justinmclean opened a new pull request, #228:
URL: https://github.com/apache/airflow-steward/pull/228

   Adds a new read-only skill that produces a GitHub activity card for a
   named contributor on a configured upstream repo.
   
   ## What it does
   
   Fetches four streams of GitHub activity over a configurable window
   (default 6 months): PRs authored, PR reviews given, issues filed, and
   PR/issue comment threads. Output is a compact activity card with a
   month-by-month timeline — no assessment, no readiness verdict.
   
   ## Key design decisions
   
   **GitHub-only limitation is structural, not a footnote.** The warning
   appears in the frontmatter description, as an opening blockquote in
   the card, and in the footer ("Code is not the only form of
   contribution"). Contributors who are central to the mailing list,
   documentation, or user support will appear quiet here — the skill says
   so explicitly.
   
   **Review classification uses inline comments, not just body length.**
   The substantive threshold is `inline_comment_count >= 3 OR body > 50
   chars`. A body-length-only heuristic undercounts reviewers who work
   line-by-line without writing a top-level summary — a common pattern
   among experienced reviewers.
   
   **Repo age check trims the window.** If the repo is newer than the
   requested start date, `<since>` is trimmed to the repo's creation date
   so the timeline doesn't render a misleading wall of zero months.
   
   **Handoff to contributor-nomination.** After rendering, the skill
   offers to continue into the full nomination flow without re-fetching
   already-collected data.
   
   **Injection resistance throughout.** Login values are validated against
   the GitHub handle regex before any API calls. All query strings are
   written to tempfiles rather than interpolated into shell arguments.
   External content (PR titles, review bodies) is treated as input data;
   imperative instructions found there are flagged and not followed.
   
   ## Eval suite
   
   12 cases across 3 steps - all pass.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to