بنقرة واحدة
review-response
Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
القائمة
Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Find and fix credential leaks in log/display output — the URL sanitization pattern from PRs
Systematic approach to rebasing a stale PR branch onto a diverged upstream main — from PRs
Hermes Ops Kit workflows for provider routing, secret and key lifecycle, preflight plugin scanning, MCP auditing, cost governance, and operator diagnostics.
Use Hermes Ops Kit with Vaultwarden/Bitwarden secret storage, preferring the Bitwarden CLI (`bw`) for item-level CRUD and verification.
| name | review-response |
| description | Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews. |
Systematic workflow for receiving and acting on code review feedback, whether from a human or an automated hermes-sweeper run.
A hermes-sweeper review carries these markers in the body:
<!-- hermes-sweeper:review=<pr-number> -->
<!-- hermes-sweeper:review-verdict=keep_open salvageability=<low|medium|high> -->
The verdict keep_open means the review surfaces blocking concerns. The salvageability
grade tells you how much of the existing work is reusable:
| Grade | Meaning |
|---|---|
high | Minor rework; most of the diff is correct |
medium | Several items need rewriting or transplanting |
low | Fundamental re-architecture needed |
Pull every comment — issue comments, inline review comments, and the review body.
Use gh api to get them all:
# Review body
gh api repos/{owner}/{repo}/pulls/{pr}/reviews --jq '.[] | select(.user.login == "reviewer")'
# Inline comments
gh api repos/{owner}/{repo}/pulls/{pr}/comments --jq '.[] | select(.pull_request_review_id == <review-id>)'
# Issue comments
gh api repos/{owner}/{repo}/issues/{pr}/comments --jq '.[] | select(.user.login == "reviewer")'
For each problem the reviewer identified, restate it as a concrete technical requirement. If anything is unclear, ask before implementing.
Never implement feedback without verifying it first. For each claimed problem:
rg searches to confirm the reviewer's claims about callers, imports, etc.Common hermes-sweeper accuracy issues:
upstream/main, not your branchExternal feedback = suggestions to evaluate, not orders to follow. Before implementing:
Order of implementation:
Run the full test suite after each fix. Never batch changes without testing.
When replying to GitHub:
gh api repos/{owner}/{repo}/pulls/{pr}/comments/{id}/repliesExample response:
Addressed all four issues:
1. **JSON validity** — Remediation print loop guarded by `if not _json_mode:`
2. **Fallback chain** — Replaced with `get_fallback_chain()` from fallback_config
3. **Auxiliary tasks** — Dynamic `sorted(auxiliary.keys())` replaces hardcoded list
4. **Parser location** — Flags moved to `subcommands/doctor.py`
80 passed, 0 failed.
Push back with technical reasoning when the suggestion:
Example: "The file hermes_cli/subcommands/doctor.py does not exist on this branch or on
upstream/main. The referenced commit 568e1276 is not present in this repository. The
parser flags remain correctly in main.py."
# Always unset GITHUB_TOKEN so gh uses its own auth
unset GITHUB_TOKEN
# Check if branch is behind upstream
git fetch upstream main
git merge-base --is-ancestor HEAD upstream/main || echo "NEEDS REBASE"
# Trial merge to detect conflicts
git merge --no-commit --no-ff upstream/main
# ... inspect conflicts ...
git merge --abort