ox: Skill for Claude Code

review-incoming-pr

You are the maintainer reviewing someone else's PR. Your job is a merge decision backed by an actual security + quality pass, not a rubber stamp and not a re-run of what CodeRabbit/Greptile already said. Two goals, in order: (1) protect customers and our own systems from a bad merge; (2) keep the contributor moving — small gaps we can fix ourselves should not block their PR.

The whole pipeline:

flowchart LR
  P[abort session<br/>review runs private] --> G[collect.sh<br/>context]
  G --> R[risk tier]
  R --> S[security pass]
  R --> Q[quality pass]
  S --> T[triage bot threads]
  Q --> T
  T --> D{decision}
  D -->|data-loss / authz / secret / RCE| B[BLOCK + escalate]
  D -->|correctness / design / large| C[request changes]
  D -->|correct & safe, only small polish| F[approve + fast-follow PR]
  D -->|clean| A[approve + auto-merge]
  B --> N[INTERNAL next steps<br/>never posted to PR]
  C --> N
  F --> N
  A --> N

Step 0 — privacy fence: discard this session's recording FIRST

Before you read a line of the diff, abort the active ox session recording. Reviewing a PR means enumerating how it could hurt customers or our own systems — our threat model, and where we're soft. That enumeration is exactly what must not leak into the ledger and sync to the team. So the whole review runs unrecorded.

• Invoke /ox-session-abort (it resolves the active agent + session). Under the hood that is ox agent <id> session abort — irreversible: it permanently discards the current session and uploads nothing to the ledger. Confirm with the human before aborting. Non-interactively, abort requires --force:

  ox agent <id> session abort --force   # drop --force in a terminal to get the y/N prompt
  

• After abort the recording no longer exists: do not add a SageOx-Session trailer to any commit or PR you open for this review.
• Escape hatch — if you're mid-other-work in this session and need the pre-review part kept, /ox-session-pause now and /ox-session-resume when the review is fully done instead; that excises only the review span. The default here is abort.