Receber por email
← Voltar para o catálogo

review-pr

Diff-aware PR security review with verified findings and PR comment payload.

22estrelas
Atualizado há 4 meses

Ver no GitHub ↗ Licença: MIT

Como adicionar

/plugin marketplace add allsmog/vuln-scout

O comando exato pode variar conforme o repositório. Confira o README no GitHub.

Para o autor da skill

Cole no README do seu repo

Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.

[![Skillteca](https://www.skillteca.com.br/api/badge/review-pr-allsmog/svg)](https://www.skillteca.com.br/skills/review-pr-allsmog)

Skills relacionadas

Ver todas de Segurança →

Alerta por categoria

Receba novas skills de Segurança toda segunda

1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.

Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.

Ler descrição completa

Review PR

Use this task skill when the user asks to review this PR, scan a PR, run a diff scan, or check a pull request for vulnerabilities.

Workflow

  1. Identify the base ref, defaulting to origin/main when the user does not specify one.
  2. Run /vuln-scout:diff <base> to produce changed-code findings.
  3. Call code-reviewer on new or changed findings only.
  4. Run /vuln-scout:verify --from .claude/diff-findings.json for findings that affect the PR.
  5. Call false-positive-verifier for high-impact or ambiguous results.
  6. Trigger poc-safety-check before any dynamic validation or PoC work.
  7. Render /vuln-scout:report --format md for the PR comment payload.
  8. Optionally render /vuln-scout:report --format bundle --output evidence-bundle for evidence handoff.

Produces

  • .claude/diff-findings.json
  • pr-comment.md
  • optional evidence-bundle/

When NOT To Trigger

Do not trigger for general git diff questions, style-only code review, STRIDE threat modeling, or framework-specific vulnerability education without a PR review request.

Compartilhar X LinkedIn