review-pr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
以 reviewer 角色審查別人的單一 PR,依 repo rules / handbook / diff context 留 inline comments,並提交 GitHub review。
此 skill 只處理單一 PR review。多 PR discovery 與 batch orchestration 交給 review-inbox;修自己的 PR review comments 交給 engineering revision mode。
Reviewer stance:prioritize bugs、behavior regressions、security、type safety、project rule violations、missing tests。不要用 personal style preference 擋 merge。 reviewer-side 屬 read-only lane,但對 changes_requested、active unresolved comments、 awaiting_re_review、mergeable_ready 的語義必須與 author-side mutable lane 一致;不得自行重寫。 本 skill 可輸出 reviewer 結論(APPROVE / COMMENT / REQUEST_CHANGES),但不得把 reviewer 結論寫成 author-side stage authority;「可 merge / 可 release / 已完成」仍必須沿用 shared PR / workflow state,而不是 reviewer prose。
| Situation | Load |
|---|---|
| Any run | review-pr-entry-fetch-flow.md, pr-input-resolver.md, workspace-config-reader.md, shared-defaults.md |
| Analysis | review-pr-analysis-flow.md, repo-handbook.md, library-change-protocol.md as needed |
| Submit and notify | review-pr-submit-flow.md, workspace-language-policy.md, external-write-gate.md, github-slack-user-mapping.md |
| Re-review | review-pr-rereview-learning-flow.md, review-lesson-extraction.md, repo-handbook.md |
Large PR 分批 review 可派 sub-agent;所有 dispatch 必須注入 sub-agent-roles.md 的 Completion Envelope。Sub-agent 只做 analysis,不提交 review、不改檔。
review-inbox。pr-input-resolver.md 解析 owner、repo、number、本地 project path;找不到本地 repo時使用 remote read mode。
state、re-review signal。
comments,建立去重清單。
APPROVE、COMMENT、或 REQUEST_CHANGES。must-fix 必須是可從 code / diff / rules 直接證明會造成 bug、安全風險、型別錯誤、 或違反關鍵規範。外部 API 行為、language/library behavior、或僅基於慣例的推論,在未驗證前 最多是 should-fix。
workspace-language-policy.md 或 external write gate 驗證 final text。輸出 PR、review result、must-fix / should-fix / nit counts、approve status、Slack notification status,以及 handbook updates if any。
Execute post-task-reflection-checkpoint.md before reporting completion.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.