github-code-review

Analyzes git diffs and manages GitHub pull requests via API.

1|Updated Jul 31, 2026
One-click install
npx skills add https://github.com/icyzh/hermes-web --skill github-code-review-icyzh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-code-review
Source: https://github.com/icyzh/hermes-web/tree/main/skills/github/github-code-review
Command: npx skills add https://github.com/icyzh/hermes-web --skill github-code-review-icyzh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill removes the friction from code reviews by automating the analysis of local changes and GitHub pull requests, ensuring high code quality and security before merging.

Core Features & Use Cases

  • Local Pre-Push Review: Analyze staged changes for security vulnerabilities, debug statements, and code quality issues before they ever reach the repository.
  • End-to-End PR Workflow: Fetch, review, and comment on GitHub pull requests directly from your terminal, including support for inline comments and formal approval/change requests.
  • Use Case: When a team member submits a complex PR, use this skill to automatically fetch the branch, run linting checks, identify potential SQL injection or security flaws, and post a structured summary comment to the PR.

Quick Start

Use the github-code-review skill to analyze the changes in pull request number 123 and provide a summary report.

Frequently Asked Questions about github-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub pull request reviews and code analysis?

Automating GitHub pull request reviews involves analyzing git diffs and interacting with the GitHub API to fetch branches, identify security flaws, and post inline comments directly to the PR.

Can I run a local pre-push code review for security vulnerabilities and debug statements?

Yes, you can run a local pre-push code review to analyze staged changes for security vulnerabilities, debug statements, and code quality issues before they reach the remote repository.

Do I need the gh CLI to review pull requests and post inline comments?

You need the gh CLI or curl, along with appropriate GitHub authentication tokens, to perform repository operations like fetching pull requests and posting inline comments.

What is the best way to fetch a complex PR branch and identify potential SQL injection flaws?

The best way to identify SQL injection flaws in a complex PR is to fetch the branch via git, analyze the diffs for security vulnerabilities, and post a structured summary comment to the PR.

Does this code review process support formal pull request approval and change requests?

Yes, the code review process supports end-to-end PR workflow including fetching, reviewing, and commenting on GitHub pull requests with formal approval and change requests.

When should I not use automated git diff analysis for pull request management?

Automated git diff analysis may be limited without proper GitHub authentication tokens, as repository operations require appropriate tokens to fetch branches and post status updates.