git-pr-review SKILL.md skillA
git-pr-review from huangwb8/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huangwb8/skills/git-pr-review@git:20260906.d2681a7Pins git:20260906.d2681a7 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huangwb8/skills
- Path
skills/alpha/git-pr-review/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260906.d2681a7, committed Sep 6, 2026
- First version recorded
- Sep 5, 2026
- Size
- 16,027 bytes
- Repository stars
- 50
- License
- MIT
当用户明确要求审查 GitHub PR、评估是否合并或判断 PR 应如何处理时使用。对 PR 做只读、证据驱动的方案与风险评估，并给出合并建议。⚠️ 不适用：直接修改、合并 PR，或在本地执行不可信 PR 代码。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Git PR Review
## 目标
当用户明确要求“review 某个 GitHub PR”“评估某个 pull request 是否值得 merge”“帮我判断这个 PR 怎么处理”时使用。基于用户提供的 GitHub 仓库地址、PR 编号/链接和补充说明，进行只读、证据驱动的 PR 审查：理解 PR 解决的问题、评估方案优劣与局限、默认优先使用内置“好 PR”标准并在必要时联网补充、识别恶意或高风险改动，并输出是否建议 merge 的 Markdown 决策报告。⚠️ 不适用：用户要你直接修改 PR 代码、直接 merge PR、或在本地执行 PR 分支中的不可信代码。
## 流程
### 输入
#### 你需要确认的输入
1. `github_repo`（必需）
- GitHub 仓库根地址或 `owner/repo`，例如 `https://github.com/owner/repo`
- 不接受 `issues/`、`pull/`、`tree/` 这类子页面 URL
2. `github_pr`（必需）
- PR URL、`#123`、`123` 或 `pr-123`
3. `extra_instructions`（可选）
- 用户已有判断、关注点、禁区、参考材料、团队背景
4. `review_count`（可选）
- 独立评审次数，默认 5；用户明确指定时以用户要求为准
- 当你调用 `build_parallel_review_plan.py` 时，把它映射为 `--n <review_count>`
5. `workspace_dir`（可选）
- 默认 `.bensz-api/task-{yyyymmdd-hhmm}-{简短描述}/git-pr-review/`
6. `report_dir`（可选）
- 默认当前工作目录（项目根）
### 执行步骤
#### 核心原则
- **只读优先**：默认只能读取 GitHub 页面、API 返回、diff、评论、CI 状态、相关 issue/文档；不要修改源代码。
- **绝不主动 merge**：除非用户明确要求，否则不要执行 merge、rebase、squash、approve、request review 等操作。
- **绝不执行不可信 PR 代码**：不要 `gh pr checkout`、不要运行 PR 分支脚本、不要安装 PR 引入的依赖、不要触发可疑 CI/CD。
- **中间文件隔离**：所有中间文件必须保存在工作目录下的隐藏目录 `.bensz-api/task-{yyyymmdd-hhmm}-{简短描述}/git-pr-review/`；若用户另有指定，才使用用户指定目录。
…Read the whole file at its exact version.
How to install
mdr add huangwb8/skills/git-pr-review@sha256:59196a3723569e78The line at the top of this page pins the label git:20260906.d2681a7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_u4wvfuiya63qdiqr)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 5, 2026 and Sep 6, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260906.d2681a7 latest | 2026-09-06 | d2681a7 | 16,027 B | A | view · diff |
| git:20260905.a346b91 | 2026-09-05 | a346b91 | 16,379 B | A | view · diff |
| git:20260905.7c0ea7c | 2026-09-05 | 7c0ea7c | 16,340 B | A | view · diff |
| git:20260905.8faacfe | 2026-09-05 | 8faacfe | 15,701 B | A | view · diff |
| git:20260905.a39953d | 2026-09-05 | a39953d | 15,289 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16027 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
huangwb8/skills · 50 stars · license MIT · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_u4wvfuiya63qdiqr GET https://markdownregistry.com/api/v1/resolve?ref=huangwb8/skills/git-pr-review GET https://markdownregistry.com/api/v1/blob/59196a3723569e78fee48b6bf4e063d5eedb095fb1639775fc16061dd1b7dffb
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.