CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

pr-analysis

Analyze pull request impact on Harness pipelines via MCP. Assess PR pipeline impact by identifying which pipelines, services, and environments are affected by code changes. Perform security-focused PR reviews checking for secrets, vulnerabilities, and compliance. Track PRs from merge through deployment to production verification. Use when asked to analyze PR impact, review PR security, or track a PR to production. Trigger phrases: PR impact, pull request analysis, PR security review, PR to production, merge impact, deployment tracking, code change impact, PR pipeline, which pipelines affected.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, mostly lean instruction skill with executable MCP call blocks, a clear three-task workflow, and useful troubleshooting guidance. The main gaps are the absence of explicit validation checkpoints in the workflow and reliance on a single MCP tool (harness_list) while describing data retrieval steps that would need others.

Suggestions

Add explicit validation checkpoints, e.g. before presenting DIRECT/INDIRECT impact, cross-check the computed pipeline list against actual trigger path filters (the Troubleshooting section already hints at this failure mode).

Replace the repeated 'Gather from the user' blocks in steps 3–5 with a single shared input-gathering step, and drop the DORA parenthetical, which explains a concept Claude already knows.

Name the concrete MCP tools and parameters for retrieving execution details, security scan results, and coverage deltas rather than invoking only harness_list throughout.

DimensionReasoningScore

Conciseness

Largely lean, checklist-driven content with little concept padding, but it can be tightened: the "Gather from the user" block repeats across steps 3–5, and the DORA Lead Time aside explains a concept Claude already knows. Anchor 4 (efficient, minor trimming possible) rather than 5 (every token earns its place).

4 / 5

Actionability

Concrete MCP call blocks with parameters (harness_list with resource_type "pipeline"/"trigger"/"execution") are executable, and the instruction-style checklists are specific. But only harness_list is ever invoked — steps 2–5 describe retrieving build status, security scan results, and coverage deltas without naming the tool or parameters for those — a minor gap that keeps it below fully copy-paste-ready anchor 5.

4 / 5

Workflow Clarity

Clear 5-step sequence with per-task sub-stages and a structured findings format; the Troubleshooting section gives error-recovery guidance for common failure modes. However, no explicit validation checkpoints exist (e.g., confirming the computed impact list against actual triggers before presenting "DIRECT IMPACT"), so it fits anchor 4 (most checkpoints present, minor validation gaps) rather than 5.

4 / 5

Progressive Disclosure

No bundle files exist and the body is well-organized with clear section headers (Instructions, Examples, Performance Notes, Troubleshooting) — good structure. At ~155 lines, the detailed security checklist and troubleshooting content could arguably live in one-level-deep reference files (TROUBLESHOOTING.md, SECURITY-CHECKLIST.md), which is the minor organization gap of anchor 4.

4 / 5

Total

16

/

20

Passed

Description

96%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An excellent description: concrete third-person capability statements, an explicit 'Use when' clause, and a rich trigger-phrase list with synonyms. Only weakness is slight overlap risk between generic PR-review phrasing and general code-review skills.

DimensionReasoningScore

Specificity

Lists multiple concrete actions across all three capabilities: "identifying which pipelines, services, and environments are affected", "checking for secrets, vulnerabilities, and compliance", and "Track PRs from merge through deployment to production verification" — comprehensive and concrete, not a level-4 case since coverage spans every advertised capability.

5 / 5

Completeness

Explicitly answers both: what ("Analyze pull request impact on Harness pipelines… Perform security-focused PR reviews… Track PRs from merge through deployment") and when ("Use when asked to analyze PR impact, review PR security, or track a PR to production"), plus concrete trigger phrases — matching the anchor-5 example structure exactly. Voice is third person, so no penalty applies.

5 / 5

Trigger Term Quality

"PR impact, pull request analysis, PR security review, PR to production, merge impact, deployment tracking, code change impact, PR pipeline, which pipelines affected" covers natural phrasings with PR/pull-request synonyms and a question-style phrase users would actually type; anchor 4 ("a few natural terms missing") fits less well than the comprehensive synonym coverage shown here.

5 / 5

Distinctiveness Conflict Risk

The Harness/MCP pipeline niche and phrases like "PR pipeline" and "PR to production" are distinct, but generic phrases like "PR security review" and "pull request analysis" carry minor overlap risk with general code-review skills — anchor 4 ("mostly distinct; minor overlap risk") rather than 5.

4 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

harness/harness-ai

Path

plugins/claude/skills/pr-analysis/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.