alibaba/update-with-comments
.cursor/skills/update-with-comments/SKILL.md
Check comments from the Pull Request on the GitHub and update code.
$ install --global
skillsauthnpx skillsauth add alibaba/neug update-with-commentsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:25 AM8.6s1 file scanned
SKILL.md
- name:
- update-with-comments
- description:
- Check comments from the Pull Request on the GitHub and update code.
- disable-model-invocation:
- true
User Input
$ARGUMENTS
You MUST consider the user input before proceeding (if not empty).
Outline
-
Locate the Pull Request:
- If user explicitly provides the PR ID
- Stash current changes and checkout to the PR branch.
- If user does not provide the PR ID
- Search the PR on the current branch
- If there is multiple PRs or no PR, STOP and report to users.
- If user explicitly provides the PR ID
-
Get PR comments:
- Obtain conversation comments:
gh pr view <pr-id> --comments. - Obtain inline comments:
gh api repos/:owner/:repo/pulls/<pr-id>/comments. - Analysis all comments and align intention, e.g., Approve, Question, Request Changes, etc.
- Obtain conversation comments:
-
Update Code:
- If a comment intention is
Approve, skip the update. - If a comment intention is
Question, you have to explain your understanding based on the code and comments. - If a comment intention is
Request Changes, e.g., typos, code style, potential bugs, optimization chances, etc.- Try to update the code to fix the problem in the workspace.
- If the update is successfully fixed and pass tests, add a new comments to confirm the update.
- Otherwise, report the problem and ask users to review the comment.
- If a comment intention is
-
Report & Submit: Generate a summary to show all comments and their updates. Then, commit the changes and push to the PR branch.
Related Skills
alibaba/skills/codegraph
development
VerifiedTrustedCommunity
--- name: codegraph description: Analyze indexed codebases via graph database (neug) and vector index (zvec). Covers call graphs, dependencies, dead code, hotspots, module coupling, architecture reports, semantic search, impact analysis, bug root cause from GitHub issues, class diagrams (UML), and PR review (risk scoring, conflict detection, auto-merge candidates, labeling). Also covers creating, inspecting, and repairing a CodeScope index. Use for: code structure, who calls what, why something
94SKILL.mdUpdated Apr 16, 2026
alibaba/sync-tasks
documentation
VerifiedTrustedCommunity
Cerate or Update a GitHub Issue for each Task in the task document.
78SKILL.mdUpdated Apr 16, 2026
alibaba/sync-modules
documentation
VerifiedTrustedCommunity
Cerate or Update a GitHub Issue for each Module in the task document.
78SKILL.mdUpdated Apr 16, 2026
alibaba/speckit.tasks
data-ai
VerifiedTrustedCommunity
Generate an actionable, dependency-ordered tasks.md for the feature based on available design artifacts.
78SKILL.mdUpdated Apr 16, 2026