Install
$ agentstack add skill-ainova-systems-intelligence-dev-packs-git-review-pr-comments ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Handle PR Review Comments
Drain reviewer feedback: every thread ends with a fix commit or a reasoned reply. Silence is never a response.
Steps
- Resolve the PR for the current branch:
gh pr list --head --state open --json number --jq '.[0].number'. - Fetch open threads: GraphQL
reviewThreads(first: 100) { nodes { id isResolved comments(first: 1) { nodes { path line body author { login } } } } }- keepisResolved == false(already-resolved threads were handled on a prior run; skipping them is what makes re-running safe); plusgh pr view --json reviews,commentsfor conversation-level notes. - For each thread, read the cited file and line, then VERIFY the claim against the code before trusting it - automated reviewers (bots) often cite a rationale that is stale or does not match the project's conventions. Grep for the actual precedent (sibling code, the relevant rule) instead of mirroring the suggestion verbatim.
- Classify each: fix (reviewer is right, or the change is cheaper than the debate) / discuss (real tradeoff - answer with the reasoning, no code yet) / decline with reason (conflicts with a project rule or an accepted ADR - cite it).
- When fixing a real issue, grep for the same class of issue across the tree and fix the siblings in the same commit - a reviewer flags one instance, not the whole class. If the comment exposes an unclear or wrong documented rule, fix the rule in the same change (
dev-context-engineering). Apply fixes grouped into logical commits viagit-commit-push(gates run before push). - Reply to every handled thread, then mark it resolved (
resolveReviewThreadmutation by thread id) - the resolved flag is the only state that survives a re-run; a reply without resolve re-appears next run. Reply content: the commit reference for fixes, the reasoning for discuss/decline. Match the reviewer's tone; keep replies short. - Out-of-scope asks: agree in the reply, file a follow-up item, link it - do not grow the PR.
- Report counts per category plus anything needing an owner decision.
Verify
- Zero unanswered threads; every handled thread replied AND resolved; every fix commit pushed; gates green.
Scope / hand-off
- CI babysitting and the outcome label -
git-finalize-pr; merging -git-merge-pr.
CRITICAL
- Never resolve a thread without a reply; never reply without resolving (it re-appears next run).
- Verify a reviewer's claim against the code before accepting it - a confident but wrong bot comment is still wrong.
- Conflicting reviewer asks - surface to both, never silently pick one.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ainova-systems
- Source: ainova-systems/intelligence-dev-packs
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.