← Back to skills
PR Review & Change RiskMedium ReliabilityModerate-Risk Workflow

PR Change Risk Review

Provides deterministic risk scoring from diff metadata, then links high-risk changes to explicit mitigation and approval requirements.

Version

0.1.0

Last Updated

Apr 22, 2026

Verification Type

static analysis, manual review required

Downloads

0

Required inputs

  • diff_stats (json)

    PR change metrics and touched file inventory.

  • change_context (markdown)

    Operational context and rollout plan.

Expected outputs

  • risk_report (markdown)

    Severity score with evidence and rationale.

  • mitigation_checklist (markdown)

    Required safeguards before merge or deploy.

Included checks and assets

  • scripts/score_risk.py (script)

    Computes deterministic risk score from diff metrics.

  • references/scoring-rubric.md (reference)

    Baseline scoring rubric for PR risk estimation.

  • references/mitigation-catalog.md (reference)

    Mitigation options mapped by risk severity.

  • references/manual-override-policy.md (reference)

    Governance policy for manual risk score overrides.

Failure modes

  • Heuristic scoring may miss nuanced business risk.
  • Teams may override scores without strong evidence.
  • Diff statistics can underrepresent runtime behavior changes.

Ideal use cases

  • Large pull request triage
  • Release-risk gating
  • Shared-service code review

Example runs

Payment data-layer refactor

Validated sample run

Escalates to high risk due to critical paths and high churn.

Input preview

diff_stats.json + rollout context

Output preview

Risk score 8/10 with mitigation checklist

Changelog summary

  • 0.1.0 · Apr 22, 2026

    Initial release for PR change-risk scoring workflow.

Links

Inspect the source, read authored documentation, or download the published skill bundle.