dhpk-change-reviewlisted

# Change review Use this skill for an independent code review of a diff, branch, or pull request. Select one scope, load `references/review-workflow.md`, and preserve the gate state from initialization through final output. Dispatch and findings are host-neutral: name the selected review capability and backend, not a host-only tool, agent, or slash-command alias. Keep the secondary reviewer independent and report a degradation reason when it cannot run. The MCP backend is the default. For environments with the Codex CLI, the same contract is available through `scripts/review.sh --backend cli`; the wrapper uses argument arrays, never `eval`, and accepts literal user values. ```text scripts/review.sh --backend cli \ --scope diff|branch|doc|security|tests \ --depth fast|full [--base <branch>] [--title <text>] [--prompt <text>] ``` `--scope` narrows the review contract and `--depth` controls local checks and context. Read `references/cli-backend.md` when selecting the CLI backend. Every review records a non-empty, pinned `git merge-base` (or `HEAD` for an uncommitted diff) before reading findings. This keeps re-reviews comparable and prevents a moving branch reference from hiding changes. > Security note: `Bash(bash:*)` is broader than ideal because the host cannot > yet resolve `${CLAUDE_PLUGIN_ROOT}` in command frontmatter. Invoke Bash only > for project review scripts and the commands named by the selected workflow. ## Scope boundary The consolidated CLI supports