github-code-review

Analyze local git diffs and GitHub pull requests for security and code quality issues.

Updated May 4, 2026
One-click install
npx skills add https://github.com/InverterNetwork/hermes-agent --skill github-code-review-inverternetwork
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-code-review
Source: https://github.com/InverterNetwork/hermes-agent/tree/main/skills/github/github-code-review
Command: npx skills add https://github.com/InverterNetwork/hermes-agent --skill github-code-review-inverternetwork

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, curl, python3, and includes references (resource) components.

What problem does it solve?

This skill addresses the cognitive load and inconsistency of manual code reviews by providing a systematic, checklist-driven approach to analyzing local changes and GitHub pull requests.

Core Features & Use Cases

  • Local Pre-Push Analysis: Perform diff-based reviews on staged changes to catch secrets, debug statements, and logic errors before they ever reach the repository.
  • End-to-End PR Workflow: Automate the retrieval, checkout, and formal review of GitHub pull requests, including inline commenting and atomic review submission.
  • Structured Feedback: Generate consistent, high-quality review summaries categorized by severity, ensuring critical security and quality issues are never missed.

Quick Start

Ask the agent to review the current pull request by providing the PR number and requesting a formal code analysis.

Frequently Asked Questions about github-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub pull request code reviews for security vulnerabilities?

Automated GitHub pull request code reviews analyze diffs for security vulnerabilities and code quality issues, providing structured feedback and inline comments via the GitHub API. It retrieves PRs, checks out changes, and submits atomic reviews.

Can I review local git changes for secrets and debug statements before pushing?

Yes, you can review local git changes for secrets and debug statements before pushing by performing diff-based analysis on staged changes. This pre-push analysis catches logic errors and sensitive data before they reach the repository.

What is the best way to catch logic errors in staged git changes?

The best way to catch logic errors in staged git changes is pre-push diff analysis. This systematic checklist-driven approach scans local changes to identify security issues and quality defects before they enter the repository.

Does this code review tool require gh and python3 to analyze pull requests?

Yes, this code review tool requires gh, curl, and python3 to analyze pull requests. These dependencies enable GitHub API integration, local git command execution, and diff processing for structured feedback submission.

How do I generate structured code review feedback categorized by severity?

Structured code review feedback categorized by severity is generated by analyzing pull request diffs against best practices. The review process categorizes security and quality issues by severity, ensuring critical defects are highlighted.

How does automated code review handle inline commenting on GitHub pull requests?

Automated code review handles inline commenting on GitHub pull requests by integrating with the GitHub API to submit atomic reviews. It analyzes the PR diff and posts actionable feedback directly on specific code lines.