not create commits.
The standard setup needs the pr-review-toolkit plugin, since the loop stops when its reviewer is unavailable. It also relies on the Workflow tool. The run stops when the current branch is the base branch or when the base-to-HEAD diff is empty.
What it helps with
- run a PR review before opening the pull request
- fix reviewer findings across several rounds
- scope checks to directories touched by the branch
- stop unsafe fixes that leave the declared scope
Example prompts for the agent
- Clean up the current branch by fixing PR findings until the review is clear.
- Run the improvement loop against
mainand set--max-rounds N. - Use
pr-review-toolkit:review-prto review and fix the current branch.
How to install pr-improver
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill pr-improver -a claude-code2Manually: put the files in place
~/.claude/skills/pr-improver/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/pr-improver/
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill pr-improver -a codex2Manually: put the files in place
.agents/skills/pr-improver/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill pr-improver -a cursor2Manually: put the files in place
.cursor/skills/pr-improver/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install trailofbits/skills pr-improver2Manually: put the files in place
.github/skills/pr-improver/SKILL.md1Skills CLI (Vercel)
npx skills add trailofbits/skills --skill pr-improver -a gemini-cli2Platform CLI
gemini skills install https://github.com/trailofbits/skills --path plugins/code-improver/skills/pr-improverManually: put the files in place
.devin/skills/pr-improver/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add trailofbits/skills --skill pr-improver -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about pr-improver
How do I install pr-improver in Claude Code?
Run npx skills add trailofbits/skills --skill pr-improver -a claude-code, then check ~/.claude/skills/pr-improver/SKILL.md.
What does pr-improver do?
It reviews the current branch, sends findings to a fixer subagent, and repeats the process until the review has no blocking findings or a guard stops the run. It leaves changes uncommitted.
What does pr-improver need to run?
The default setup requires the pr-review-toolkit plugin because it supplies pr-review-toolkit:review-pr. The skill also runs through the Workflow tool.
