Publish code review

Boundaries

Invoking this skill authorizes publishing a review to the resolved pull request. Retrospective review of a merged pull request is non-publishing unless separately authorized. This does not authorize changing code, editing the pull request or issue, adding labels, or merging. Use a gating event only when the user or repository workflow separately authorizes this identity to gate the merge. A caller that resolved a reviewing app distinct from the pull request's author carries an explicit gating authorization in its packet, and that authorization is what permits a gating event here; a review published under a reviewing app is not a self-review. A self-review always uses COMMENT.

This workflow is one-shot: finish without pausing for reviewer preferences. If review-code is not among the installed skills, stop with missing-dependency: review-code. review-bot is optional. Its absence falls back to the authenticated user, records the reason in the report, and withholds gating; it never produces a missing-dependency stop.

Inspect