Skill UI

Use the Composio CLI to automate the entire Pull Request review and Continuous Integration (CI) triage process for GitHub and GitLab. This tool fetches code diffs, analyzes failure logs, posts detailed inline review comments, and iteratively patches and re-runs CI checks until the code passes, significantly enhancing code quality and developer efficiency.

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.

A comprehensive playbook for optimizing the entire lifecycle of pull requests. It guides developers through systematic pre-flight cleanup, critical self-audits, local test verification, and structuring high-signal PR descriptions to ensure code quality and fast maintainer approval.

This skill generates a highly customized code review checklist for any pull request. Instead of using a generic template, it adapts the review depth and specific checks based on the target language (e.g., Python, TypeScript), the nature of the change (e.g., bug fix, refactor), and the associated risk level (low, medium, high, critical). It ensures comprehensive coverage, guiding reviewers to focus on critical areas like security, correctness, and architectural integrity.

This skill automates the creation of high-quality, structured pull request descriptions. By analyzing git diffs, commit lists, or raw changes, it generates comprehensive sections covering the summary, motivation, specific changes, detailed testing procedures, and crucial reviewer guidance. Use it to ensure every code change is fully documented for effective peer review.

This skill guides the systematic triage of project issues and external pull requests (PRs). It moves development items through a defined state machine using roles (e.g., bug, enhancement) and states (e.g., ready-for-agent, wontfix). The process involves context gathering, cross-codebase verification, deep questioning (grilling), and generating comprehensive, agent-ready briefs or marking them for human implementation.

This skill enables users to upload local images, such as screenshots or before-and-after comparisons, directly to GitHub using the GitHub CLI. It bypasses the lack of a public image upload API by mimicking the web UI's internal attachment flow, generating canonical `user-attachments` URLs. These URLs can then be seamlessly embedded into Pull Requests, Issues, or comments from the terminal.

A portable CI gate designed to enforce Core Web Vitals (LCP, CLS, INP) budgets and category score floors on production frontend builds. It integrates into CI pipelines to automatically block pull requests if the performance metrics fall below defined Google standards, ensuring consistently fast and reliable user experiences.

This skill provides comprehensive pull request (PR) code reviews that go beyond simple syntax checks. It aggressively surfaces deep-rooted decay risks, architectural design smells, and maintainability issues. Findings are reported using a structured Symptom → Source → Consequence → Remedy framework, drawing insights from classic engineering principles. Ideal for reviewing complex or crucial code modules.

This advanced skill performs code review by simulating the documented engineering philosophies of historical figures (e.g., Linus Torvalds, Steve Jobs, Ken Thompson). It moves beyond generic AI findings by grounding critiques in specific, citable principles—such as 'good taste' or 'customer experience.' Ideal for high-stakes PRs, architectural reviews, and ensuring deep, pre-submission code hardening.

This skill performs a comprehensive, read-only, multi-agent review of a git diff or file scope. It launches four specialized sub-agents—covering Regression, Security, Performance, and Contracts—in parallel. The main agent then aggregates, filters, and summarizes critical findings, ensuring the code change is robust, secure, and maintainable. Ideal for pre-commit or Pull Request review workflows.

This tool reviews code changes (diffs) against existing, accepted Architecture Decision Records (ADRs). It detects potential compliance violations, architectural drift, and non-adherence to established team decisions. Use it before merging Pull Requests or during periodic audits to ensure the code respects agreed-upon architectural constraints and patterns.