fcakyon/pr-comment-workflow
plugins/github-dev/skills/pr-comment-workflow/SKILL.md
This skill should be used when the user asks to "address PR comments", "resolve PR feedback", "respond to review", "write PR comment", "review PR comments", or needs guidance on PR comment style, response drafting, or review comment resolution.
$ install --global
skillsauthnpx skillsauth add fcakyon/claude-codex-settings pr-comment-workflowInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 8:27 PM8.7s1 file scanned
SKILL.md
- name:
- pr-comment-workflow
- description:
- This skill should be used when the user asks to "address PR comments", "resolve PR feedback", "respond to review", "write PR comment", "review PR comments", or needs guidance on PR comment style, response drafting, or review comment resolution.
PR Comment Workflow
Procedural knowledge for writing and responding to PR review comments.
Comment Style Rules
- lowercase start for all sentences
- never use em-dashes (
—,–,--) between sentences, expressions, examples, or terms. Use commas, periods, or "or" instead - no complex sentences
- simple terms, concise
- no end-of-sentence punctuation if possible
- max 1 sentence or shorter per comment
- polite when responding to real people
- bot comments: single concise sentence, no pleasantries ("good catch", "nice find", "thanks"), just state the fact directly
Review Comment Rules
- Only create pending PR comments, never submit/confirm review automatically
- Leave all comments for human review before posting
- When creating review comments, follow the style rules above
Pending Review API Workflow
When posting review comments via gh api, use the two-step pending flow:
- Create pending review:
gh api repos/{owner}/{repo}/pulls/{number}/reviews -f event=PENDING -f body="" - Add comments to pending review:
gh api repos/{owner}/{repo}/pulls/{number}/reviews/{review_id}/comments -f body="..." -f path="..." -F line=N -f side=RIGHT - Never call the submit endpoint, leave for human to review and submit
- Output the review URL so user can review and submit manually
Reply Comment Posting
Reply comments (responses to existing threads) are posted directly, not as pending:
- Use
gh api repos/{owner}/{repo}/pulls/comments/{comment_id}/replies -f body="..." - Add a random 3-5 second delay between each reply:
sleep $((RANDOM % 3 + 3))
Resolving Review Feedback
- Fetch unresolved comments from PR
- For each comment, decide if valid concern or not
- If valid: fix the code AND search for same problem in other codebase locations, fix all occurrences
- If not valid: draft a concise response
- If automated bot comment: single concise sentence, no pleasantries, just state the fact
- Present all draft responses to user before posting
Related Skills
fcakyon/setup
tools
VerifiedTrustedCommunity
This skill should be used when user asks to "set up overleaf", "configure overleaf cookie", "overleaf auth failed", "overleaf 401", "overleaf session expired", "overleaf unauthorized", or needs to install or refresh their Overleaf session cookie for the overleaf-skills plugin.
674SKILL.mdUpdated May 10, 2026
fcakyon/review-overleaf
documentation
VerifiedTrustedCommunity
This skill should be used when user asks to "fetch overleaf review comments", "address overleaf reviews", "apply overleaf comments", "review my overleaf paper", "sync overleaf feedback to local", "what comments are on my overleaf doc", or wants to act on Overleaf reviewer feedback in a local git-tracked LaTeX repo.
658SKILL.mdUpdated May 3, 2026
fcakyon/dokploy-deploy
tools
VerifiedTrustedCommunity
This skill should be used when user asks to "deploy with Dokploy", "use Dokploy Cloud", "manage self-hosted Dokploy", "deploy Docker Compose on Dokploy", "manage Dokploy databases", "configure Dokploy domains", or "look up Dokploy CLI commands".
654SKILL.mdUpdated Apr 26, 2026
fcakyon/stripe-best-practices
development
VerifiedTrustedCommunity
Guides Stripe integration decisions — API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, Treasury financial accounts, integration surfaces (Checkout, Payment Element), migrating from deprecated Stripe APIs, and security best practices (API key management, restricted keys, webhooks, OAuth). Use when building, modifying, or reviewing any Stripe integration — including accepting payments, building marketplaces, integrating Stripe, processing payments, setting up subscriptions, creating connected accounts, or implementing secure key handling.
645SKILL.mdUpdated Apr 4, 2026