github-pr-review-session

zeroclaw-labs/zeroclaw/.claude/skills/github-pr-review-sessionOpen on GitHub
From the author

Human-reviewer co-pilot for ZeroClaw PR reviews. Use this skill when the user wants to review a specific PR as themselves, re-review a PR after author changes, work through a queue of PRs, check what's still open on a PR, or post a formal review verdict. Trigger on: 'review 1234', 'can you look at PR #1234', 're-review 1234', 'check 1234', 'what's still open on 1234', 'go through the queue', 'next PR', 'review the open PRs'. This skill posts reviews in the voice of the active `gh` account holder using gh CLI.

Compare
SkillApache-2.01 fileNo scriptszeroclaw-labs/zeroclaw
Overall scoreOverall score AOverall score on A, B, C, F (there is no D).
Security severityInformationalOnly informational notesfrom 2 of 2 scanners

Only notes were reported. Notes are information, not problems.

No finding sets the security severity.

Open findings →
Assessed Oct 28, 2026Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit. d83f6baSource unchanged, checked Oct 28, 2026
Historical result (archived, not the current assessment)
Source badge at capture
Archived Pass as archived

Archived explanation: Skill failed: 0 hard fails in skill checks.

Pass and Fail now belong to Framework checks.

Scanners, signals and record facts
Assessed
Oct 28, 2026
Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit.
d83f6ba
Next source check
Oct 29, 2026
Files
1 in the skill, 1 with findings (File structure)
Record ID
30471bb
Reliability & quality
Findings list
No quality findings
Static context tokens
Measured from SKILL.md
4,245 tokens in the SKILL.md body
Progressive disclosure: absent
Cost
Measured
Not assessedVettd does not assess cost yet.
Compatibility
Captured declarations and checks
Name github-pr-review-session
Environment needs : no valueNot declared by the author.
Popularity
Repository activity
★ 33.1k
Characteristics
Classified
Not assessedVettd does not assess characteristics yet.

Which scanners reported what

ScannerRunSecurity severity reportedSecurity findingsOther findingsNotes
vettdCompletedNone reported000
ciscoCompletedInformational001

The overall score is A. It counts findings in every category. Security severity is Informational, the highest security finding across the scanners that ran (vettd reported none reported; cisco reported informational). No captured run is recorded for snyk, socket and gen-trust-hub.

Security findings

Conflicting information. The author lists the license as Apache-2.0, but the cisco scanner reports that the skill manifest has no license field. Check the repository before you rely on either.

What this assessment does not cover

Static checks only, not a safety guarantee. What this does not cover
  • Static checks only. Nothing in the skill was run.
  • Pages linked from SKILL.md were not fetched or checked.
  • This record is not signed yet, so you can't verify it came from Vettd unchanged.
  • Name, description, author, version and license are shown as the author wrote them. Vettd didn't verify them.
  • Cost, runtime characteristics and usage are not assessed.
  • Framework checks (OWASP Top 10 for LLM Applications 2025): not assessed for this record.

What “Not assessed” means

github-pr-review-session

zeroclaw-labs/zeroclaw/.claude/skills/github-pr-review-session
From the author

Human-reviewer co-pilot for ZeroClaw PR reviews. Use this skill when the user wants to review a specific PR as themselves, re-review a PR after author changes, work through a queue of PRs, check what's still open on a PR, or post a formal review verdict. Trigger on: 'review 1234', 'can you look at PR #1234', 're-review 1234', 'check 1234', 'what's still open on 1234', 'go through the queue', 'next PR', 'review the open PRs'. This skill posts reviews in the voice of the active `gh` account holder using gh CLI.

Overall scoreOverall score AOverall score on A, B, C, F (there is no D).
Security severityInformationalOnly informational notesfrom 2 of 2 scanners

Only notes were reported. Notes are information, not problems.

No finding sets the security severity.

Open findings →
Assessed Oct 28, 2026Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit. d83f6baSource unchanged, checked Oct 28, 2026
Historical result (archived, not the current assessment)
Source badge at capture
Archived Pass as archived

Archived explanation: Skill failed: 0 hard fails in skill checks.

Pass and Fail now belong to Framework checks.

Compare
Full record · metadata, license, scanners and provenance
Assessed
Oct 28, 2026
Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit.
d83f6ba
Next source check
Oct 29, 2026
Files
1 in the skill, 1 with findings (File structure)
Record ID
30471bb
SkillApache-2.01 fileNo scriptszeroclaw-labs/zeroclaw
Security severity
Derived from findings
Informational
Only informational notes
from 2 of 2 scanners
Reliability & quality
Findings list
No quality findings
Static context tokens
Measured from SKILL.md
4,245 tokens in the SKILL.md body
Progressive disclosure: absent
Cost
Measured
Not assessedVettd does not assess cost yet.
Compatibility
Captured declarations and checks
Name github-pr-review-session
Environment needs : no valueNot declared by the author.
Popularity
Repository activity
★ 33.1k
Characteristics
Classified
Not assessedVettd does not assess characteristics yet.
Cost and characteristics: not assessedVettd does not assess cost or runtime characteristics yet.Usage: not assessedVettd does not record how often a skill is used.

Which scanners reported what

The overall score is A. It counts findings in every category. Security severity is Informational, the highest security finding across the scanners that ran (vettd reported none reported; cisco reported informational).

vettdNone reported0 security findings
ciscoInformational0 security findings

Security findings

Not covered

Static checks only. Linked pages not fetched. Record not signed yet. Author details not verified. Framework checks not assessed.