Github Code Review
Helps with GitHub, code review as part of developing backend services and APIs workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add github-code-review npx -- -y @trustedskills/github-code-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"github-code-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/github-code-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The github-code-review skill enables AI agents to analyze pull requests on GitHub, generating detailed feedback on code quality, security vulnerabilities, and adherence to project standards. It automates the review process by scanning diffs against defined rulesets to ensure consistency before merging.
When to use it
- Automating initial triage of incoming pull requests in large repositories.
- Enforcing specific coding style guides or security policies across a team.
- Reducing manual review time for routine changes while highlighting complex logic errors.
- Providing consistent, objective feedback on code maintainability and documentation.
Key capabilities
- Analyzes pull request diffs to identify potential bugs and security issues.
- Generates structured comments directly within the GitHub interface.
- Validates code against configurable linting rules and best practices.
- Summarizes changes and suggests improvements for complex logic blocks.
Example prompts
- "Review this pull request and check for any obvious security vulnerabilities or race conditions."
- "Analyze the diff and provide feedback on whether the new functions follow our existing naming conventions."
- "Summarize the changes in this PR and highlight any areas where documentation is missing."
Tips & gotchas
Ensure your GitHub repository has a .github/ configuration folder with the necessary rulesets or linting definitions for the AI to validate against. The skill works best when paired with clear context about the project's specific architecture and coding standards.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.