gh-address-comments-2e5566 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gh-address-comments-2e5566 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user wants to work through requested changes on a GitHub pull request. Use the GitHub MCP or gh CLI for PR metadata and patch context. Treat thread-aware review data as a gh api graphql problem — the flat comment surface does not preserve full review-thread state.
Run all gh commands with elevated network access. If CLI auth is required, confirm gh auth status first and ask the user to authenticate with gh auth login if it fails.
gh pr view --json number,url.gh api graphql whenever the task depends on unresolved review threads, inline review locations, or resolution state — it fetches reviewThreads, isResolved, isOutdated, and file/line anchors.gh hits auth or rate-limit issues mid-run, ask the user to re-authenticate and retry.If neither the connector nor gh can resolve the PR cleanly, tell the user whether the blocker is missing repository scope, missing PR context, or CLI authentication, then ask for the missing repo/PR identifier or a refreshed gh login.
# Check auth
gh auth status
# View PR
gh pr view <number> --json number,url,title,state
# List review threads (GraphQL)
gh api graphql -f query='
query($owner:String!, $repo:String!, $pr:Int!) {
repository(owner:$owner, name:$repo) {
pullRequest(number:$pr) {
reviewThreads(first:50) {
nodes {
id
isResolved
isOutdated
comments(first:5) {
nodes { body path line }
}
}
}
}
}
}
' -f owner=OWNER -f repo=REPO -F pr=NUMBER~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.