Skip to content
Back to skills

Review Pr Comments

ASecurity

Manual-only cleanup of actual feedback on an existing PR: verify comments, batch valid in-scope fixes, respond, and leave the PR merge-ready.

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 29, 2026
ai-agentsgitsecurity

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 29, 2026

npx -y skills add hcaiano/skills --skill review-pr-comments --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review Pr Comments?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Review Pr Comments
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hcaiano-review-pr-comments/badge)](https://www.skillsdirectory.com/skills/hcaiano-review-pr-comments)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: review-pr-comments
description: "Manual-only cleanup of actual feedback on an existing PR: verify comments, batch valid in-scope fixes, respond, and leave the PR merge-ready."
user-invocable: true
disable-model-invocation: true
argument-hint: "[PR number, URL, or 'all' for all open PRs]"
---

# Review PR Comments

Handle real review feedback on an existing PR. This is an on-demand, exception
path: most PRs have no comments because cloud auto-review is disabled and the
heavy review already happened locally (ship-it's delivery gate). Do not
summon bot reviews (`@codex review`, `@coderabbitai review`), and never treat a
bot's silence as something to wait for.

Process, at most TWO rounds (a round = collect → triage → one batched commit →
push → required CI green on the new head):

1. Collect all open feedback: human reviews, bot comments, unresolved and
   outdated threads, failing checks.
2. Triage each finding against the code:
   - **Fix in the batch:** real correctness, security, or data-integrity
     issues, and anything a human reviewer explicitly requested.
   - **Reply, don't push:** style nits, defensive hardening for invariants
     that already hold, severity-inflated or duplicate findings. Answer the
     thread, resolve it, move on. A nit is never a reason for a push.
   - **Surface to the user:** product/architecture decisions, scope
     expansions, conflicting reviewer guidance.
3. Validate the complete head (original changes plus fixes), commit and push
   once, and wait for required CI (poll at 60–120 s intervals, never tight
   loops).

After two rounds, stop pushing: report remaining items with your triage and
recommendation. Feedback arriving after your final push does not reopen the
loop. Success: required checks green on the final head, human-requested
changes addressed, every open thread fixed or answered, and GitHub reports the
PR mergeable — bot re-reviews are never a completion requirement.

Do not merge, force-push, modify `main`, create follow-up PRs (nit-cleanup
follow-up PRs are explicitly banned), or make product and architecture
decisions without authorization.

Files in this skill

  • SKILL.md2.1 KB
  • agents/openai.yaml166 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.