Cursor Skill：把 PR 审查写成 .cursor/skills/pr-review/SKILL.md

---
name: pr-review
description: Review a pull request for scope, tests, secrets, and changelog before merge.
---

# PR review

Follow this order. Do not skip secrets or changelog.

这不是 Roo Mode YAML。

## Scope

- Restate what the PR claims to change. Diff should match that claim.
- Reject drive-by refactors, unrelated files, and generated binaries.
- Flag new public routes, env vars, or schema changes that are missing from the description.

## Tests

- New behavior needs a test or an explicit reason the nearest existing test already covers it.
- Run the nearest typecheck / lint / unit test for the touched package.
- Do not add a second test runner.

## Secrets

- Reject committed tokens, cookies, `.env` values, and private keys.
- MCP / Skill files must use environment variable *names* only. Never paste a live credential.

## Changelog

- User-visible behavior needs a changelog / release note pointer, or a note that the change is internal-only.
- Version pins belong in official docs, not as a way to freeze a patched client.

## Output

Write: summary, blocking issues, nits, and a merge recommendation (approve / request changes).