Repository navigation
Add Google Dev Kit plugin - #264
Merged
Merged
Conversation
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
Reviewer's GuideAdds a provenance-aware Google Cloud/Gemini developer plugin composed of seven live-documentation-driven skills, ten scoped MCP endpoints, safety-oriented workflow guidance, deterministic package validation, marketplace metadata, and dedicated CI packaging. Sequence diagram for deterministic Google Dev Kit packagingsequenceDiagram
actor Maintainer
participant CI as UbuntuSlimCI
participant Validator as package_plugin.py
participant Source as PluginSource
participant Archive as PortableArchive
Maintainer->>CI: push or pull request
CI->>Validator: unittest discover
Validator->>Source: validate manifests, MCP endpoints, skills, and SVG assets
Source-->>Validator: package contents
Validator->>Archive: package(output)
Archive-->>CI: deterministic ZIP and SHA-256
CI-->>Maintainer: validation and packaging result
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Contributor
|
This pull request does not currently match the merge queue conditions, so it cannot be queued from here. The box comes back if it matches again. |
![kanarek-companion[bot]](https://avatars.githubusercontent.com/in/4472094?s=60&v=4){kind=small}
 |
|
Overall Grade |
Security Reliability  Complexity Hygiene |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| C# |  |
Oct 6, 2026 12:25a.m. | Review ↗ |
| C & C++ | |
Oct 6, 2026 12:25a.m. | Review ↗ |
| JavaScript | |
Oct 6, 2026 12:25a.m. | Review ↗ |
| Kotlin | |
Oct 6, 2026 12:25a.m. | Review ↗ |
| Python |  |
Oct 6, 2026 12:25a.m. | Review ↗ |
| Shell | |
Oct 6, 2026 12:25a.m. | Review ↗ |
| Swift | |
Oct 6, 2026 12:25a.m. | Review ↗ |
| Secrets | |
Oct 6, 2026 12:25a.m. | Review ↗ |
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
![deepsource-io[bot]](https://avatars.githubusercontent.com/in/16372?s=60&v=4){kind=small}
Contributor
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configuration
📝 WalkthroughWalkthrough新增 Google Dev Kit 插件，并注册七项 Google Cloud 与 Gemini 工作流技能及十个 MCP 端点。新增的打包脚本校验插件配置和资源，生成确定性 ZIP 归档。测试覆盖主要校验和打包行为。GitHub Actions 工作流运行测试并构建归档。 Sequence Diagram(s)sequenceDiagram
participant CLI as 命令行入口
participant Package as package()
participant Stage as stage()
participant Validate as validate()
participant ZIP as ZIP归档
CLI->>Package: 传入输出路径
Package->>Stage: 暂存插件源文件
Stage->>Validate: 校验暂存内容
Validate-->>Stage: 返回校验结果
Stage-->>Package: 返回暂存文件与兼容配置
Package->>ZIP: 按固定属性写入归档
Package-->>CLI: 返回SHA-256与字节数
Priority: ➖ Normal Change: Feature Merge Risk: 🔵 Low · up to The plugin is mergeable with bounded risk, but its packaging check should reject skill icons outside the skill directory, and the CI Actions should be pinned before relying on the workflow. Security Architecture ReviewSecurity architecture risk: 🔵 Low · up to The new build workflow executes actions referenced by mutable tags, creating a bounded supply-chain risk. Read-only repository permissions, disabled credential persistence, and no publishing or deployment steps limit the demonstrated impact. The cloud integrations require separately authorized connections; their runtime enforcement and one documentation endpoint’s transport compatibility remain unverified. Retained concerns
Security review detailsSecurity Blast Radius
Security Findings and Attack Paths
Trust Boundaries and Controls
Resilience and Maintainability Implications
Hardening Proposals
🚥 Pre-merge checks | ✅ 4✅ Passed checks (4 passed)
✨ Finishing Touches✨ Simplify code
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 七项技能排成行， Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 2
ℹ️ Review info
⚙️ Run configuration
- Configuration used: Organization UI
- Review profile: CHILL
- Plan: Advanced
- Run ID:
1c7b1c9c-5841-43b1-ae47-3da4ad6b53db
⛔ Files ignored due to path filters (8)
plugins/google-dev-kit/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/application-design-center/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/cloud-run/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/gcloud/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/gemini-agents-api/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/gemini-api/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/google-cloud-storage/assets/icon.svgis excluded by!**/*.svgplugins/google-dev-kit/skills/google-dev/assets/icon.svgis excluded by!**/*.svg
📒 Files selected for processing (37)
.agents/plugins/marketplace.json.github/workflows/google-dev-kit.ymlREADME.mdplugins/google-dev-kit/LICENSE.google-skills.txtplugins/google-dev-kit/LICENSE.txtplugins/google-dev-kit/README.mdplugins/google-dev-kit/THIRD_PARTY_NOTICES.mdplugins/google-dev-kit/assets/ICON-NOTICE.txtplugins/google-dev-kit/mcp.jsonplugins/google-dev-kit/plugin.jsonplugins/google-dev-kit/requirements.txtplugins/google-dev-kit/scripts/package_plugin.pyplugins/google-dev-kit/skills/application-design-center/SKILL.mdplugins/google-dev-kit/skills/application-design-center/agents/openai.yamlplugins/google-dev-kit/skills/application-design-center/references/workflow.mdplugins/google-dev-kit/skills/cloud-run/SKILL.mdplugins/google-dev-kit/skills/cloud-run/agents/openai.yamlplugins/google-dev-kit/skills/cloud-run/references/workflow.mdplugins/google-dev-kit/skills/gcloud/SKILL.mdplugins/google-dev-kit/skills/gcloud/agents/openai.yamlplugins/google-dev-kit/skills/gcloud/references/mcp.mdplugins/google-dev-kit/skills/gcloud/references/safety.mdplugins/google-dev-kit/skills/gemini-agents-api/SKILL.mdplugins/google-dev-kit/skills/gemini-agents-api/agents/openai.yamlplugins/google-dev-kit/skills/gemini-agents-api/references/control-plane.mdplugins/google-dev-kit/skills/gemini-api/SKILL.mdplugins/google-dev-kit/skills/gemini-api/agents/openai.yamlplugins/google-dev-kit/skills/gemini-api/references/sdk-routing.mdplugins/google-dev-kit/skills/google-cloud-storage/SKILL.mdplugins/google-dev-kit/skills/google-cloud-storage/agents/openai.yamlplugins/google-dev-kit/skills/google-cloud-storage/references/safety.mdplugins/google-dev-kit/skills/google-cloud-storage/references/workflows.mdplugins/google-dev-kit/skills/google-dev/SKILL.mdplugins/google-dev-kit/skills/google-dev/agents/openai.yamlplugins/google-dev-kit/skills/google-dev/references/documentation-routing.mdplugins/google-dev-kit/skills/google-dev/references/mcp-catalog.mdplugins/google-dev-kit/tests/test_package.py
Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.
🐤 Kanarek · 🟣 merged
Agents, Kanarek, Documentation, Plugins · 45 files |
Contributor
Author
|
@coderabbitai configuration |
Contributor
|
Configuration used: Organization UI CodeRabbit configuration# Source: Organization UI (base)
language: zh-CN
# Source: Organization UI (base)
tone_instructions: Concise
# Source: Organization UI (base)
early_access: true
# Source: Organization UI (base)
enable_free_tier: true
# Source: Organization UI (base)
inheritance: false
reviews:
# Source: Organization UI (base)
profile: chill
# Source: Organization UI (base)
request_changes_workflow: false
# Source: Organization UI (base)
allow_author_approval: true
# Source: Organization UI (base)
high_level_summary: false
# Source: Organization UI (base)
high_level_summary_instructions: ''
# Source: Organization UI (base)
high_level_summary_placeholder: '@coderabbitai summary'
# Source: Organization UI (base)
high_level_summary_in_walkthrough: false
# Source: Organization UI (base)
auto_title_placeholder: '@coderabbitai'
# Source: Organization UI (base)
auto_title_instructions: ''
# Source: Organization UI (base)
review_status: false
# Source: Organization UI (base)
review_details: false
# Source: Organization UI (base)
review_progress: true
# Source: Organization UI (base)
commit_status: true
# Source: Organization UI (base)
fail_commit_status: false
# Source: Organization UI (base)
collapse_walkthrough: true
# Source: Organization UI (base)
changed_files_summary: false
# Source: Organization UI (base)
sequence_diagrams: true
# Source: Organization UI (base)
estimate_code_review_effort: false
# Source: Organization UI (base)
assess_linked_issues: true
# Source: Organization UI (base)
related_issues: false
# Source: Organization UI (base)
related_prs: true
# Source: Organization UI (base)
suggested_labels: true
# Source: defaults
labeling_instructions: []
# Source: defaults
mutually_exclusive_groups: {}
# Source: Organization UI (base)
auto_apply_labels: true
# Source: Organization UI (base)
suggested_reviewers: true
# Source: Organization UI (base)
auto_assign_reviewers: true
# Source: defaults
suggested_reviewers_instructions: []
# Source: Organization UI (base)
in_progress_fortune: true
# Source: Organization UI (base)
poem: true
# Source: Organization UI (base)
enable_prompt_for_ai_agents: false
# Source: defaults
path_filters: []
# Source: defaults
path_instructions: []
# Source: Organization UI (base)
abort_on_close: true
# Source: Organization UI (base)
disable_cache: false
slop_detection:
# Source: Organization UI (base)
enabled: true
# Source: Organization UI (base)
include_all_authors: false
auto_review:
# Source: Organization UI (base)
enabled: true
# Source: Organization UI (base)
description_keyword: ''
# Source: Organization UI (base)
auto_incremental_review: true
# Source: Organization UI (base)
auto_pause_after_reviewed_commits: 5
# Source: defaults
ignore_title_keywords: []
# Source: defaults
labels: []
# Source: Organization UI (base)
drafts: false
# Source: defaults
base_branches: []
# Source: defaults
ignore_usernames: []
finishing_touches:
docstrings:
# Source: Organization UI (base)
enabled: false
unit_tests:
# Source: Organization UI (base)
enabled: false
simplify:
# Source: Organization UI (base)
enabled: true
autofix:
# Source: Organization UI (base)
enabled: true
fix_ci:
# Source: Organization UI (base)
enabled: true
resolve_merge_conflict:
# Source: Organization UI (base)
enabled: true
# Source: defaults
custom: []
pre_merge_checks:
# Source: Organization UI (base)
override_requested_reviewers_only: false
docstrings:
# Source: Organization UI (base)
mode: 'off'
# Source: Organization UI (base)
threshold: 30
title:
# Source: Organization UI (base)
mode: warning
# Source: Organization UI (base)
requirements: ''
description:
# Source: Organization UI (base)
mode: warning
issue_assessment:
# Source: Organization UI (base)
mode: warning
# Source: defaults
custom_checks: []
# Source: defaults
post_merge_actions: []
tools:
ast-grep:
# Source: Organization UI (base)
enabled: true
# Source: defaults
rule_dirs: []
# Source: defaults
util_dirs: []
# Source: Organization UI (base)
essential_rules: true
# Source: defaults
packages: []
shellcheck:
# Source: Organization UI (base)
enabled: true
ruff:
# Source: Organization UI (base)
enabled: true
markdownlint:
# Source: Organization UI (base)
enabled: true
github-checks:
# Source: Organization UI (base)
enabled: true
languagetool:
# Source: Organization UI (base)
enabled: true
# Source: defaults
enabled_rules: []
# Source: defaults
disabled_rules: []
# Source: defaults
enabled_categories: []
# Source: defaults
disabled_categories: []
# Source: Organization UI (base)
enabled_only: false
# Source: Organization UI (base)
level: default
biome:
# Source: Organization UI (base)
enabled: true
hadolint:
# Source: Organization UI (base)
enabled: true
swiftlint:
# Source: Organization UI (base)
enabled: true
phpstan:
# Source: Organization UI (base)
enabled: true
# Source: Organization UI (base)
level: default
phpmd:
# Source: Organization UI (base)
enabled: true
phpcs:
# Source: Organization UI (base)
enabled: true
golangci-lint:
# Source: Organization UI (base)
enabled: true
yamllint:
# Source: Organization UI (base)
enabled: true
gitleaks:
# Source: Organization UI (base)
enabled: true
trufflehog:
# Source: Organization UI (base)
enabled: true
checkov:
# Source: Organization UI (base)
enabled: true
tflint:
# Source: Organization UI (base)
enabled: true
detekt:
# Source: Organization UI (base)
enabled: true
eslint:
# Source: Organization UI (base)
enabled: true
e18e:
# Source: Organization UI (base)
enabled: true
flake8:
# Source: Organization UI (base)
enabled: true
fbinfer:
# Source: Organization UI (base)
enabled: true
# Source: Organization UI (base)
enable_java: false
fortitudeLint:
# Source: Organization UI (base)
enabled: true
rubocop:
# Source: Organization UI (base)
enabled: true
buf:
# Source: Organization UI (base)
enabled: true
regal:
# Source: Organization UI (base)
enabled: true
actionlint:
# Source: Organization UI (base)
enabled: true
zizmor:
# Source: Organization UI (base)
enabled: true
pmd:
# Source: Organization UI (base)
enabled: true
clang:
# Source: Organization UI (base)
enabled: true
cppcheck:
# Source: Organization UI (base)
enabled: true
vale:
# Source: Organization UI (base)
enabled: true
verilator:
# Source: Organization UI (base)
enabled: true
opengrep:
# Source: Organization UI (base)
enabled: true
semgrep:
# Source: Organization UI (base)
enabled: true
circleci:
# Source: Organization UI (base)
enabled: true
clippy:
# Source: Organization UI (base)
enabled: true
sqlfluff:
# Source: Organization UI (base)
enabled: true
squawk:
# Source: Organization UI (base)
enabled: true
trivy:
# Source: Organization UI (base)
enabled: true
prismaLint:
# Source: Organization UI (base)
enabled: true
pylint:
# Source: Organization UI (base)
enabled: true
oxc:
# Source: Organization UI (base)
enabled: true
shopifyThemeCheck:
# Source: Organization UI (base)
enabled: true
luacheck:
# Source: Organization UI (base)
enabled: true
brakeman:
# Source: Organization UI (base)
enabled: true
dotenvLint:
# Source: Organization UI (base)
enabled: true
htmlhint:
# Source: Organization UI (base)
enabled: true
stylelint:
# Source: Organization UI (base)
enabled: true
checkmake:
# Source: Organization UI (base)
enabled: true
osvScanner:
# Source: Organization UI (base)
enabled: true
oasdiff:
# Source: Organization UI (base)
enabled: true
reactDoctor:
# Source: Organization UI (base)
enabled: true
presidio:
# Source: Organization UI (base)
enabled: true
blinter:
# Source: Organization UI (base)
enabled: true
smartyLint:
# Source: Organization UI (base)
enabled: true
emberTemplateLint:
# Source: Organization UI (base)
enabled: true
skillspector:
# Source: Organization UI (base)
enabled: true
psscriptanalyzer:
# Source: Organization UI (base)
enabled: true
chat:
# Source: Organization UI (base)
art: true
# Source: Organization UI (base)
allow_non_org_members: true
# Source: Organization UI (base)
auto_reply: true
integrations:
jira:
# Source: Organization UI (base)
usage: auto
# Source: Organization UI (base)
issue_template: ''
linear:
# Source: Organization UI (base)
usage: auto
knowledge_base:
# Source: Organization UI (base)
opt_out: false
web_search:
# Source: Organization UI (base)
enabled: true
code_guidelines:
# Source: Organization UI (base)
enabled: true
# Source: Organization UI (base)
filePatterns:
- '**/README.md'
- docs/**
learnings:
# Source: Organization UI (base)
scope: global
# Source: Organization UI (base)
approval_delay: 0
issues:
# Source: Organization UI (base)
scope: auto
jira:
# Source: Organization UI (base)
usage: auto
# Source: defaults
project_keys: []
# Source: defaults
excluded_project_keys: []
linear:
# Source: Organization UI (base)
usage: auto
# Source: defaults
team_keys: []
pull_requests:
# Source: Organization UI (base)
scope: global
mcp:
# Source: Organization UI (base)
usage: enabled
# Source: defaults
disabled_servers: []
# Source: Organization UI (base)
automatic_linking_mode: auto
# Source: Organization UI (base)
automatic_repository_linking: true
# Source: defaults
linked_repositories: []
code_generation:
docstrings:
# Source: Organization UI (base)
language: eo
# Source: defaults
path_instructions: []
unit_tests:
# Source: defaults
path_instructions: []
issue_enrichment:
auto_enrich:
# Source: Organization UI (base)
enabled: false
planning:
# Source: Organization UI (base)
enabled: true
auto_planning:
# Source: Organization UI (base)
enabled: true
# Source: defaults
labels: []
labeling:
# Source: defaults
labeling_instructions: []
# Source: Organization UI (base)
auto_apply_labels: true
|
gptomek
Bot
force-pushed
the
feat/google-dev-kit
branch
from
October 6, 2026 00:24
6ea0295 to
d2e6066
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a Google developer plugin modeled after OpenAI Dev Kit.
Summary by Sourcery
Add a validated Google Cloud and Gemini developer plugin with focused workflows, live documentation integrations, and reproducible packaging.
New Features:
Enhancements:
Build:
CI:
Documentation:
Tests: