github-code-review
Facilitates code reviews for pull requests on GitHub, enabling inline comments and diffs for quality assurance.
Install this skill
Security score
The github-code-review skill was audited on Jun 11, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 25 | ```bash |
Template literal with variable interpolation in command context
| 337 | ```bash |
Access to hidden dotfiles in home directory
| 33 | elif grep -q "github.com" ~/.git-credentials 2>/dev/null; then |
Access to hidden dotfiles in home directory
| 34 | GITHUB_TOKEN=$(grep "github.com" ~/.git-credentials 2>/dev/null | head -1 | sed 's|https://[^:]*:\([^@]*\)@.*|\1|') |
Access to .env file
| 31 | if _hermes_env="${HERMES_HOME:-$HOME/.hermes}/.env"; [ -f "$_hermes_env" ] && grep -q "^GITHUB_TOKEN=" "$_hermes_env"; then |
External URL reference
| 34 | GITHUB_TOKEN=$(grep "github.com" ~/.git-credentials 2>/dev/null | head -1 | sed 's|https://[^:]*:\([^@]*\)@.*|\1|') |
External URL reference
| 146 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER \ |
External URL reference
| 159 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER/files \ |
External URL reference
| 200 | https://api.github.com/repos/$OWNER/$REPO/issues/$PR_NUMBER/comments \ |
External URL reference
| 226 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER \ |
External URL reference
| 231 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER/comments \ |
External URL reference
| 256 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER \ |
External URL reference
| 261 | https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER/reviews \ |
External URL reference
| 359 | https://api.github.com/repos/$GH_OWNER/$GH_REPO/pulls/$PR_NUMBER |
External URL reference
| 363 | https://api.github.com/repos/$GH_OWNER/$GH_REPO/pulls/$PR_NUMBER/files |
External URL reference
| 421 | https://api.github.com/repos/$GH_OWNER/$GH_REPO/pulls/$PR_NUMBER \ |
External URL reference
| 427 | https://api.github.com/repos/$GH_OWNER/$GH_REPO/pulls/$PR_NUMBER/reviews \ |