workflow-pr-review-post SKILL.md skillA
workflow-pr-review-post from lugassawan/swe-workbench is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add lugassawan/swe-workbench/workflow-pr-review-post@git:20261019.401c6bbPins git:20261019.401c6bb in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- lugassawan/swe-workbench
- Path
skills/workflow-pr-review-post/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261019.401c6bb, committed Oct 19, 2026
- First version recorded
- Aug 25, 2026
- Size
- 18,986 bytes
- Repository stars
- 3
- License
- MIT
Posting core shared by workflow-pr-review and the specialist /swe-workbench:review PR-mode sub-flow — takes a findings/decision/byline payload, dedupes by stable key and fuzzy match (±5-line, Jaccard ≥ 0.4) against threads and earlier reviews, posts one review of inline and PR-level findings (skipped if unchanged), applies the self-review + diff-scoping flip, submits APPROVE or COMMENT.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Workflow: PR Review — Posting Core (shared mechanism) **Announce at start:** "I'm using the workflow-pr-review-post skill to post these findings to PR #N." ## When to invoke - Called by `swe-workbench:workflow-pr-review` (first-pass or followup mode) after its Step 5 footer parse. - Called by `/swe-workbench:review <PR#> --mode <specialist>` after the user replies `post` to the confirmation prompt (specialist PR-mode sub-flow). ## When NOT to invoke - Local-diff mode → never invoked; there is no PR to post to. - `--mode contributor-trust` → never invoked; `swe-workbench:contributor-auditor`'s contract is advisory-only, never posts. - Directly by a user prompt with no pre-computed payload — this skill is pure mechanism; something upstream must have already run an auditor and derived a decision. ## Input contract The posting mechanism itself lives in `bin/swe-workbench-pr-review-submit` — it validates every field below and aborts (`workflow-pr-review-post: invalid payload — <field> <problem>. Refusing to post.`, non-zero exit, before any network call) on a violation, so this table documents the contract callers must satisfy, not a check this skill performs itself. …
Read the whole file at its exact version.
How to install
mdr add lugassawan/swe-workbench/workflow-pr-review-post@sha256:970d8d467c35905cThe line at the top of this page pins the label git:20261019.401c6bb, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_wlotvj7ojaee5fr5)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Aug 25, 2026 and Oct 19, 2026, about one every 9 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.401c6bb latest | 2026-10-19 | 401c6bb | 18,986 B | A | view · diff |
| git:20261019.f68115f | 2026-10-19 | f68115f | 13,480 B | A | view · diff |
| git:20261010.fb0dcf7 | 2026-10-10 | fb0dcf7 | 15,021 B | A | view · diff |
| git:20261010.8d92cb4 | 2026-10-10 | 8d92cb4 | 14,592 B | A | view · diff |
| git:20260925.4e239c3 | 2026-09-25 | 4e239c3 | 14,122 B | A | view · diff |
| git:20260905.2ea56d6 | 2026-09-05 | 2ea56d6 | 13,201 B | A | view · diff |
| git:20260825.f99a559 | 2026-08-25 | f99a559 | 11,664 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (18986 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
lugassawan/swe-workbench · 3 stars · license MIT · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_wlotvj7ojaee5fr5 GET https://markdownregistry.com/api/v1/resolve?ref=lugassawan/swe-workbench/workflow-pr-review-post GET https://markdownregistry.com/api/v1/blob/970d8d467c35905cc1caf1e2e32b070a7fde31fc23d4c45cf9df76a60e0e636c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.