pr-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pr-review (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A real reviewer's pass on a GitHub pull request: a checked-out worktree, cross-file context, a multi-dimension fan-out with adversarial verification, feature-flag tracing, and inline comments posted back to the PR. This is the heavyweight path. For a quick read-only skim with no worktree, use /adk:review.
Scope is a GitHub PR URL only. https://github.com/<owner>/<repo>/pull/<n>. Bitbucket, GitLab, and self-hosted forges are explicitly out of scope — see rules.md. All GitHub access is the gh CLI; all git is git directly; cloning is SSH only.
The full operating contract lives in this skill folder — read these as you need them:
| Aspect | File |
|---|---|
| How you review (voice, severity rubric, evidence rules) | persona.md |
| The phased process + the Workflow orchestration | workflow.md |
| Hard rules + refusals + safety | rules.md |
| Per-dimension review guide + feature-flow tracing | dimensions.md |
| Classifying pre-existing PR review threads | comment-resolution.md |
(owner, repo, number). Verify gh auth status. (workflow.md Phase 0.)git fetch, add a detached git worktree at the PR head SHA. The worktree is read-only — you never edit the PR's code.gh pr view --json / gh pr diff / gh api; linked Jira/Confluence via the atlassian MCP.dimensions.md, workflow.md Phase 3.)comment-resolution.md).gh CLI. Confirm before transmitting.Every real PR gets the parallel-dimension Workflow in workflow.md: review fans out one dimension per agent → each finding is adversarially refuted by an independent skeptic → only survivors are reported. This catches what a linear pass misses and kills plausible-but-wrong findings. There is no "skip the workflow" fast path here — that's what /adk:review is for.
rules.md. --no-post produces the report and posts nothing.rules.md). Recommend merge; the human clicks. Never force-push.all).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.