AgentHubAgentHub

使用场景/代码审查与 GitHub

代码审查 / GitHub MCP 推荐

拉取 PR、读 diff、查 Issue、管理仓库。适合 Code Review、发布说明、CI 问题排查。

共匹配 6,707 个资源 · 第 24 / 140 页

什么是代码审查与 GitHub?

GitHub MCP 让 AI 进入你的协作流程:拉取 PR diff 做代码审查、检索 Issue 历史定位已知问题、读取 CI 日志分析构建失败、汇总提交生成 changelog。官方 github/github-mcp-server 通过 GitHub API 或个人访问令牌(PAT)鉴权,Gitee / GitLab 也有对应实现。

Code Review 实践:把团队的评审规范写成 Skill(如「检查竞态、边界、错误处理,按严重度输出」),配合 GitHub MCP 让 AI 先过一遍 PR,人工只看 AI 标出的高风险行——审查耗时通常明显下降,且低級错误漏检更少。

权限建议:使用细粒度 PAT(只授予目标仓库 contents / pull-requests 读写),组织仓库务必开只读起步;让 AI 发布评论或合并前先要求确认,防止误操作污染协作记录。

适合做什么

  • PR 自动审查
  • 生成 changelog
  • 跨仓库 Issue 检索
  • 依赖安全告警跟进

不太适合

  • 替代人工安全审计
  • 在无授权仓库上操作

相关资源

查看全部 →

plan

SkillSkillsMP

On an explicit planning request, always call `read_skill` for this skill before answering. Research first, then return one concise inline plan; do not create a plan file unless the user explicitly asks or a governing workflow requires one. Start and end the reply by saying this is not a special mode and `go` executes the plan; do not implement in the planning turn. For ordinary implement, build, fix, debug, or refactor requests, work directly. When an explicit plan divides work into separate diffs, commits, or PRs and the user asks to publish, preserve that split and tell the user before deviating.

source

requirements-clarification

SkillSkillsMP

Clarify a material user-owned product decision before substantive implementation commitments. Use only when request and named/governing evidence still leave a choice that would materially change scope, platform support, user-facing surface, data/API contract, domain values, project placement, or cross-system architecture; also use when a truncated request omits such a choice. On the initial turn, inspect only named or governing requirements evidence, then ask directly without loading: prefer structured input; ask one blocking outcome question or at most three coupled questions; wait. After the answer, load the body before write or delegation. Do not use for implement/build/fix/debug/refactor work when expected behavior is settled, plan/design deliverables owned by Plan, complexity/greenfield/integration alone, agent-owned technical choices, locally discoverable facts, reversible defaults, permission to begin, or stop/no-tool turns. Never re-ask supplied facts or turn clarification into refusal.

source

artifact-pdf

SkillSkillsMP

Build, revise, or manipulate a fixed-layout PDF (report, guide, one-pager, printable document). Use whenever a build task's artifact kind is pdf, a document build's output format is pdf, or the task reads, merges, splits, crops, or fills an existing PDF, including fillable AcroForms. Covers authoring the print-CSS HTML source, rendering, the geometry and validation gates, existing-PDF manipulation and form filling, and delivery under workspace/your_files.

source

artifact-document

SkillSkillsMP

Create, read, edit, or manipulate Word documents (.docx) and Word templates (.dotx). Use whenever a build task's artifact kind is document with the default docx output, or the task mentions a Word doc, .docx, or .dotx, extracts or reorganizes content from one, inserts or replaces images, does find-and-replace in one, or works with tracked changes (redlines) or comments. Covers python-docx generation, raw OOXML editing of existing files, document structure and formatting, and render verification. Not for PDFs, spreadsheets, or Google Docs.

source

maintaining-docker-hub

SkillSkillsMP

Use when working on Trilium's published Docker images on Docker Hub or GHCR rather than on the Dockerfiles — "how many pulls does the image get?", "why is the Docker Hub repository so big?", "clean up old tags", "delete untagged images", "which tags do we publish?", the legacy repositories (triliumnext/notes, zadam/trilium) and their mirroring, the main-docker.yml copy-to-Docker-Hub step, mirror-legacy-docker.yml, Docker Hub categories, stars or the overview. Includes hub.mjs (stats, tag listing/deletion, the manifest inventory and a safe untagged-image purge, all dry-run by default) and the storage model that decides how a cleanup works. Do NOT use for building or running the image locally (see the Developer Guide's Docker page).

source

UI/UX 设计智能库

SkillSkillsMP

面向 web、移动端与桌面的 UI/UX 设计智能库。在设计、构建、审查或修复界面时使用,覆盖页面、组件、设计体系、无障碍、交互、响应式布局、字体排印、色彩、图表以及特定技术栈的 UI 实现。本地可检索数据:79 种风格(可检索,50 种在用)、192 套产品配色与推理画像、74 组字体搭配、119 条 UX 准则、105 个图标、17 个 GSAP 预设、25 种图表类型与 22 个技术栈。

source

mermaid-diagrams

SkillSkillsMP

Comprehensive guide for creating software diagrams using Mermaid syntax. Use when users need to create, visualize, or document software through diagrams including class diagrams (domain modeling, object-oriented design), sequence diagrams (application flows, API interactions, code execution), flowcharts (processes, algorithms, user journeys), entity relationship diagrams (database schemas), C4 architecture diagrams (system context, containers, components), state diagrams, git graphs, pie charts, gantt charts, or any other diagram type. Triggers include requests to "diagram", "visualize", "model", "map out", "show the flow", or when explaining system architecture, database design, code structure, or user/application flows.

source

sms(短信营销)

SkillSkillsMP

当用户想规划、搭建或优化短信/MMS 营销时使用,包括欢迎流程、购物车挽回、购后触达、流失挽回、促销群发或验证码类事务短信。用户提到 SMS marketing、text message campaigns、SMS sequence、SMS automation、abandoned cart text、post-purchase SMS、Klaviyo SMS、Postscript、Attentive、Twilio、A2P 10DLC、TCPA、SMS compliance、short code、toll-free SMS、MMS campaign、“要不要做短信”或“SMS vs email”等场景时也适用。邮件序列见 emails,短信文案框架见 copywriting,采集手机号的弹窗见 popups。

source

Browser Use Cloud 文档

SkillSkillsMP

Browser Use Cloud(托管版浏览器自动化 API)文档参考。凡涉及 Cloud REST API(v2、v3 或 v4)、browser-use-sdk(Python 或 TypeScript)、X-Browser-Use-API-Key 鉴权、cloud sessions、浏览器 profile、profile 同步、CDP WebSocket 连接、隐身浏览器、住宅代理、验证码处理、webhook、workspace、skill 市场、liveUrl 流、定价,以及集成模式(聊天界面、subagent、把浏览器工具接入已有 agent)时使用。n8n/Make/Zapier 集成、云上 Playwright/Puppeteer/Selenium、1Password 密钥库相关问题也适用。不适用于开源 Python 库(Agent、Browser、Tools 配置)——那些请用 open-source skill。

source

mobile-release

SkillSkillsMP

Full Folo mobile release from dev to the stores. Decides between a store release and an OTA-only release, drafts the changelog, bumps the version and opens the release PR to mobile-main, verifies the PR's CI-built Android package and the iOS build on a simulator along with every change in the release, merges the PR, watches the build or OTA workflows, publishes the GitHub release, submits the iOS build for App Store review and the Android build for Google Play review, and drafts the announcement post and promo video. Use when the user asks to release, ship or publish the mobile app.

source

change-impact

SkillSkillsMP

Perform evidence-backed impact analysis before changing code, data, interfaces, or governance documents, then compare the planned impact with the actual diff after implementation. Covers call paths, data and schema, API contracts, tests, documentation, ADRs, deployment, migration, and rollback. Use for cross-module or high-risk changes, database migrations, authentication, public interfaces, blast-radius questions, pre-change checks, and post-implementation alignment.

source

change-impact

SkillSkillsMP

Perform evidence-backed impact analysis before changing code, data, interfaces, or governance documents, then compare the planned impact with the actual diff after implementation. Covers call paths, data and schema, API contracts, tests, documentation, ADRs, deployment, migration, and rollback. Use for cross-module or high-risk changes, database migrations, authentication, public interfaces, blast-radius questions, pre-change checks, and post-implementation alignment.

source

常见问题

GitHub MCP 需要 OAuth 还是 Token?

本地 stdio 部署用个人访问令牌(推荐细粒度 PAT)最简单;多用户托管场景才需要 GitHub App / OAuth。环境变量名见资源详情页。

AI 审查会漏掉安全问题吗?

会。它是第一道过滤而非替代:语义类缺陷检出不错,但供应链、越权逻辑仍需专业审计与人工评审兜底。

私有仓库安全吗?

取决于模型提供方与令牌权限。企业内网可选本地模型 + 只读令牌;令牌务必设置过期与最小 scope,并定期轮换。

配套安装与配置教程

相关场景