Menu
Fix failing CI checks and GitHub Actions on a Pull Request.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Review recent code changes and broad codebase areas for critical and high severity security vulnerabilities. Use when Codex needs to clear `./out-security-review`, select 25 non-doc, non-test files split across past-day commits, past-week commits, and broad codebase coverage, group them into 6-8 review buckets, spawn one security-review sub-agent per review bucket, persist each candidate finding to `./out-security-review/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for responsible disclosure.
Record a short Playwright-based product demo video for significant UI or user-visible functionality changes. Use when Codex needs to show a workflow in motion for a PR, either by recording an existing targeted E2E spec or by creating a disposable one-off Playwright spec that captures the changed behavior in under a minute, then uploading the final video to Vercel Blob and preparing a PR comment body that says "Demo at commit {hash}" with a 1-2 sentence summary and durable hosted link.
Review the last 7 days of recent commits for large architecture improvements that dramatically improve maintainability. Use when the agent needs to clear `./out-code-architect`, select 25 non-doc, non-test files from recent commits across different parts of the repo, spawn one architecture-review sub-agent per starting file, persist each candidate finding to `./out-code-architect/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for issue filing.
Review the last 7 days of recent commits for critical and high severity bugs that break user experience. Use when the agent needs to clear `./out-bug-finder`, select 25 non-doc, non-test files from recent commits across different parts of the repo, spawn one bug-review sub-agent per starting file, persist each candidate finding to `./out-bug-finder/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for issue filing.
Review recent GitHub Actions workflow runs, separate expected noise from actionable failures, and write a machine-readable workflow health report for deterministic post-agent issue handling.
Print the full host-side `scripts/pr.sh` command needed to create or switch to a feature branch, commit current changes, push, and open or update a PR outside the Docker sandbox using explicit flag-style inputs.
| name | keppo:pr-fix:actions |
| description | Fix failing CI checks and GitHub Actions on a Pull Request. |
Fix failing CI checks and GitHub Actions on a Pull Request.
$ARGUMENTS: Optional PR number or URL. If not provided, uses the current branch's PR.You MUST use the TaskCreate and TaskUpdate tools to track your progress. At the start, create tasks for each step below. Mark each task as in_progress when you start it and completed when you finish. This ensures you complete ALL steps.
Determine the PR to work on:
$ARGUMENTS contains a PR number or URL, use thatgh pr view --json number,url,title,body --jq '.'Check for failing CI checks:
gh pr checks <PR_NUMBER>
Identify which checks are failing:
For failing lint/formatting checks:
pnpm run lint to identify lint issuespnpm run fmt to fix formattingFor failing type checks:
pnpm run typecheck to identify type errorsFor failing unit tests:
pnpm run test:non-e2e -- <test-file-pattern>
For failing Playwright/E2E tests:
pnpm run build:workspace-exports
pnpm run test:e2e -- <test-file>
For failing build checks:
pnpm run build
For failing security checks:
pnpm run check:security
docs/rules/security.md for guidanceAfter making all fixes, verify:
pnpm run lintpnpm run typecheckpnpm run test:non-e2eCommit and push the changes:
If any changes were made:
git add -A
git commit -m "fix(ci): address failing CI checks
- <summary of fix 1>
- <summary of fix 2>
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>"
Then run /pr-push to push the changes.
Provide a summary to the user: