CONNECTIONS.md

Code Review Skill Connections

This document records the connections that were preserved when code-review was extracted into this repository.

Primary Skill

• skills/code-review/SKILL.md

Internal Connections

The main skill depends directly on these in-repo resources:

• skills/code-review/references/review-lanes.md
• skills/code-review/references/review-procedures.md
• skills/code-review/references/request-review-template.md
• skills/code-review/references/security-best-practices/
• skills/code-review/references/rust-blockchain-critic/
• skills/code-review/agents/openai.yaml

Bundled Cross-Skill Dependencies

These are separate skills, but they are part of the working graph for code-review:

• skills/instruction-surface-audit/SKILL.md
  • used by instruction-review workflows and policy/glob/artifact coverage checks
• skills/runtime-rollout-matrix/SKILL.md
  • used when review work also has rollout, lifecycle, replay, metrics, or multi-layer runtime risk

Optional Tooling Dependency

• code-review-graph
  • not vendored here, but installed by install.sh
  • expected by the graph lane as an external CLI/tooling dependency
  • useful for blast-radius analysis and minimal review-set selection

Upstream Integration Points Not Bundled

These were intentionally documented rather than copied because they belong to the host workspace, not to the skill itself:

• host-level keyword routing that maps phrases like code review, security review, cleanup, or deslop to code-review
• host AGENTS.md guidance that declares code-review as the unified review surface
• review-handoff or subagent prompts that reuse request-review-template.md

Extraction Boundary

The goal of this repository is to keep the code-review skill portable without pretending to be the whole original workspace. Everything above is either bundled here or explicitly called out so the host can reattach the missing integration points on purpose.