Borrowing it
Nothing to install: this file belongs to ayutaz/piper-plus. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ayutaz/piper-plus/dev/.claude/skills/reply-review/SKILL.mdgit clone --depth 1 https://github.com/ayutaz/piper-plusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ayutaz/piper-plus/reply-review)<a href="https://agentmods.dev/skills/ayutaz/piper-plus/reply-review"><img src="https://agentmods.dev/badge/skills/ayutaz/piper-plus/reply-review.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00153 | $0.03893 |
| Opus 5 | $0.00077 | $0.01946 |
| Sonnet 5 | $0.00031 | $0.00779 |
| Haiku 4.5 | $0.00015 | $0.00389 |
Grade A, and why
reply-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 292 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PR レビューコメント自動返信 + Resolve
修正コミット後に呼び出して、未解決の review comment に対応内容を返信し、thread を resolve します。
引数
$1(必須): PR 番号 (例:349)$2(任意): 返信に記載するコミットハッシュ。省略時はgit rev-parse HEADの短縮 hash を使用。--stale-check(任意): 各コメントのoriginalCommit.oidと HEAD を比較し、該当ファイルが以降に更新済の場合 stale flag を立てる (フェーズ 1.5 で表示)--skip-copilot-style(任意): Copilot の定型ノイズコメント (style/lint 系の "Consider using" "Consider renaming" 等) を一覧から除外 (フェーズ 1.7 で適用)--auto-safe(任意): 安全カテゴリ ((a) stale 判定済 + (b) Copilot 定型ノイズ + (c) Copilot stale-on-style 重複) のみ 自動 reply + resolve。 非 stale な human reviewer / blocker 候補は dry-run と同様にユーザに提示するのみ。--stale-checkと--skip-copilot-styleを内部で自動有効化。/loop /watch-prから chain 起動される想定。 memory feedback_pr_body_over_comments / feedback_merge_caution と整合 (review thread への reply ≠ PR body 改変 ≠ merge)。--dry-run(任意): 投稿・resolve を実行せず計画のみ表示
実行前の確認
- ブランチ: !
git rev-parse --abbrev-ref HEAD - 最新コミット: !
git log -1 --oneline - 引数: $ARGUMENTS
手順
フェーズ 1: Review Thread の取得
GraphQL で 未解決 の review thread を取得:
gh api graphql -f query='
query($pr: Int!) {
repository(owner: "ayutaz", name: "piper-plus") {
pullRequest(number: $pr) {
reviewThreads(first: 50) {
nodes {
id
isResolved
comments(first: 1) {
nodes {
id
databaseId
path
line
body
author { login }
originalCommit { oid }
commit { oid }
}
}
}
}
}
}
}' -F pr=<PR_NUMBER> --jq '.data.repository.pullRequest.reviewThreads.nodes[] | select(.isResolved == false) | {thread_id: .id, comment: .comments.nodes[0]}'
各 thread について:
thread_id: GraphQL mutation で resolve するための IDcomment.databaseId: REST API で reply するための IDcomment.path+comment.line: どのファイルのどの行のコメントかcomment.body: レビュー本文 (対応内容を判定する材料)comment.originalCommit.oid: コメントが付けられた commit SHA (stale check に使用)comment.commit.oid: コメントが現在指している commit SHA (rebase 後の最新位置)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 292 lines · 153 tokens per session scan A f12eafe0b756
reply-review is a skill published in the GitHub repository ayutaz/piper-plus (204 stars, last pushed 5d ago), licensed MIT. It adds 153 tokens to every session and 3,893 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
github
GitHub operations via gh CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available)…
meta-codereview-current-diff
Read the current uncommitted diff, run three independent reviewers (safety + tests-coverage + style) in parallel, then arbitrate a single BLOCK / BLOCKWITHOVERRIDE / PASSWITHNOTES verdict. Use before commit when you want a multi-perspective second-opinion instead of a single-reviewer agent loop.
submit-github-pr
Use when publishing an existing TensorRT-Model-Connect change as a GitHub pull request. Verifies authenticated repository access, branch and diff scope, validation evidence, commit identity, reviewer-facing text, exact pushed head, and the created draft PR without merging it.
write-git-messages
Draft, revise, or review Git commit messages, PR titles, PR descriptions, and squash or rebase merge messages. Use when Codex needs to summarize a diff for reviewers, convert rough notes into a commit or PR message, check a message against Git and Conventional Commits style, or prepare repository contribution text…
review-implement-phase
Implements triaged review actions, commits focused fixes, and posts Done plus resolves threads. Use when the user wants only the implementation phase of the review-framework workflow.
engram-branch-pr
PR creation workflow for Engram following the issue-first enforcement system. Trigger: When creating a pull request, opening a PR, or preparing changes for review.