github-code-review

Review local git diffs and GitHub pull requests for security and quality issues.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill github-code-review-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-code-review
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/github/github-code-review
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill github-code-review-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, curl, python3, git, and includes references (resource) components.

What problem does it solve?

This skill addresses the bottleneck of manual code reviews by providing a structured, systematic approach to identifying security vulnerabilities, logic errors, and quality issues in both local git branches and remote GitHub pull requests.

Core Features & Use Cases

  • Automated Review Workflow: Provides a standardized checklist for correctness, security, and performance across local and remote codebases.
  • PR Integration: Facilitates end-to-end PR management, including fetching branches, posting inline comments, and submitting formal approvals or change requests via GitHub API.
  • Use Case: Use this skill to perform a security-focused audit of a new feature branch before merging, ensuring no secrets are leaked and all inputs are validated.

Quick Start

Use the github-code-review skill to analyze the changes in pull request number 123 and provide a summary of findings.

Frequently Asked Questions about github-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security checks and code quality reviews for GitHub pull requests?

Automated pull request reviews use the GitHub API and local git diff analysis to identify security vulnerabilities, logic flaws, and quality regressions. This skill fetches branches, posts inline comments, and submits formal approvals or change requests.

What's the best way to analyze a local git diff for security vulnerabilities before merging?

Analyzing a local git diff for security vulnerabilities involves running a systematic checklist for correctness, performance, and secret leakage. This skill audits local git branches to ensure inputs are validated and no sensitive data is exposed before merging.

Do I need authenticated GitHub API access to post inline comments on pull requests?

Authenticated GitHub API access is required to post inline comments and submit formal PR approvals. This skill relies on authenticated access alongside standard git environment configuration to perform comprehensive remote code audits.

Can I use gh and curl to manage pull request statuses and code quality audits?

Yes, gh and curl are used to manage pull request statuses and interact with the GitHub API. Combined with python3 and git, this skill automates fetching branches, posting comments, and executing systematic code quality audits.

What is included in a systematic code review checklist for correctness and performance?

A systematic code review checklist for correctness and performance includes identifying security vulnerabilities, logic errors, and quality regressions. This skill provides a standardized workflow to audit source code across both local and remote repositories.

Why does my automated code review fail to identify logic flaws in remote GitHub branches?

Automated code reviews fail to identify logic flaws when the git environment is misconfigured or GitHub API authentication is missing. This skill requires proper authenticated access to perform comprehensive remote code audits and fetch remote branches successfully.