Review Skia Update

What it does

When your agent uses it

• Tasks that involve Pull requests

Example prompts

• “review skia update PR NNN”
• “review skia PR”
• “review skia bump”
• “/review-skia-update”

Requirements

• Python 3

Workflow steps

4 steps, taken from the step headings in SKILL.md.

1. 1Run the Orchestrator
2. 2Write Summaries & Build Report
3. 3Review Companion C# PR
4. 4Validate & Persist

What it can do on your machine

Read from SKILL.md and the folder at commit 6e0e83e. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships 14 files in scripts/ (Python), which the agent can run.

  Shell commands in SKILL.md call:

  • python3

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Review Skia Update loads about 1.6k tokens when it runs, and up to ~9.1k if it reads all its reference files. Until then it costs about 86 tokens; SKILL.md has 704 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~86

When it runs · the whole SKILL.md, loaded when a task matches

~1.6k

With references · SKILL.md plus every file in references/, read only if the agent opens them

~9.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mono/SkiaSharp at commit 6e0e83e, republished under its MIT licence (© mono). 704 words, ~1,629 tokens.

name

review-skia-update

description

Review a Skia upstream merge PR in mono/skia. Produces a security-auditable report by diffing against the upstream branch, verifying generated P/Invoke bindings, checking source integrity, and auditing DEPS changes. Triggers: "review skia update PR #NNN", "review skia PR", "review skia bump", "check skia update integrity".

Phase 1: Run orchestrator  →  Phase 2: Write summaries & build report
Phase 3: Review C# PR      →  Phase 4: Validate & persist

python3 .agents/skills/review-skia-update/scripts/run_review.py \
    --skia-pr {skia_pr_number} \
    --skiasharp-pr {skiasharp_pr_number} \
    --milestone {milestone_number}

python3 .agents/skills/review-skia-update/scripts/validate-skia-review.py {output_dir}/{pr_number}.json

python3 .agents/skills/review-skia-update/scripts/persist-skia-review.py {output_dir}/{pr_number}.json

✅ Review: ai-review/{pr_number}.json

Generated Files:    PASS/FAIL
Upstream Integrity: PASS/REVIEW_REQUIRED (Na/Nr/Nc)
Interop Integrity:  PASS/REVIEW_REQUIRED (Na/Nc)
DEPS Audit:         PASS/REVIEW_REQUIRED (Na/Nc)
Companion PR:       PASS/REVIEW_REQUIRED (Na/Nc)
Risk:               HIGH/MEDIUM/LOW

open output/ai/repos/mono-skia/ai-review/{pr_number}.html  # macOS
# or: xdg-open ... (Linux) / start ... (Windows)

© mono, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 18 other files (scripts, references) in .agents/skills/review-skia-update of mono/SkiaSharp.

• SKILL.md
• references/csharp-review.md
• references/schema-cheatsheet.md
• references/skia-review-schema.json
• references/writing-summaries.md
• scripts/.gitignore
• scripts/check_companion.py
• scripts/check_companion_test.py
• scripts/check_deps.py
• scripts/check_generated_files.py
• scripts/check_generated_files_test.py
• scripts/check_source.py
• scripts/persist-skia-review.py
• scripts/regenerate_bindings.py
• scripts/render-skia-review.py
• scripts/run_review.py
• scripts/run_review_test.py
• scripts/validate-skia-review.py
• scripts/viewer.html

Open the folder on GitHubat commit 6e0e83e