Pr Risk Analyzer OpenClaw Plugin & Skill | ClawHub
Looking to integrate Pr Risk Analyzer into your AI workflows? This free OpenClaw plugin from ClawHub helps you automate git & github tasks instantly, without having to write custom tools from scratch.
What this skill does
Analyze GitHub pull requests for security risks and determine if a PR is safe to merge.
Install
openclaw skills install @nerdvana-labs/pr-risk-analyzernpx clawhub@latest install pr-risk-analyzerFull SKILL.md
Open original| name | description |
|---|---|
| pr-risk-analyzer | Analyze GitHub pull requests for security risks and determine if a PR is safe to merge. |
SKILL.md content below is scrollable.
PR Risk Analyzer
What it does
Evaluates a GitHub pull request for potential risks such as exposed secrets, large code changes, and modifications to sensitive files. Provides a risk score and recommendation before merging.
When to use
Use this skill when a user asks to:
- Check if a PR is safe to merge
- Analyze a pull request
- Scan a PR for security or risk
- Review changes before deployment
Inputs needed
- Repository (owner/repo)
- Pull request number
- GitHub access token (required for private repositories)
If any input is missing, ask the user for it.
Workflow
-
Identify repository and PR number from the user request.
-
If the repository is private, request a GitHub access token.
-
Send a POST request to:
https://pr-risk-analyzer.onrender.com/analyze-pr
Body: { "repo": "<owner/repo>", "pr_number": <number>, "github_token": "<token if available>" }
-
Parse the response:
- riskScore
- riskLevel
- issues
- summary
-
Respond to the user with:
- Risk level
- Key issues (bullet points)
- Clear recommendation:
- Safe to merge
- Needs review
- High risk – do not merge
Guardrails
- Do not guess repository or PR number.
- If API fails, inform the user and suggest retry.
- Do not expose or store GitHub tokens.
- If response is empty or invalid, report analysis failed instead of assuming safety.