一键导入
review-response
Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Find and fix credential leaks in log/display output — the URL sanitization pattern from PRs
Systematic approach to rebasing a stale PR branch onto a diverged upstream main — from PRs
Hermes Ops Kit workflows for provider routing, secret and key lifecycle, preflight plugin scanning, MCP auditing, cost governance, and operator diagnostics.
Use Hermes Ops Kit with Vaultwarden/Bitwarden secret storage, preferring the Bitwarden CLI (`bw`) for item-level CRUD and verification.
| name | review-response |
| description | Receive, verify, and respond to PR review feedback — especially hermes-sweeper automated reviews. |
Systematic workflow for receiving and acting on code review feedback, whether from a human or an automated hermes-sweeper run.
A hermes-sweeper review carries these markers in the body:
<!-- hermes-sweeper:review=<pr-number> -->
<!-- hermes-sweeper:review-verdict=keep_open salvageability=<low|medium|high> -->
The verdict keep_open means the review surfaces blocking concerns. The salvageability
grade tells you how much of the existing work is reusable:
| Grade | Meaning |
|---|---|
high | Minor rework; most of the diff is correct |
medium | Several items need rewriting or transplanting |
low | Fundamental re-architecture needed |
Pull every comment — issue comments, inline review comments, and the review body.
Use gh api to get them all:
# Review body
gh api repos/{owner}/{repo}/pulls/{pr}/reviews --jq '.[] | select(.user.login == "reviewer")'
# Inline comments
gh api repos/{owner}/{repo}/pulls/{pr}/comments --jq '.[] | select(.pull_request_review_id == <review-id>)'
# Issue comments
gh api repos/{owner}/{repo}/issues/{pr}/comments --jq '.[] | select(.user.login == "reviewer")'
For each problem the reviewer identified, restate it as a concrete technical requirement. If anything is unclear, ask before implementing.
Never implement feedback without verifying it first. For each claimed problem:
rg searches to confirm the reviewer's claims about callers, imports, etc.Common hermes-sweeper accuracy issues:
upstream/main, not your branchExternal feedback = suggestions to evaluate, not orders to follow. Before implementing:
Order of implementation:
Run the full test suite after each fix. Never batch changes without testing.
When replying to GitHub:
gh api repos/{owner}/{repo}/pulls/{pr}/comments/{id}/repliesExample response:
Addressed all four issues:
1. **JSON validity** — Remediation print loop guarded by `if not _json_mode:`
2. **Fallback chain** — Replaced with `get_fallback_chain()` from fallback_config
3. **Auxiliary tasks** — Dynamic `sorted(auxiliary.keys())` replaces hardcoded list
4. **Parser location** — Flags moved to `subcommands/doctor.py`
80 passed, 0 failed.
Push back with technical reasoning when the suggestion:
Example: "The file hermes_cli/subcommands/doctor.py does not exist on this branch or on
upstream/main. The referenced commit 568e1276 is not present in this repository. The
parser flags remain correctly in main.py."
# Always unset GITHUB_TOKEN so gh uses its own auth
unset GITHUB_TOKEN
# Check if branch is behind upstream
git fetch upstream main
git merge-base --is-ancestor HEAD upstream/main || echo "NEEDS REBASE"
# Trial merge to detect conflicts
git merge --no-commit --no-ff upstream/main
# ... inspect conflicts ...
git merge --abort