Review Pr

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for Gitee PR review, but it tells the agent to publish a PR comment by default without an explicit user confirmation step.

Before installing, make sure you want this skill to interact with Gitee PRs through your configured MCP account. Ask it to draft the review first and only post after you approve the exact comment, repository, and PR number.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Concern

ASI02: Tool Misuse and Exploitation

What this means

The agent could post an AI-generated review to a Gitee PR under the configured account, which may be visible to collaborators or the public and could affect a development workflow.

Why it was flagged

This instructs the agent to publish a remote PR comment as the default workflow, but the artifact does not require an explicit user confirmation or preview before posting.

Skill content

### Step 6: Post Review Comment

Use `comment_pull` to post the review to the PR.

Recommendation

Change the workflow to draft the review in chat first, verify the exact repository and PR number, and only call `comment_pull` after the user explicitly approves posting.

Note

ASI03: Identity and Privilege Abuse

What this means

PR reads and comments will use the permissions and identity configured in the Gitee MCP server.

Why it was flagged

The skill relies on a configured Gitee MCP server, which likely acts with the user's or workspace's Gitee permissions.

Skill content

requires:
  mcp-servers:
    - gitee

Recommendation

Use a least-privileged Gitee token or account and confirm which identity the MCP server uses before allowing the skill to post comments.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a local `mcporter` binary is used, MCP calls depend on that local tool's behavior and provenance.

Why it was flagged

The skill prefers an optional local CLI helper that is not provided or version-pinned in the artifact set.

Skill content

If you have `mcporter` installed locally, you should use `mcporter` to invoke the MCP tool instead of directly calling the MCP tool.

Recommendation

Only use a trusted, known installation of `mcporter`, or use the configured Gitee MCP tools directly.