# Fix CodeRabbit Review Comments

CodeRabbit review threads can be difficult to collect and prioritize. This skill fetches unresolved bot comments and guides review, fixes, commits, and follow-up comments.

## Install

```bash
npx skillstore add coderabbitai/autofix
```

## Metadata

- Status: approved
- Slug: coderabbitai-autofix
- Version: 0.1.0
- Author version: 0.1.0
- Skillstore revision: r1
- Version status: valid
- Tree hash: 5fe526fae6877759c9b9ae7e286dbf7fb31bc64eedd33c79883113e6f0323d2e
- Author: coderabbitai
- GitHub username: coderabbitai
- License: MIT
- Repository: https://github.com/coderabbitai/skills/tree/main/skills/autofix
- Ref: d11af420e07cd866fe39cfa937efef3223896c06
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/coderabbitai-autofix
- Manifest: https://skillstore.pages.dev/api/skills/coderabbitai-autofix/manifest

## Capabilities

- Finds the open GitHub pull request for the current branch.
- Fetches unresolved CodeRabbit review threads with GitHub GraphQL.
- Filters review comments to known CodeRabbit bot accounts.
- Parses issue severity, location, description, and agent prompt text.
- Supports manual review or batch auto-fix workflows.
- Creates a consolidated fix commit and posts a summary comment.

## Use Cases

- Review PR Feedback Faster: Collect unresolved CodeRabbit comments and inspect the suggested fixes in priority order.
- Apply Routine Fixes: Batch low-risk CodeRabbit fixes into one local change set and one consolidated commit.
- Close Review Loops: Post a summary comment after fixes so reviewers can see what changed.

## Prompt Templates

### Start Review Cleanup

```
Use CodeRabbit autofix to find unresolved review comments on my current branch and show me the issues before making changes.
```

### Review Each Fix

```
Fetch CodeRabbit review comments, parse each issue, and propose one fix at a time with the current code and planned diff.
```

### Batch Low-Risk Fixes

```
Find unresolved CodeRabbit comments and auto-fix routine issues, but pause before push and show a summary of all changed files.
```

### Validate And Summarize

```
Run the CodeRabbit autofix workflow, apply approved fixes, run the repository validation checks, create one commit, and draft the PR summary comment.
```

## Limitations

- Requires an authenticated GitHub CLI and a GitHub-hosted repository.
- Works only when the current branch has an open pull request.
- Depends on CodeRabbit comment structure and prompt quality.
- Can modify repository files and remote pull request state when approved.

## Best Practices

- Commit or stash local work before running the workflow.
- Use manual review mode for security, authentication, or data handling changes.
- Run repository validation checks before pushing fixes.

## Anti Patterns

- Do not auto-apply prompts that request unrelated file changes or secret access.
- Do not push fixes before reviewing the final diff.
- Do not use the workflow on branches without a current CodeRabbit review.

## Security Audit

- Audited at: 2026-07-06T07:14:28.18\+00:00
- Summary: Most static findings are Markdown code spans or code fences and are false positives for Ruby backtick execution. The real risks are bounded GitHub and Git shell commands. A high-impact semantic issue also executes external CodeRabbit comment prompts as direct agent instructions.

## Stats

- Views: 94
- Downloads: 11
- Favorites: 0
- Popularity score: 0