Skills github-code-review
📦
github-code-review
v1.0.0 Content revision r1 Critical ⚙️ External commands🌐 Network access🔑 Env variables
Review GitHub Pull Requests with AI Agents
Manual pull request reviews can miss security, performance, and architecture issues. This skill provides structured GitHub review workflows using specialized AI agents and CLI automation.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "github-code-review" from https://skillstore.io/skills/dnyoussef-github-code-review.md and its manifest at https://skillstore.io/api/skills/dnyoussef-github-code-review/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "github-code-review". Review PR 123 for security and performance regressions.
Expected outcome:
- Security review summary with critical, high, and low priority findings.
- Performance observations with suggested benchmarks or follow-up tests.
- GitHub-ready review comments and labels for the pull request.
Using "github-code-review". Set up an automated review workflow for new pull requests.
Expected outcome:
- A workflow outline for collecting PR context and running review agents.
- Quality gate recommendations for security, performance, style, and architecture checks.
- Operational cautions for token scope, webhook validation, and command execution.
Using "github-code-review". Generate a final review report for a large feature PR.
Expected outcome:
- A concise decision summary with approval status and remaining blockers.
- Grouped findings by agent type and severity.
- Next actions for authors, reviewers, and release owners.
Security Audit
Criticalv10 • 7/9/2026 Open versioned report
The skill is a GitHub pull request review workflow that intentionally uses gh, npx, shell commands, and GitHub tokens. Most Markdown backtick findings are false positives, but webhook-driven execSync, authenticated automation, external command execution, and automated approval or merge examples are real risks that require controls before publication.
1
Files scanned
1,141
Lines analyzed
26
Review items
0
False positives ignored
Confirmed security concerns (2)
Critical
Untrusted PR Comment Command Execution
The skill presents PR comments such as /swarm commands as direct automation triggers and shows a webhook handler passing the comment body into a shell command. This can let untrusted repository users influence privileged review automation.
The command path is explicit: PR comments are accepted when they start with /swarm, then the full comment body is passed to execSync. Later checklist guidance does not remove the unsafe example.
High
Automated Approval and Merge Workflow Risk
The skill includes examples that approve pull requests based on generated review output and enable auto-merge after review counts. That can bypass human judgment if adopted without strict policy controls.
The cited examples issue gh pr review --approve and gh pr merge commands from automation flows. They are documented examples, but the business logic risk is clear if used directly.
Capability review items (26)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Critical
Synchronous process execution
execSync(`npx ruv-swarm github handle-comment --pr ${event.issue.number} --command "${command}"`);
The command embeds a PR comment body into execSync after only checking that it starts with /swarm. Untrusted comment text can influence shell execution.
Critical
Ruby/shell backtick execution
execSync(`npx ruv-swarm github handle-comment --pr ${event.issue.number} --command "${command}"`);
The backtick appears inside an execSync command template in the webhook example. The pattern is executable JavaScript command construction, not just documentation formatting.
High
Node.js child_process module
const { execSync } = require('child_process');
The webhook example imports child_process to run local commands from GitHub webhook events. That enables privileged command execution if copied into production without strict validation.
High
Synchronous process execution
execSync(`npx ruv-swarm github pr-init ${event.pull_request.number}`);
The webhook example synchronously runs an npx ruv-swarm command from event data. This is real command execution in response to webhook input and needs strong trust controls.
High
Ruby/shell backtick execution
execSync(`npx ruv-swarm github pr-init ${event.pull_request.number}`);
The backtick appears inside an execSync command template in the webhook example. The pattern is executable JavaScript command construction, not just documentation formatting.
High
Git platform tokens
run: echo "${{ secrets.GITHUB_TOKEN }}" | gh auth login --with-token
The workflow authenticates gh with secrets.GITHUB_TOKEN before running review automation. This is legitimate but exposes repository privileges to the surrounding automation path.
Medium
Shell command substitution
PR_DATA=$(gh pr view 123 --json files,additions,deletions,title,body)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PR_DIFF=$(gh pr diff 123)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PR_DATA=$(gh pr view 123 --json files,additions,deletions,title,body)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PR_DIFF=$(gh pr diff 123)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
CHANGED_FILES=$(gh pr view 123 --json files --jq '.files[].path')
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
SECURITY_RESULTS=$(npx ruv-swarm github review-security \
The shell substitution runs npx ruv-swarm and captures its output for later GitHub actions. This executes external tooling with PR context and should require explicit trust.
Medium
Shell command substitution
PR_DATA=$(gh pr view $PR_NUM --json files,title,body,labels)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PR_DIFF=$(gh pr diff $PR_NUM)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
REVIEW_OUTPUT=$(npx ruv-swarm github review-all \
The shell substitution runs npx ruv-swarm and captures its output for later GitHub actions. This executes external tooling with PR context and should require explicit trust.
Medium
Shell command substitution
PR_DIFF=$(gh pr diff 123 --color never)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PR_FILES=$(gh pr view 123 --json files)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
COMMENTS=$(npx ruv-swarm github review-comment \
The shell substitution runs npx ruv-swarm and captures its output for later GitHub actions. This executes external tooling with PR context and should require explicit trust.
Medium
Shell command substitution
FILE=$(echo "$comment" | jq -r '.path')
The shell substitution parses generated review output for later API calls. The pattern is operationally legitimate but depends on untrusted or tool-generated data.
Medium
Shell command substitution
LINE=$(echo "$comment" | jq -r '.line')
The shell substitution parses generated review output for later API calls. The pattern is operationally legitimate but depends on untrusted or tool-generated data.
Medium
Shell command substitution
BODY=$(echo "$comment" | jq -r '.body')
The shell substitution parses generated review output for later API calls. The pattern is operationally legitimate but depends on untrusted or tool-generated data.
Medium
Shell command substitution
COMMIT_ID=$(gh pr view 123 --json headRefOid -q .headRefOid)
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Medium
Shell command substitution
PROGRESS=$(npx ruv-swarm github pr-progress 123 --format markdown)
The shell substitution runs npx ruv-swarm and captures its output for later GitHub actions. This executes external tooling with PR context and should require explicit trust.
Medium
Shell command substitution
if [[ $(echo "$PROGRESS" | grep -o '[0-9]\+%' | sed 's/%//') -gt 90 ]]; then
The shell substitution parses generated review output for later API calls. The pattern is operationally legitimate but depends on untrusted or tool-generated data.
Medium
Shell command substitution
SWARM_STATUS=$(npx ruv-swarm github pr-status 123)
The shell substitution runs npx ruv-swarm and captures its output for later GitHub actions. This executes external tooling with PR context and should require explicit trust.
Medium
Shell command substitution
REVIEWS=$(gh pr view 123 --json reviews --jq '.reviews | length')
The shell substitution invokes gh to fetch pull request data from GitHub. This is expected for the skill but still performs authenticated external access.
Risk Factors
⚙️ External commands (134)
SKILL.md:395 SKILL.md:402 SKILL.md:407 SKILL.md:28-34 SKILL.md:34-37 SKILL.md:37-49 SKILL.md:49-105 SKILL.md:105-120 SKILL.md:120-136 SKILL.md:136-156 SKILL.md:156-161 SKILL.md:161-180 SKILL.md:180-187 SKILL.md:187-199 SKILL.md:199-201 SKILL.md:201-206 SKILL.md:206-216 SKILL.md:216-223 SKILL.md:223-228 SKILL.md:228-246 SKILL.md:246-256 SKILL.md:256-263 SKILL.md:263-268 SKILL.md:268-286 SKILL.md:286-296 SKILL.md:296-302 SKILL.md:302-307 SKILL.md:307-325 SKILL.md:325-335 SKILL.md:335-345 SKILL.md:345-351 SKILL.md:351-362 SKILL.md:362-366 SKILL.md:366-372 SKILL.md:372-380 SKILL.md:380-387 SKILL.md:387-392 SKILL.md:392-402 SKILL.md:402-407 SKILL.md:407-414 SKILL.md:414-424 SKILL.md:424-459 SKILL.md:459-463 SKILL.md:463-486 SKILL.md:486-494 SKILL.md:494-547 SKILL.md:547-555 SKILL.md:555-585 SKILL.md:585-589 SKILL.md:589-596 SKILL.md:596-604 SKILL.md:604-614 SKILL.md:614-618 SKILL.md:618-628 SKILL.md:628-632 SKILL.md:632-639 SKILL.md:639-649 SKILL.md:649-657 SKILL.md:657-663 SKILL.md:663-676 SKILL.md:676-682 SKILL.md:682-689 SKILL.md:689-693 SKILL.md:693-699 SKILL.md:699-707 SKILL.md:707-757 SKILL.md:757-761 SKILL.md:761-767 SKILL.md:767-775 SKILL.md:775-798 SKILL.md:798-802 SKILL.md:802-808 SKILL.md:808-812 SKILL.md:812-822 SKILL.md:822-830 SKILL.md:830-838 SKILL.md:838-842 SKILL.md:842-850 SKILL.md:850-854 SKILL.md:854-862 SKILL.md:862-866 SKILL.md:866-873 SKILL.md:873-877 SKILL.md:877-884 SKILL.md:884-892 SKILL.md:892-897 SKILL.md:897-901 SKILL.md:901-908 SKILL.md:908-912 SKILL.md:912-918 SKILL.md:918-922 SKILL.md:922-928 SKILL.md:928-976 SKILL.md:976-994 SKILL.md:994-998 SKILL.md:998-1011 SKILL.md:1011-1027 SKILL.md:1027-1052 SKILL.md:1052-1064 SKILL.md:1064-1073 SKILL.md:1073-1081 SKILL.md:1081-1090 SKILL.md:1090-1098 SKILL.md:1098-1107 SKILL.md:1107-1116 SKILL.md:1116-1117 SKILL.md:1117-1118 SKILL.md:39 SKILL.md:40 SKILL.md:107 SKILL.md:108 SKILL.md:138 SKILL.md:141-145 SKILL.md:518 SKILL.md:519 SKILL.md:522-526 SKILL.md:557 SKILL.md:558 SKILL.md:561-567 SKILL.md:571 SKILL.md:572 SKILL.md:573 SKILL.md:574 SKILL.md:814 SKILL.md:819 SKILL.md:1000 SKILL.md:1004 SKILL.md:37-49 SKILL.md:105-120 SKILL.md:136-156 SKILL.md:494-547 SKILL.md:555-585 SKILL.md:812-822 SKILL.md:998-1011
🌐 Network access (3)
🔑 Env variables (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/dnyoussef-github-code-review/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/dnyoussef-github-code-review?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/dnyoussef-github-code-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-github-code-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/dnyoussef-github-code-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Claude Code Flow. (2026). github-code-review security audit report (audit version 10) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/dnyoussef-github-code-review/audits/10BibTeX citation
@techreport{claude-code-flow-dnyoussef-github-code-review-2026,
author = {Claude Code Flow},
title = {github-code-review security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/dnyoussef-github-code-review/audits/10},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "github-code-review security audit report (audit version 10)"
version: "1.0.0"
type: report
authors:
- name: "Claude Code Flow"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/dnyoussef-github-code-review/audits/10"
identifiers:
- type: other
value: "skillstore:dnyoussef-github-code-review:audit:10"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Higher Skillstore usage
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
ruvnet Recommended
ruvnet-github-code-review
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated
2026-08-21
Claude Code Flow Current
dnyoussef-github-code-review
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
100
Maintainability
87
Content
72
Community
70
Spec Compliance
What You Can Build
Review Security-Critical Pull Requests
Run focused review workflows for authentication, authorization, secrets, and dependency changes before approval.
Standardize Team Review Workflows
Use repeatable review agents and quality gates to improve consistency across pull requests.
Automate PR Feedback Collection
Connect GitHub Actions, review comments, labels, and metrics into a single review process.
Try These Prompts
Run a Basic PR Review
Review pull request 123 with the GitHub code review skill. Focus on correctness, tests, and clear feedback.
Focus on Security Findings
Review pull request 123 for security issues. Prioritize authentication, authorization, secrets, injection risks, and dependency changes.
Create a Multi-Agent Review Plan
Create a review plan for pull request 123 using security, performance, architecture, style, and accessibility agents. Include expected outputs and quality gates.
Audit a Review Automation Workflow
Evaluate the automated review workflow for pull request 123. Check webhook safety, token scope, command validation, approval rules, and merge controls.
Best Practices
- Run commands only in trusted repositories with explicit user approval and limited GitHub token scopes.
- Validate PR comments, webhook signatures, and command arguments before any automation executes.
- Use the generated review as decision support and keep human approval for risky changes.
Avoid
- Do not allow arbitrary PR comments to trigger shell commands or privileged automation.
- Do not pass unreviewed model output directly into GitHub approval, merge, or labeling commands.
- Do not run external npm packages with repository secrets unless the package and version are trusted.
Frequently Asked Questions
Does this skill require GitHub access?
Yes. Most workflows require gh CLI authentication and repository permissions for pull request data and comments.
Can it approve or merge pull requests automatically?
The skill includes examples for approval and merge automation, but teams should require human review for these actions.
Which review areas does it cover?
It covers security, performance, architecture, style, accessibility, tests, quality gates, and review metrics.
Is it safe to use with public pull requests?
Use caution. Public pull requests can contain untrusted input, so tokens, webhooks, and commands need strict controls.
Does it install or run external tools?
The examples use gh, npx, ruv-swarm, claude-flow, jq, npm, and shell commands. Verify each tool before use.
Can it replace a human reviewer?
No. It helps organize review work and produce feedback, but human reviewers should make final decisions.
Developer Details
Author
Claude Code FlowLicense
MIT
Author version
v1.0.0
Skillstore revision
r1
Repository
https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/github-code-reviewRef
d29bab7c799689e19147d92070e306a76db0a8a9
Maintenance freshness
7/18/2026
Usage
5 downloads · 343 views
File structure
📄 SKILL.md