github-code-review

Analyze git diffs and GitHub pull requests for security and quality issues.

Updated Jul 13, 2026
One-click install
npx skills add https://github.com/zeronx798/demo-hermes-agent --skill github-code-review-zeronx798
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-code-review
Source: https://github.com/zeronx798/demo-hermes-agent/tree/main/skills/github/github-code-review
Command: npx skills add https://github.com/zeronx798/demo-hermes-agent --skill github-code-review-zeronx798

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, git, curl, python3, and includes references (resource) components.

What problem does it solve?

This skill addresses the cognitive load and time-consuming nature of manual code reviews by providing a structured, automated approach to identifying bugs, security vulnerabilities, and quality issues in both local changes and GitHub pull requests.

Core Features & Use Cases

  • Local Pre-Push Analysis: Quickly scan staged changes for secrets, debug statements, and merge conflicts before pushing code.
  • Automated PR Review: Fetch PR details, perform diff analysis, and submit formal reviews (Approve/Request Changes) with inline comments directly via GitHub API.
  • Standardized Checklist: Enforces a consistent review process covering correctness, security, performance, and documentation.

Quick Start

Ask the agent to review the current pull request number 123 by providing the PR number and requesting a full code analysis.

Frequently Asked Questions about github-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub pull request code reviews?

To automate GitHub pull request code reviews, this skill fetches PR details via GitHub CLI or REST API, analyzes diffs, and submits formal reviews with inline comments. It evaluates correctness, security, performance, and documentation through a standardized checklist.

Can I scan local git changes for security vulnerabilities before pushing?

Yes, you can scan local git changes for security vulnerabilities before pushing. The skill performs local pre-push analysis on staged changes to detect secrets, debug statements, and merge conflicts, ensuring code quality before remote interaction.

Do I need the GitHub CLI installed to review pull requests?

Yes, you need the GitHub CLI installed to review pull requests. The skill requires gh, git, curl, and python3 as dependencies for repository interaction, API communication, and diff analysis to function correctly.

What is the best way to submit formal PR reviews with inline comments?

The best way to submit formal PR reviews with inline comments is using automated diff analysis. The skill submits Approve or Request Changes statuses directly via the GitHub API, providing structured feedback on identified bugs and quality issues.

Does automated code review work for checking merge conflicts in staged changes?

Yes, automated code review works for checking merge conflicts in staged changes. The skill analyzes local diffs to identify potential conflicts, debug statements, and security issues, enforcing a consistent review process before you push code.

What limitations exist when using curl and gh for automated PR analysis?

Limitations when using curl and gh for automated PR analysis include dependency on local environment configurations and API rate limits. The skill requires proper authentication setup for gh and curl to successfully fetch PR details and submit formal reviews.