pr-vet
CommunitySecurely vet pull requests for supply-chain risk.
Authoryamadashy
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill ensures the safety of pull requests by rigorously analyzing them for potential security risks, preventing vulnerabilities from being introduced into the codebase.
Core Features & Use Cases
- Author Reputation Analysis: Checks the author's account age, consistency of identity and email, previous contributions, and other signals.
- Technical Diff Scanning: Inspects the pull request for sensitive file changes, install-time execution, obfuscation, credential harvest, hidden characters, homoglyphs, network egress, removed guards, lockfile substitution, packed blobs, and other indicators of malicious intent.
- Current Supply-Chain Attack Techniques: Maps the pull request against the latest known attack patterns.
- Evidence-Based Verdict: Provides a calibrated conclusion on the trustworthiness of the pull request, including residual risks.
Quick Start
Run 'pr-vet on <OWNER/REPO>#<PR>' to check the pull request for supply-chain risks.
Dependency Matrix
Required Modules
ghjqgreppython3
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: pr-vet Download link: https://github.com/yamadashy/skills/archive/main.zip#pr-vet Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.