360 Secure SkillHub
360 安全技能中心

leaving-pr-comments

用于在 GitHub 上代表用户发布 PR 评论时统一署名格式:在评论开头添加模型与用户标识,检查敏感信息,保持结论先行的简洁风格,并在发布后确认评论或审查链接,成功后再解决审查线程。不适用于 PR 描述或提交信息。

分类:开发
t3dotgg
热度 0.00
最近更新 2026-10-27 11:18:57

安装

发给 Agent
帮我安装这个技能:npx secure-skills-cli add t3dotgg/tstack/leaving-pr-comments
兼容性
通用兼容
联网要求
需要联网
数据出网
必须出网
Metadata
name
leaving-pr-comments
description
Use whenever leaving comments on GitHub.

Leaving PR Comments

Prefix every agent-authored comment left on the user's behalf with this GitHub note callout:

> [!NOTE]
> 🤖 **<model> responding on behalf of <user>**

Actual comment starts here.

Use the verified public name of the model that wrote the comment, and the user's name or GitHub login.

If the harness does not expose a model name, use the harness name. Do not guess.

Before posting, check the entire comment, including quoted text and attachments, for secrets and private details.

Keep the attribution inside the note and the actual reply outside it. The context line must start with the robot emoji. Do not add a horizontal rule, Setext underline, heading, signature footer, or a second attribution.

Apply this format to top-level PR comments, inline review comments, replies to bots or reviewers, and written explanations used before resolving or dismissing feedback. Do not add it to PR descriptions, commit messages, or text the user explicitly asked to post verbatim without attribution.

Write the comment itself in a direct style:

  • Lead with the conclusion.
  • Cite the relevant code, behavior, check, or reproduction.
  • Keep it concise and avoid filler, canned thanks, or status narration.
  • Distinguish verified facts from judgment.

Preview the final Markdown before posting so quoting and blank lines render as shown. After posting, verify that GitHub returned the comment or review URL. Resolve a review thread only after its response was posted successfully.