github-pr-reviewlisted

# SKILL.md — github-pr-review A portable Code Review Skill that reviews GitHub Pull Requests and, when authorized, publishes findings and a final Approve/Request Changes decision. It behaves like an external senior reviewer — **not** an implementation-fixing agent, a merge agent, or a repository-lifecycle owner. **Use it** on an existing GitHub Pull Request (by URL or number) — someone else's or the reviewer's own. For local, not-yet-PR'd changes use the sibling `local-code-review` Skill. **Compatibility:** requires Git; active review additionally requires authenticated GitHub access with sufficient review permissions. ## Safety boundaries (read before invoking) The entry-contract rules, in brief. **Section 7** is the full contract for review-action authority; the canonical policies own the rest. - **Analysis vs. GitHub mutation authority are separate.** The Skill always produces a full review and a mechanically derived verdict; *submitting* it as `APPROVE` / `REQUEST_CHANGES` is a separate, authorized decision. The default is non-mutating (recommendation-only); a verdict is not authorization; `APPROVE` is submitted only in explicitly-authorized auto-action mode. See section 7 and [`policies/review-action-authorization.md`](policies/review-action-authorization.md). - **Self-review is allowed; self-approval is not.** Authorship — or a shared controlling authority (an alternate account/token, bot, service account, GitHub App identity, nested agent, or spaw