360 Secure SkillHub
360 安全技能中心

Pull Request Reviewer

该 Skill 用于对现有 GitHub PR 进行基于 diff 的代码评审:解析目标 PR 编号、读取元数据与完整 diff,检查正确性、仓库约定、性能、测试覆盖与安全敏感改动,按发现优先的原则输出可执行的评审意见、风险摘要与后续改进建议,并强调结论必须基于实际 diff 而非假设。

wimi321
wimi321
热度 40.67
最近更新 2026-05-11 17:39:39
分类:开发依赖:第三方 API / 内部调用大模型应用场景:代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add pr-audit
Metadata
name
pull_request_reviewer
description
Use when the user wants a local review of a GitHub pull request based on its diff, risks, quality, performance, tests, and security implications.

Pull Request Reviewer

Use this skill for code review of an existing GitHub PR.

Workflow

  1. Resolve the target PR number or list open PRs if needed.
  2. Read PR metadata and full diff.
  3. Review correctness, conventions, performance, test coverage, and security-sensitive changes.
  4. Prioritize concrete findings over generic praise.
  5. Return a structured review with suggested follow-up.

Guardrails

  • Base the review on the actual diff, not assumptions.
  • Findings first, summary second.
  • Keep comments actionable and specific.

Example Requests

  • Review PR #123 for correctness and risk.
  • List the biggest problems in this open PR.

Inputs

  • PR number or selection
  • GitHub diff
  • Repo conventions

Outputs

  • Ordered review findings
  • Risk summary
  • Improvement suggestions

Success Criteria

  • The review is grounded in the actual diff.
  • Findings are actionable.
  • Risky changes are prioritized.

Non-Goals

  • Generic praise-only review
  • Reviewing without reading the diff

Source Provenance

Derived from src/commands/review.ts.