Skip to content
← Tools / Skills
Skill · .md packageTrail of Bits/10 trustVerified

pr-improver

Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped…

Visit official site →

About

Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr). Use to fix review findings on a branch before opening or updating a pull request ('clean up this branch', 'fix this PR until review passes', 'run review-and-fix on my changes'). NOT for a one-time review — run the PR-review skill directly."

argument-hint: "[BASE_BRANCH] [--reviewer <skill-or-agent>] [--max-rounds N]"

allowed-tools: Bash Glob Read TaskOutput TaskStop Workflow

What it can do

  • Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr). Use to fix review findings on a branch before opening or updating a pull request ('clean up this branch', 'fix this PR until review passes', 'run review-and-fix on my changes'). NOT for a one-time review — run the PR-review skill directly."
  • argument-hint: "[BASE_BRANCH] [--reviewer <skill-or-agent>] [--max-rounds N]"
  • allow

Setup

  1. Install: npx skills add trailofbits/skills --all
  2. The skill auto-loads when relevant, or invoke it by name in your agent.

Prerequisites

A compatible AI coding agent (Claude Code, Cursor, etc.).

Use cases

automation

Works with

Claude CodeAny agent (.md)

Trust score — 9/10

/10 trustVerified

Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.