360 Secure SkillHub
360 安全技能中心

PR Auto-Review

面向 GitHub PR 的自动化审查流水线：拉取 PR diff、检查 CI/CD 状态、扫描硬编码敏感信息、探测服务健康状态，生成 Markdown 报告并可经 webhook 发送到 Discord 频道；依赖 gh、git、curl、jq。

terrycarter1985
terrycarter1985
热度 25.49
最近更新 2026-05-12 07:56:52
分类：开发依赖：代码执行 / 第三方 API / 读写文件应用场景：代码审查 / DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add pr-auto-review
Metadata
name
pr-auto-review
description
Automated PR review pipeline: code review + service health check + Discord notification. Trigger when a new PR is submitted or when running post-merge validation. Handles: PR diff analysis, CI/CD status check, secret scanning, service health probes, and posting structured results to a Discord channel via webhook. Use phrases: "review this PR", "run PR checks", "auto-review", "PR pipeline", "check PR and notify Discord", "post-merge health check".

PR Auto-Review

Automated pipeline that runs when a new PR is submitted:

  1. Code Review — fetch PR diff, check CI/CD status, scan for secrets, list changed files
  2. Health Check — verify service availability (uses healthcheck skill if present, falls back to curl probes)
  3. Discord Notification — post structured results to a team channel

Quick Start

# Review a GitHub PR and notify Discord
bash scripts/pr-auto-review.sh \
  --pr-url https://github.com/org/repo/pull/123 \
  --discord-webhook https://discord.com/api/webhooks/.../...

# Review a branch diff
bash scripts/pr-auto-review.sh \
  --branch feature/new-api \
  --discord-webhook https://discord.com/api/webhooks/.../...

# Review last commit, skip health check
bash scripts/pr-auto-review.sh --skip-healthcheck

# Save report to file
bash scripts/pr-auto-review.sh --pr-url ... --report ./review-report.md

Options

Flag Description
--pr-url <url> GitHub PR URL (extracts PR number automatically)
--branch <name> Branch to diff against main/master
--discord-webhook <url> Discord webhook URL for notification
--skip-healthcheck Skip service health probes
--report <path> Save markdown report to file

Pipeline Steps

1. Code Review

  • Fetches PR diff via gh CLI
  • Reports PR title, author, changed files
  • Checks CI/CD status (gh pr checks)
  • Scans diff for potential hardcoded secrets (password, token, api_key patterns)

2. Service Health Check

  • If the healthcheck skill is installed, runs healthcheck.sh --json
  • Otherwise, probes common local services via curl (nginx, api, ollama)
  • Reports status per service: ✅ OK / 🟡 Degraded / 🔴 Down

3. Discord Notification

  • Posts the report summary to the configured webhook
  • Content truncated to 2000 chars (Discord limit)
  • For richer embeds, see references/discord-formats.md

Dependencies

  • gh CLI (authenticated) — for PR data
  • git — for branch diffs
  • curl — for health probes and Discord webhook
  • jq — for JSON payload construction

Integration with Cron

Set up automatic PR review on a schedule:

# Example: check open PRs every 30 minutes
openclaw cron add --name "pr-review-poll" --every 30m \
  --message "Run pr-auto-review on any new open PRs and notify Discord"

Integration with GitHub Webhooks

For real-time triggering, configure a GitHub webhook to call an endpoint that invokes this skill. The pipeline script accepts --pr-url to target the specific PR.

Output

The script outputs a markdown report to stdout and optionally saves it to a file. The report includes:

  • PR metadata (title, author, files)
  • CI/CD status summary
  • Security scan results
  • Service health status
  • Actionable summary