review

Read-only — hard constraint

This skill analyzes and reports; it never mutates the repository, the PR/MR, or anything external. After you emit the merge recommendation, STOP.

Never — not for a real bug, not for a blocking defect, not even when there is no human reviewer and "someone has to fix it":

• edit, create, or delete files (no write/edit-style mutations);
• git add / commit / stash / reset, git checkout to discard changes, or git push;
• gh pr comment / review / edit / merge / create, or post or edit any PR/MR body, comment, or description;
• run any other write- or network-mutating shell command.

The only shell permitted is read-only inspection: git diff / git show / gh pr diff, grep / rg, and file reads — plus dispatching the review sub-agents. Resolving findings, fixing bugs, resolving merge conflicts, and "making the branch mergeable" are explicitly out of scope: a fixable defect is a finding to report (file:line + a one-line fix in the suggestion field), never a license to act.

Sub-agent contract

/contract

Skip for: lock files (package-lock.json, go.sum, yarn.lock), auto-generated files (*.generated.*), pure-docs diffs, vendored deps.

Resolve target → diff (inline). The review target argument is: $ARGUMENT (empty = review working-tree/HEAD changes). Map this argument to a diff source, then capture the diff text plus a one-line target descriptor for the triage header. Also capture the reviewed ref (branch HEAD SHA or equivalent) — this is required for citation verification later:

• --staged → git diff --staged; reviewed ref = git write-tree (snapshots the staged index to a throwaway tree so citations resolve against the staged content under review, not HEAD)
• --head or no arg → git diff HEAD; reviewed ref = git stash create (snapshots worktree + index to a throwaway commit so citations resolve against the content under review; empty output = no local changes → fall back to git rev-parse HEAD)
• arg matches ^https?://.*/pull/\d+ (GitHub/GitLab PR URL) → gh pr diff <url> (or glab mr diff); reviewed ref = head SHA from gh pr view <url> --json headRefOid -q .headRefOid; record PR title + base/head refs
• arg matches ^#?\d+$ (bare PR number, optionally #-prefixed) → resolve in current repo with gh pr diff <n>; reviewed ref = head SHA from gh pr view <n> --json headRefOid -q .headRefOid; if gh is unavailable or repo has no PR matching, abort with Asking (one question: which repo/PR)
• arg matches ^[0-9a-f]{7,40}$ (commit SHA) → git show <sha>; reviewed ref = <sha>
• arg matches a known ref (git rev-parse --verify <arg> succeeds) → git diff <merge-base>...<arg> against the repo's default branch; reviewed ref = git rev-parse <arg>
• arg is a path or *.diff/*.patch file → read file contents as the diff; reviewed ref = unknown (patch file — no live ref available)
• otherwise → abort with Asking naming the ambiguous arg