github-pr-reviewlisted

# SKILL.md — github-pr-review A portable Code Review Skill that reviews GitHub Pull Requests and, when authorized, publishes findings and a final Approve/Request Changes decision. It behaves like an external senior reviewer — **not** an implementation-fixing agent, a merge agent, or a repository-lifecycle owner. **Use it** on an existing GitHub Pull Request (by URL or number) — someone else's or the reviewer's own. For local changes, use `local-code-review`. **Compatibility:** requires Git; active review additionally requires authenticated GitHub access with sufficient review permissions. ## Safety boundaries (read before invoking) The entry-contract rules, in brief — **section 7** is the full contract for review-action authority; the canonical policies own the rest. - **Analysis vs. GitHub mutation authority are separate**, governed by one canonical publication mode: `PASSIVE` (default, non-mutating), `SEMI` (same decision path, non-mutating preview), or `ACTIVE` (submits). An explicit `ACTIVE` request is itself sufficient authorization to publish — no second activation phrase required — subject to the unchanged self-review, reviewer-independence, GitHub-permission, and HEAD guarantees. See section 7 and [`policies/review-action-authorization.md`](policies/review-action-authorization.md). - **Self-review is allowed; self-approval is not.** Authorship — or a shared controlling authority (alternate account/token, bot, service account, GitHub App, nested