skills.rest
antgroup
antgroupOFFICIAL
Explore all skills by this author →
Website𝕏@antgroupGitHub

pr-reviewer

Analyze GitHub pull request diffs for security and style issues.

16|1|Updated May 21, 2026
Search Tags:#automation#code review#linting#pull request#security#github
One-click install
npx skills add https://github.com/antgroup/Agent3Sigma-Stage --skill pr-reviewer-antgroup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pr-reviewer
Source: https://github.com/antgroup/Agent3Sigma-Stage/tree/main/data/advance/skill_templates/Document_Review/benign_skills/briancolinger_pr-reviewer
Command: npx skills add https://github.com/antgroup/Agent3Sigma-Stage --skill pr-reviewer-antgroup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, python3, golangci-lint, ruff, and includes scripts (resource) components.

What problem does it solve?

This skill addresses the bottleneck of manual code reviews by providing automated, consistent, and immediate feedback on pull requests, identifying security vulnerabilities, error-handling gaps, and style inconsistencies before human review.

Core Features & Use Cases

  • Automated Diff Analysis: Scans code changes for hardcoded secrets, dangerous function calls, and common programming errors.
  • Lint Integration: Orchestrates local linting tools like golangci-lint and ruff to enforce project-wide standards.
  • Structured Reporting: Generates comprehensive Markdown reports summarizing security risks, test coverage gaps, and style suggestions.
  • Use Case: A developer pushes a new feature to a repository; the skill automatically triggers a review, flags a potential hardcoded API key, and posts the findings as a comment on the PR, ensuring security issues are caught early.

Quick Start

Use the pr-reviewer skill to check all open pull requests in the current repository and post the generated review reports as comments.

Frequently Asked Questions about pr-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub pull request code review for security vulnerabilities?▼

Automate GitHub pull request code review by analyzing diffs to identify hardcoded credentials, dangerous function calls, and error-handling flaws before human review. It scans code changes and posts structured Markdown reports as comments directly on the PR.

Can I use ruff and golangci-lint together for pull request linting?▼

Yes, you can use ruff and golangci-lint together for pull request linting across Python and Go projects. The skill orchestrates these local linting tools to enforce project-wide standards and validate code changes comprehensively.

What programming languages does automated PR diff analysis support?▼

Automated PR diff analysis supports Go, Python, and JavaScript/TypeScript projects. It requires local installation of language-specific linters like golangci-lint and ruff to provide comprehensive code validation for these languages.

Do I need the GitHub CLI installed to review pull requests locally?▼

Yes, you need the GitHub CLI installed to review pull requests locally. The skill requires the GitHub CLI for repository interaction, alongside Python3 and language-specific linters, to fetch PR diffs and post review comments.

How does automated code review detect hardcoded secrets in pull requests?▼

Automated code review detects hardcoded secrets in pull requests by scanning the code diff for embedded credentials and dangerous function calls. It flags these security vulnerabilities early and generates a comprehensive report summarizing the risks.

What is the best way to enforce coding standards before merging GitHub pull requests?▼

The best way to enforce coding standards before merging GitHub pull requests is to automate lint integration and diff analysis. This approach identifies style violations and security gaps immediately upon pushing code, ensuring consistent feedback.

Related Skills

Explore More Software Engineering Skills→
MartinNevlahaMartinNevlaha
1

run-tests

Execute project test suites and linters across Python, Node.js, and Go/Rust codebases.

Community
Intermediate
YH-05YH-05
1

review-pr

Automate Pull Request reviews with parallel sub-agents and Markdown feedback.

Community
Advanced
VoDaiLoczVoDaiLocz
24

lint-and-validate

Automate linting and static analysis of code in CI pipelines.

Community
Intermediate
kobogithubkobogithub

security-semgrep

Run Semgrep SAST scans to detect security vulnerabilities in code.

Community
Advanced