← 返回 Skills 市场

Pull Request Reviewer

Name: Pull Request Reviewer
Author: wimi321

作者 wimi321 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install pr-audit

功能描述

Use when the user wants a local review of a GitHub pull request based on its diff, risks, quality, performance, tests, and security implications.

使用说明 (SKILL.md)

Pull Request Reviewer

Use this skill for code review of an existing GitHub PR.

Workflow

Resolve the target PR number or list open PRs if needed.
Read PR metadata and full diff.
Review correctness, conventions, performance, test coverage, and security-sensitive changes.
Prioritize concrete findings over generic praise.
Return a structured review with suggested follow-up.

Guardrails

Base the review on the actual diff, not assumptions.
Findings first, summary second.
Keep comments actionable and specific.

Example Requests

Review PR #123 for correctness and risk.
List the biggest problems in this open PR.

Inputs

PR number or selection
GitHub diff
Repo conventions

Outputs

Ordered review findings
Risk summary
Improvement suggestions

Success Criteria

The review is grounded in the actual diff.
Findings are actionable.
Risky changes are prioritized.

Non-Goals

Generic praise-only review
Reviewing without reading the diff

Source Provenance

Derived from src/commands/review.ts.

安全使用建议

This appears low-risk: it only describes reading diffs and producing reviews and has no installers or credential requests. Before using, consider: (1) avoid pasting sensitive secrets into diffs you give the skill; (2) if you want the agent to fetch private PRs, provide a least-privileged GitHub token and be aware the skill does not itself declare how it will use it; (3) the skill's source is unknown — if provenance matters, verify origin before granting any external access or tokens.

功能分析

Type: OpenClaw Skill Name: pr-audit Version: 1.0.0 The skill bundle contains standard instructions and configuration for an AI agent to perform GitHub pull request reviews. The workflow defined in SKILL.md and the prompt in agents/openai.yaml are strictly aligned with the stated purpose of analyzing code diffs for quality and security, with no evidence of malicious intent, data exfiltration, or prompt injection.

能力评估

✓ Purpose & Capability

Name and description match the runtime instructions: the skill focuses on reading a PR diff/metadata and producing a review. It does not request unrelated binaries, credentials, or system access.

ℹ Instruction Scope

SKILL.md instructs the agent to resolve PR numbers, read PR metadata and full diffs and produce structured findings. This stays within the stated purpose. It is slightly ambiguous about whether the agent should fetch diffs from GitHub itself (which would require network access or a token) versus relying on a user-supplied diff — the skill does not declare any credentials or network steps.

✓ Install Mechanism

There is no install spec and no code files beyond simple metadata and provenance docs, so nothing is written to disk or downloaded by the skill itself.

✓ Credentials

The skill declares no required environment variables, credentials, or config paths. This is proportionate to an instruction-only reviewer that operates on supplied diffs. (If you intend the agent to fetch private PRs, you may need to provide a GitHub token externally — that is not requested by the skill itself.)

✓ Persistence & Privilege

always is false and there is no indication the skill requests persistent system-wide changes or modifies other skills' configs. It does not ask for persistent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install pr-audit
安装完成后，直接呼叫该 Skill 的名称或使用 /pr-audit 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial extraction from local Claude Code source

元数据

Slug pr-audit

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题