Is git-pr-reviewer safe to install?

SaferSkills independently audited git-pr-reviewer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

git-pr-reviewer/SKILL.md · 1 file

git-pr-reviewer/SKILL.md1.8 KB · Markdown

name: git-pr-reviewer

description: Review pull requests for code quality, security issues, and best practices. Use when reviewing PRs, checking code changes, or analyzing diffs before merge.

allowed-tools: Read, Grep, Glob, Bash

Git PR Reviewer

Instructions

When reviewing a pull request:

Get the diff: Run git diff main...HEAD or git diff <base-branch>...HEAD
Analyze changed files: Identify all modified, added, and deleted files
Review each file for:

Logic errors and bugs
Security vulnerabilities (SQL injection, XSS, hardcoded secrets)
Performance issues (N+1 queries, unnecessary re-renders, memory leaks)
Code style and consistency
Missing error handling
Test coverage gaps

Review Checklist

Security

[ ] No hardcoded credentials or API keys
[ ] Input validation on user data
[ ] Proper authentication/authorization checks
[ ] No SQL injection vulnerabilities
[ ] XSS prevention in place

Code Quality

[ ] Functions are small and focused
[ ] No code duplication
[ ] Clear variable/function naming
[ ] Proper error handling
[ ] No unused imports or dead code

Performance

[ ] No unnecessary database queries
[ ] Efficient algorithms used
[ ] Proper caching where needed
[ ] No memory leaks

Testing

[ ] New code has tests
[ ] Edge cases covered
[ ] Tests are meaningful, not just for coverage

Output Format

## PR Review Summary

### Overview
[Brief summary of changes]

### Issues Found
#### Critical
- [Issue description + file:line]

#### Warnings
- [Issue description + file:line]

#### Suggestions
- [Improvement ideas]

### Approval Status
[APPROVE / REQUEST CHANGES / NEEDS DISCUSSION]

Example

# Review current branch against main
git diff main...HEAD --stat
git diff main...HEAD

git-pr-reviewer— agent skill

Is git-pr-reviewer safe to install?

Git PR Reviewer

Instructions

Review Checklist

Security

Code Quality

Performance

Testing

Output Format

Example

Audit the pieces. Scan the whole. Decide.