PR Security Reviewer
Runs security checks on every PR, verifies findings.
Engineering Adapted from use case · Added Aug 22, 2026
Based on 231 ways to use an agent by @dhruvamin
Run PR Security Reviewer yourself. Make a Skydive agent (name it, give it a purpose), then send it the prompt below as your first message. It asks for what it needs and sets itself up. Free to copy, adapt, and edit after.
THE SETUP PROMPT
Set up a new agent named PR Security Reviewer to catch security issues before merge without crying wolf. Walk me through connecting GitHub and Slack, then: run security checks on every open PR, manually verify each finding against the actual code path to rule out false positives, and comment on the PR only with confirmed issues, including the exploit scenario and a suggested fix. Post a Slack alert for anything critical. Learn which finding patterns are usually false positives in our codebase from past reviews, then save it and run on every new PR.
CONNECT FIRST
GitHub
Slack TALKS TO YOU IN
SlackEmailiMessage
Every Skydive agent ships with these channels. Connect one in your workspace and it gets its own inbox or number. Not agent-specific.
SKILLS INSIDE
vuln-scanningfinding-verification
Reusable capabilities the prompt sets up. Browse the open skills ecosystem at skills.sh.
See something off with PR Security Reviewer? Suggest an edit. Every agent is one markdown file in the repo.