360 Secure SkillHub
360 安全技能中心

Pull Request Reviewer

核心功能：针对GitHub拉取请求（PR），从正确性、规范、性能、测试、安全等维度评审，优先标记高风险变更，给出可执行改进建议。典型场景：评审指定PR的正确性与风险、定位PR重大问题等。输入需PR编号/选择、GitHub diff、仓库规范；输出含有序评审发现、风险摘要、改进建议，评审严格基于实际代码差异。

wimi321
wimi321
热度 40.64
最近更新 2026-05-11 17:39:39
分类：开发依赖：第三方 API / 内部调用大模型应用场景：代码审查

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add pr-audit
Metadata
name
pull_request_reviewer
description
Use when the user wants a local review of a GitHub pull request based on its diff, risks, quality, performance, tests, and security implications.

Pull Request Reviewer

Use this skill for code review of an existing GitHub PR.

Workflow

  1. Resolve the target PR number or list open PRs if needed.
  2. Read PR metadata and full diff.
  3. Review correctness, conventions, performance, test coverage, and security-sensitive changes.
  4. Prioritize concrete findings over generic praise.
  5. Return a structured review with suggested follow-up.

Guardrails

  • Base the review on the actual diff, not assumptions.
  • Findings first, summary second.
  • Keep comments actionable and specific.

Example Requests

  • Review PR #123 for correctness and risk.
  • List the biggest problems in this open PR.

Inputs

  • PR number or selection
  • GitHub diff
  • Repo conventions

Outputs

  • Ordered review findings
  • Risk summary
  • Improvement suggestions

Success Criteria

  • The review is grounded in the actual diff.
  • Findings are actionable.
  • Risky changes are prioritized.

Non-Goals

  • Generic praise-only review
  • Reviewing without reading the diff

Source Provenance

Derived from src/commands/review.ts.