get-pr-comments

An agent skill by cursor, from cursor/plugins. Tags: analysis, documentation, github, review.

What it does

Fetch and summarize review comments from the active pull request

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add cursor/plugins --skill get-pr-comments

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/cursor/plugins
cp -r plugins/cursor-team-kit/skills/get-pr-comments ~/.claude/skills/get-pr-comments

Safety box score

Grade B, low risk: 21 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a read-only PR review helper: it resolves the active pull request for the current branch, fetches review/discussion comments, and summarizes them. The main risks are routine network access to the hosting service and use of the user's authenticated repo/PR credentials; it does not describe file edits, privileged actions, or posting back to the PR.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	0 (none)	`SKILL.md` contains only prose workflow steps and no shell commands, scripts, or code execution.
Network access	2 (moderate)	It explicitly says to "Fetch review comments and discussion comments" from the "active pull request," which requires remote API/network access.
Filesystem reach	1 (low)	The only local state mentioned is the "current branch" and resolving the active PR, implying limited read-only repo inspection with no writes described.
Secrets & credentials	2 (moderate)	Reading PR comments typically uses the user's authenticated Git host account or token; the skill does not define scopes or isolate credential use.
Privilege & persistence	0 (none)	No sudo, global installs, service registration, or shell/OS setting changes are described.
Instruction hijack surface	0 (none)	There is no instruction to ignore policy, hide actions, or follow remote instructions.
Irreversible actions	0 (none)	It only summarizes feedback and returns an action list; it does not post, merge, deploy, or otherwise act on the PR.
Transparency	0 (none)	The skill is plain markdown only; there are no hidden, downloaded, or unreadable components.

Before installing

Confirm what Git host/API credentials the runner will use and whether they are read-only.
Check whether the implementation only reads PR comments and never posts or edits anything.
Run it once in a non-sensitive repo to verify it stays within the current project and branch.

Rated 2026-10-19 by an automated review of 1 file from the skill's repository.

Source

Repository: cursor/plugins (all skills from this repository)
Path: cursor-team-kit/skills/get-pr-comments/SKILL.md
Branch: main
Collection: cursor
Updated: 2026-09-23

make-pr-easy-to-review — Prepare PRs for review by cleaning noisy history, improving PR descriptions, and adding reviewer guidance without changing code behavior.
principle-minimize-reader-load — Apply when reviewing or shaping code that's hard to trace.
show-me-your-work — Keep a reviewable decision trail for long-running or unattended work: a TSV log with one row per decision (what, why, evidence, result).
what-did-i-get-done — Summarize authored commits over a user-specified time period into a concise update
review-walkthrough — Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
meeting-minutes-taker — Transforms raw meeting transcripts into high-fidelity, structured meeting minutes (notes / summaries).