tao12345666333/gh-pr-review
.amcp/skills/gh-pr-review/SKILL.md
Review GitHub Pull Requests using the gh CLI. Use when a user asks to review a PR, perform code review, check a pull request, or provide feedback on proposed changes. Triggers on phrases like "review PR", "review pull request", "check PR", "code review".
$ install --global
skillsauthnpx skillsauth add tao12345666333/amcp gh-pr-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:45 PM2.0s1 file scanned
SKILL.md
- name:
- gh-pr-review
- description:
- Review GitHub Pull Requests using the gh CLI. Use when a user asks to review a PR, perform code review, check a pull request, or provide feedback on proposed changes. Triggers on phrases like "review PR", "review pull request", "check PR", "code review".
GitHub PR Review Skill
Review Pull Requests by fetching the diff, analyzing changes, and posting structured review comments.
Prerequisites
ghCLI authenticated (gh auth status)- Repository must be a git clone with a GitHub remote
Review Workflow
- Fetch PR metadata: Run
gh pr view <number> --json title,body,files,additions,deletions,author,baseRefName,headRefName - Fetch the diff: Run
gh pr diff <number>to get the full diff - Analyze the changes by category:
- Architecture: New files/modules, structural decisions
- Correctness: Logic bugs, edge cases, error handling
- Security: Input validation, secrets, auth
- Performance: Unnecessary allocations, N+1 queries, blocking I/O
- Style: Naming, consistency with codebase conventions
- Tests: Coverage, edge cases, test quality
- Produce a structured review (see format below)
Review Output Format
## PR Review: <title>
**PR**: #<number> | **Author**: <author> | **Branch**: <head> → <base>
**Files changed**: <count> | **+<additions>** / **-<deletions>**
### Summary
<1-2 sentence overview of what this PR does>
### 👍 Strengths
- <what's done well>
### 🔍 Issues Found
#### Critical
- [ ] <file>:<line> — <description>
#### Suggestions
- [ ] <file>:<line> — <description>
#### Nits
- <minor style/naming suggestions>
### 📋 Checklist
- [ ] Tests added/updated
- [ ] No secrets or credentials
- [ ] Error handling adequate
- [ ] Documentation updated if needed
### Verdict
<APPROVE | REQUEST_CHANGES | COMMENT> — <reasoning>
Posting the Review
After generating the review, offer to post it as a PR comment:
gh pr review <number> --comment --body "<review content>"
Or for approve/request-changes:
gh pr review <number> --approve --body "<review content>"
gh pr review <number> --request-changes --body "<review content>"
Tips
- For large PRs (>500 lines), focus on architectural decisions and critical issues first
- Check for consistency with the existing codebase patterns
- Look at test coverage relative to the complexity of changes
- Use
gh pr checks <number>to see CI status - When reviewing Python, pay attention to type hints, docstrings, and error handling
Related Skills
tao12345666333/telegram-sender
tools
VerifiedTrustedCommunity
Send and edit Telegram messages via Bot API. Use when AMCP needs to send a message, reply to a specific message, edit an existing message, or push proactive notifications (cron results, heartbeat alerts, task status). Requires AMCP_TELEGRAM_BOT_TOKEN env var.
22SKILL.mdUpdated Apr 15, 2026
tao12345666333/skill-creator
tools
VerifiedTrustedCommunity
Create or update AMCP skills. Use when designing, structuring, or packaging skills with scripts, references, and assets. This skill should be used when users want to create a new skill (or update an existing skill) that extends AMCP's capabilities with specialized knowledge, workflows, or tool integrations.
22SKILL.mdUpdated Apr 15, 2026
tao12345666333/session-cleanup
tools
VerifiedTrustedCommunity
Backup old AMCP sessions by renaming with execution date, then clean and compact sessions and memory.
22SKILL.mdUpdated Apr 15, 2026
tao12345666333/heartbeat
testing
VerifiedTrustedCommunity
Periodic heartbeat check that reads HEARTBEAT.md from the workspace and executes any tasks listed there. Use for autonomous background monitoring, periodic maintenance, and proactive task execution. Triggered by a cron schedule.
22SKILL.mdUpdated Apr 15, 2026