
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
reviewprompt
Advanced tools
Unified AI rules management CLI tool that generates configuration files for various AI development tools
A CLI tool that converts GitHub PR review comments into structured AI prompts, making it easier to address feedback using AI assistants.
[ai]
)[bot]
, [review]
, etc.npm install -g reviewprompt
pnpm add -g reviewprompt
yarn global add reviewprompt
ReviewPrompt requires GitHub authentication to access PR comments. Set up authentication using one of these methods:
repo
scopeexport GITHUB_TOKEN=your_token_here
If you have GitHub CLI installed and authenticated:
gh auth login
ReviewPrompt will automatically use your GitHub CLI credentials.
reviewprompt https://github.com/owner/repo/pull/123
This will:
[ai]
mentionreviewprompt https://github.com/owner/repo/pull/123 --interactive
Select specific comments to include in your prompt using an interactive interface.
Use custom mention patterns:
reviewprompt https://github.com/owner/repo/pull/123 --mention "[bot]"
reviewprompt https://github.com/owner/repo/pull/123 --mention "@custom"
reviewprompt https://github.com/owner/repo/pull/123 --clipboard
reviewprompt https://github.com/owner/repo/pull/123 --resolve
reviewprompt https://github.com/owner/repo/pull/123 --delete
reviewprompt <pr-url> [options]
Options:
-i, --interactive
- Run in interactive mode to select specific comments-r, --resolve
- Resolve comments after building prompt-d, --delete
- Delete comments after building prompt-m, --mention <mention>
- Custom mention to filter (default: [ai]
)-c, --clipboard
- Copy output to clipboardResolve comments containing the specified mention:
reviewprompt resolve <pr-url> [options]
Options:
-a, --all
- Resolve all comments without interactive mode-m, --mention <mention>
- Custom mention to filter (default: [ai]
)Delete comments containing the specified mention:
reviewprompt delete <pr-url> [options]
Options:
-a, --all
- Delete all comments without interactive mode-m, --mention <mention>
- Custom mention to filter (default: [ai]
)Add mention to PR comments: When reviewing code, add [ai]
to comments you want AI assistance with:
[ai] This function needs error handling for edge cases
Generate prompt: Run reviewprompt to collect and format these comments:
reviewprompt https://github.com/myorg/myproject/pull/456 --clipboard
Use with AI: Paste the generated prompt into your preferred AI assistant
Clean up: Resolve processed comments:
reviewprompt resolve https://github.com/myorg/myproject/pull/456 --all
Use different mentions for different team members or purposes:
# For senior dev review
reviewprompt https://github.com/myorg/myproject/pull/456 --mention "[senior]"
# For security review
reviewprompt https://github.com/myorg/myproject/pull/456 --mention "[security]"
# For performance optimization
reviewprompt https://github.com/myorg/myproject/pull/456 --mention "[perf]"
ReviewPrompt generates structured prompts with file context:
./src/utils/auth.ts:L15
Add input validation for the email parameter
./src/components/UserProfile.tsx:L45-L50
This component should handle loading states better
./src/api/users.ts:L23
Consider adding rate limiting to this endpoint
See CONTRIBUTING.md for development setup and contribution guidelines.
MIT - see LICENSE for details.
FAQs
Unified AI rules management CLI tool that generates configuration files for various AI development tools
We found that reviewprompt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.