Greenmamba29/github-pr-reviewer
.agents/skills/github-pr-reviewer/SKILL.md
Automatically review GitHub pull requests for code quality, security vulnerabilities, style violations, missing tests, and logical errors. Posts inline comments and a summary review via the GitHub API.
development
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add Greenmamba29/skillsdotmd_web github-pr-reviewerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 9:02 PM1.8s1 file scanned
SKILL.md
- name:
- github-pr-reviewer
- description:
- Automatically review GitHub pull requests for code quality, security vulnerabilities, style violations, missing tests, and logical errors. Posts inline comments and a summary review via the GitHub API.
- license:
- MIT
- tags:
- [github, code-review, automation, devops, security]
GitHub PR Reviewer
Overview
Automatically analyze pull requests and post actionable inline code review comments covering security, performance, style, and correctness using AI-assisted static analysis.
When to Use
- Auto-reviewing PRs as part of a CI/CD pipeline
- Enforcing code standards when human reviewers are unavailable
- Catching security vulnerabilities before they reach main
- Ensuring test coverage meets minimum thresholds
- Generating first-pass review comments to speed up human review
Instructions
- Accept inputs: repository name, PR number, GitHub token, review strictness level (light/standard/strict).
- Fetch the PR diff and file list via GitHub REST API.
- Analyze each changed file for: syntax errors, unused imports, security vulnerabilities (SQL injection, hardcoded secrets, XSS), missing error handling, test coverage gaps.
- Check compliance with project's existing coding patterns from the codebase.
- Generate inline review comments with line numbers, issue descriptions, and suggested fixes.
- Summarize findings: total issues, breakdown by severity, overall assessment (Approve/Request Changes/Comment).
- Post the review via GitHub API (pulls.createReview) with inline comments.
- If no critical issues: approve with notes. If critical issues found: request changes.
Environment
GITHUB_TOKEN=ghp_your_personal_access_token
GITHUB_REPO=owner/repository
REVIEW_STRICTNESS=standard
POST_REVIEW=true
SECURITY_SCAN=true
Examples
Input:
repo: Greenmamba29/skillsdotmd_web
pr_number: 42
strictness: strict
auto_approve_if_clean: true
Output:
PR #42 Review Complete
Verdict: Request Changes
Critical: 1 (hardcoded API key on line 23)
High: 2 (missing error handling in auth.js)
Medium: 4 (unused imports, style violations)
Comments posted: 7 inline
Summary review posted to GitHub
Related Skills
Greenmamba29/customer-onboarder
tools
VerifiedTrustedCommunity
Automate end-to-end new customer onboarding for SaaS and marketplace platforms. Use when onboarding new customers after signup or contract signing, including account provisioning in CRM (HubSpot/Salesforce), sending personalized welcome email sequences via SendGrid, creating and tracking onboarding checklists, scheduling kickoff calls via Calendly/Cal.com, monitoring customer health scores, and generating time-to-value reports. Triggers on tasks involving new customer setup, onboarding automation, welcome sequences, CSM task assignment, or onboarding health tracking.
SKILL.mdUpdated Apr 17, 2026
Greenmamba29/zapier-migrator
development
VerifiedTrustedCommunity
Migrates Zapier zaps to Make.com scenarios automatically. Use when asked to convert, port, or recreate Zapier workflows in Make.com.
SKILL.mdUpdated Apr 17, 2026
Greenmamba29/webhook-orchestrator
development
VerifiedTrustedCommunity
Routes, transforms and fans out webhook payloads across multiple services. Use when you need to receive an incoming webhook and dispatch it to multiple downstream endpoints with payload transformation.
SKILL.mdUpdated Apr 17, 2026
Greenmamba29/.agents/skills/webapp-testing
tools
VerifiedTrustedCommunity
| name | description | license | tags | |------|-------------|---------|------| | webapp-testing | Generate and execute comprehensive test suites for web applications. Covers unit, integration, E2E, and visual regression tests. Analyzes application structure to create meaningful test cases with high coverage. | MIT | --- testing qa automation e2e playwright jest | # Webapp Testing ## Overview Generate and execute comprehensive test suites for web applications covering unit, integration, end-t
SKILL.mdUpdated Apr 17, 2026