Code Review Pipeline
Developer Official v1.1.28Automated PR review with style checking, security scan, and structured feedback
by skrptiq
Sign in to import this skrpt into your workspace.
Sign inWhat's included 12 nodes
PR Review Pipeline
Orchestrates the full pull request review: fetch, analyze, check style, scan security, summarize, decide
Approval Decision
Weighs the full set of review findings and issues a final approve, request-changes, or comment verdict
Inline Comments
Turns analysis findings into precise, self-contained inline review comments anchored to specific diff lines
Security Scanning
Identifies security vulnerabilities, insecure patterns, and dependency risks in code
Style Checking
Validates code against style guidelines, naming conventions, and formatting standards
Approval Decision
Makes an approve or request-changes decision with structured reasoning
Inline Comments
Generates precise inline code comments for specific issues found during review
Review Summary
Generates a structured, readable summary of all review findings for a pull request
Security Report
Produces a detailed security findings report with risk ratings and remediation guidance
Style Violations
Lists style guide violations with specific fix suggestions and auto-fix indicators
Ollama Local
Local LLM inference via Ollama for private, offline code review
Review Standards
Coding standards and review criteria used as the baseline for all analysis passes
Requirements 3 services, 2 permissions, 2 data types
- LLM Service
- GitHub (MCP)
- ollama-local
- network:github.com
- network:ollama.com
- pii
- source code
Security Passed
Detected
- Services: llm-service, github-mcp
- Permissions: network:ollama.com
- Data Handling: pii
Version history 18 releases
GH#863 Wave 2 (K-045 intent/output-mismatch + mis-wire) — rewire the pipeline so a real line-level review is actually produced. Previously the review summary synthesised outputs that did not exist yet (Security/Style resolved empty) and `style-checking` ran the wrong prompt (`approval-decision` instead of `style-violations`), leaving `inline-comments`, `style-violations`, and `approval-decision` orphaned. Fixes: `style-checking`→`style-violations`; new backing skills `inline-comment-generation` (runs `inline-comments`) and `approval-decision-making` (runs `approval-decision`); security + style now run first (parallel), then inline comments, then the `review-summary` synthesis (still the `output_step`), then the homed approval decision. Positional `{{steps.X.output}}` refs in review-summary/inline-comments/style-violations/approval-decision converted to named `context_params` wired by explicit `from_step`/`from_input` bindings (from_step resolves by skill title). contents.skills 2→4, total 10→12.
GH#833 — drop the embedded `github-mcp` service node; dep-reference the canonical `_shared/github-mcp@1.0.0` instead (kills per-skrpt drift so the app can content-dedup). Keeps the single-copy `ollama-local` embedded. contents.services 2→1.
GH#745 — declare per-step `output: {name, type}` on every execution step (review_summary/text, extracted_data/json, security_report/text, approval_decision/decision, formatted_review/text, sanitised_review/text). Lights up the #744 rich flow-map with named, typed outputs. Content-only; no bindings or logic changes.
GH#645 Row 3b — migrate to K-037 dep-referenced schema. Strip 6 inline shared-content files and declare 6 hub-shared deps (UUID id + slug name + version + checksum from `gen-dep-checksums.mjs`). Closes pre-Step-3 inline-vendoring for this bundle.
Wave 2: re-signed with canonical engine signing pipeline.
Signature fix — RELEASE_NOTES.md now included in integrity checksum.
Initial catalogue release with full structural and content-quality validation. All scanner checks pass.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
Release notes unavailable for this version.
More from Developer
View all →Translation Pipeline
Translate content into multiple languages with quality review and comparative reporting
Sprint Wrapup Pipeline
Summarizes sprint retrospective notes and extracts action items for the next sprint
MCP Server Builder
Design, build, validate, test, and document an MCP server from a service description