Home / Skills / review-renovate
review-renovate
Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with existing workflow configurations. Use when a Renovate PR updates GitHub Actions in .github/workflows/.
Why this score
This repo hosts 10 skills, so its 9,522 stars are split between them (about 952 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit ab5013a38705, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Prompts that use GitHub
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onereview-renovate backnotprop/plannotator · Skill | 79 | ★ 9.5k | ≈88 always | 16d ago |
| apply-renovate-prs sivaprasadreddy/sivalabs-agent-skills · Skill Also for GitHub | 64 | ★ 189 | ≈22 always | 23d ago |
| review-code NVIDIA-NeMo/DataDesigner · Skill Also for GitHub | 73 | ★ 2.3k | ≈23 always | 16d ago |
| git-pr-review huangwb8/skills · Skill Also for GitHub | 56 | ★ 50 | ≈30 always | 18d ago |
| review-prs googleapis/mcp-toolbox · Skill Also for GitHub | 85 | ★ 17k | ≈22 always | 16d ago |
| review-pr questdb/questdb · Skill Also for GitHub | 83 | ★ 17k | ≈23 always | 16d ago |