Install
$ agentstack add skill-lulu0119-skills-pr-review-slides ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
PR Review Slides
Workflow
- Read the PR with
gh pr view(add--repowhen you are not inside the repository) or the GitHub API. Record the title, draft state, base/head SHAs, head repo/ref, commit list, and changed-file stats. - Check out the head branch locally; do not overwrite an existing same-name branch. Review the PR as-is, do not rebase it:
``bash git fetch git switch -c pr- ``
- Analyze the PR's own diff:
git diff ...HEAD --stat, then read the hunks of every changed file. For each meaningful hunk, work out what it does, why it is written this way, and what a reviewer should watch. - Build the deck in a working directory outside the repository, for example
~/pr--review-slides(reuse an existing Slidev project when one is available). - Verify with
pnpm build, thenpnpm exec slidev --port 3031and open http://localhost:3031/. - Do not push the slides into the repository. PR maintenance (rebase, push, description edits) is out of scope; only do it when the user asks for it separately.
Deck structure
- Cover and overview: title, draft state, base/head SHAs,
+/-stats, one-sentence summary. - Commit list with each commit's responsibility.
- Per-file sections: paste the actual
git diffhunks in ````diff``` fences, then explain what the code does, why it is written that way, line-by-line key points, and what changed relative to main. - Test plan and verification results that were actually run (commands, pass/fail, evidence paths).
- Review concerns and questions table: risks, gaps, follow-ups.
- References: PR link and file paths.
Slidev project gotchas
- Latest
@slidev/cliis52.x(no0.prefix).package.jsonneeds both@slidev/cliand@slidev/theme-default. - Set
mdc: falsein theslides.mdfrontmatter. Withmdc: true,{ ... }inside inline code is parsed as attributes and breaks rendering (InvalidCharacterError: Invalid qualified name). - Global CSS must live in
styles/index.css. A `block insideslides.md` is scoped to that slide only. - Keep dense slides readable: small fonts (body ~11.5px, code ~8.5px, tables ~9px),
pre { max-height: 38vh; overflow: auto }, andoverflow-y: autoon.slidev-layout. - Verify with
pnpm buildbefore serving, and watch the dev-server log for runtime errors.
Review quality
- Cover the whole PR diff, not just headline files.
- Redact secrets (API keys, tokens) in pasted evidence and logs.
- Separate PR-introduced issues from pre-existing ones by checking the same file on the base branch before claiming a regression.
- Flag stale descriptions (for example, files renamed or removed in the final branch) and correct the PR body if the user asks.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lulu0119
- Source: lulu0119/skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.