We made a skill for assessing the risk of merging a PR: /merge-risk
This addresses the code review bottleneck by helping devs trust the agent for lower risk changes.
It grades risk across 5 categories: alignment, impact, verification, rollback cost, and error detection.
- Alignment: does code follow the PR description and related tickets?
- Impact: what is the blast radius, and does it touch sensitive code paths?
- Verification: does the change include end-to-end verification? This means computer use, screen recordings, before/after screenshots... going beyond unit test coverage.
- Rollback cost: once it's shipped, how trivial is it to revert?
@mattpocockuk calls this a "two-way door" vs. a "one-way door."
- Error detection: are errors reported, logged, or simply swallowed?
Try it out:
> npx skills add warpdotdev/common-skills --skill merge-risk