ELYRAON PR Risk Reviewer

A generic diff summary tells you what changed. ELYRAON PR Risk Reviewer looks for concrete risk signals in a proposed change, so you know what to verify before it lands.

What it does

• Diff validation checks that the input is a supported unified text diff and rejects binary content and combined patches instead of guessing.
• Risk identification flags changes to security-sensitive paths, CI configuration, and dependency manifests.
• Line-level evidence points to the specific hunks and relative file paths behind each finding, so you can check them yourself.
• Static analysis runs locally through a bundled Python helper on the diff file you provide. It does not execute your code.
• JSON reporting produces structured output with risk codes and findings, which your agent turns into a review with recommended follow-up verification.

How it works

1. Point the skill at a unified diff file.
2. A bundled Python 3 script parses the diff and inventories the changed hunks.
3. Your agent reads the JSON report and presents findings with their evidence.
4. You decide what to verify, test, or fix before merging.

Requirements

Python 3 and a unified diff file of up to 1MB. No repository access or external services are needed.

What it is not

It is a static review aid. It does not run tests, create or merge pull requests, modify your code, or prove a patch is safe. See Known Limitations.