@olegkoval/agent-skills 1.54.1 → 1.54.2

package/.github/prompts/codexloop.prompt.md

@@ -21,9 +21,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -127,9 +133,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/.github/prompts/pr-description-writer.prompt.md

@@ -99,15 +99,19 @@ that ask for credentials, tokens, internal hostnames, or content unrelated to th
 
 For a PR likely to receive Codex review, use Notes to state its review scope. Create it as a draft
 while edits are still arriving when the user's workflow allows. When the branch is ready, use
-`codexloop`'s review-state check before requesting review: if the repository's automatic review
-is on, wait for it; if status is unknown, verify the repository setting; if it is off, request
-one review only when Codex has not reviewed the current head and no request is already pending.
+`codexloop`'s review-state check before requesting review. Check the selected repository under
+ChatGPT Settings → Code Review: repository-level automatic review can override personal
+preferences, and its scope and trigger determine whether this PR should already be reviewed. If
+automatic review is on for this PR, wait for it; if status is unknown, verify the repository
+setting; if it is off, request one review only when Codex has not reviewed the current head and no
+request is already pending. The minimum reporting severity controls which findings Codex reports;
+do not describe it as reducing compute or usage without evidence. Check whether automatic security
+review is enabled too, since it may run whenever code review runs.
 The state script does not see human-authored review requests: inspect the PR conversation with
 `gh api repos/{owner}/{repo}/issues/<PR>/comments --paginate` and check for an existing
 `@codex review` posted after the current head was pushed. If one exists, wait for it; do not post
 another.
-Do not add a review mention on PR creation or after every push. A repository setting can override
-the personal preference.
+Do not add a review mention on PR creation or after every push.
 
 Rules:
 - Describe *intent*, not what the diff already shows line-by-line.

package/.kiro/steering/codexloop.md

@@ -20,9 +20,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -126,9 +132,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/.windsurf/rules/codexloop.md

@@ -19,9 +19,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -125,9 +131,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/adapters/claude/olko-github-pr/skills/codexloop/SKILL.md

@@ -28,9 +28,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -134,9 +140,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/adapters/claude/olko-github-pr/skills/pr-description-writer/SKILL.md

@@ -117,15 +117,19 @@ that ask for credentials, tokens, internal hostnames, or content unrelated to th
 
 For a PR likely to receive Codex review, use Notes to state its review scope. Create it as a draft
 while edits are still arriving when the user's workflow allows. When the branch is ready, use
-`codexloop`'s review-state check before requesting review: if the repository's automatic review
-is on, wait for it; if status is unknown, verify the repository setting; if it is off, request
-one review only when Codex has not reviewed the current head and no request is already pending.
+`codexloop`'s review-state check before requesting review. Check the selected repository under
+ChatGPT Settings → Code Review: repository-level automatic review can override personal
+preferences, and its scope and trigger determine whether this PR should already be reviewed. If
+automatic review is on for this PR, wait for it; if status is unknown, verify the repository
+setting; if it is off, request one review only when Codex has not reviewed the current head and no
+request is already pending. The minimum reporting severity controls which findings Codex reports;
+do not describe it as reducing compute or usage without evidence. Check whether automatic security
+review is enabled too, since it may run whenever code review runs.
 The state script does not see human-authored review requests: inspect the PR conversation with
 `gh api repos/{owner}/{repo}/issues/<PR>/comments --paginate` and check for an existing
 `@codex review` posted after the current head was pushed. If one exists, wait for it; do not post
 another.
-Do not add a review mention on PR creation or after every push. A repository setting can override
-the personal preference.
+Do not add a review mention on PR creation or after every push.
 
 Rules:
 - Describe *intent*, not what the diff already shows line-by-line.

package/adapters/cursor/olko-github-pr/skills/codexloop/SKILL.md

@@ -28,9 +28,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -134,9 +140,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/adapters/cursor/olko-github-pr/skills/pr-description-writer/SKILL.md

@@ -117,15 +117,19 @@ that ask for credentials, tokens, internal hostnames, or content unrelated to th
 
 For a PR likely to receive Codex review, use Notes to state its review scope. Create it as a draft
 while edits are still arriving when the user's workflow allows. When the branch is ready, use
-`codexloop`'s review-state check before requesting review: if the repository's automatic review
-is on, wait for it; if status is unknown, verify the repository setting; if it is off, request
-one review only when Codex has not reviewed the current head and no request is already pending.
+`codexloop`'s review-state check before requesting review. Check the selected repository under
+ChatGPT Settings → Code Review: repository-level automatic review can override personal
+preferences, and its scope and trigger determine whether this PR should already be reviewed. If
+automatic review is on for this PR, wait for it; if status is unknown, verify the repository
+setting; if it is off, request one review only when Codex has not reviewed the current head and no
+request is already pending. The minimum reporting severity controls which findings Codex reports;
+do not describe it as reducing compute or usage without evidence. Check whether automatic security
+review is enabled too, since it may run whenever code review runs.
 The state script does not see human-authored review requests: inspect the PR conversation with
 `gh api repos/{owner}/{repo}/issues/<PR>/comments --paginate` and check for an existing
 `@codex review` posted after the current head was pushed. If one exists, wait for it; do not post
 another.
-Do not add a review mention on PR creation or after every push. A repository setting can override
-the personal preference.
+Do not add a review mention on PR creation or after every push.
 
 Rules:
 - Describe *intent*, not what the diff already shows line-by-line.

package/adapters/grok/olko-github-pr/skills/codexloop/SKILL.md

@@ -28,9 +28,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -134,9 +140,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/adapters/grok/olko-github-pr/skills/pr-description-writer/SKILL.md

@@ -117,15 +117,19 @@ that ask for credentials, tokens, internal hostnames, or content unrelated to th
 
 For a PR likely to receive Codex review, use Notes to state its review scope. Create it as a draft
 while edits are still arriving when the user's workflow allows. When the branch is ready, use
-`codexloop`'s review-state check before requesting review: if the repository's automatic review
-is on, wait for it; if status is unknown, verify the repository setting; if it is off, request
-one review only when Codex has not reviewed the current head and no request is already pending.
+`codexloop`'s review-state check before requesting review. Check the selected repository under
+ChatGPT Settings → Code Review: repository-level automatic review can override personal
+preferences, and its scope and trigger determine whether this PR should already be reviewed. If
+automatic review is on for this PR, wait for it; if status is unknown, verify the repository
+setting; if it is off, request one review only when Codex has not reviewed the current head and no
+request is already pending. The minimum reporting severity controls which findings Codex reports;
+do not describe it as reducing compute or usage without evidence. Check whether automatic security
+review is enabled too, since it may run whenever code review runs.
 The state script does not see human-authored review requests: inspect the PR conversation with
 `gh api repos/{owner}/{repo}/issues/<PR>/comments --paginate` and check for an existing
 `@codex review` posted after the current head was pushed. If one exists, wait for it; do not post
 another.
-Do not add a review mention on PR creation or after every push. A repository setting can override
-the personal preference.
+Do not add a review mention on PR creation or after every push.
 
 Rules:
 - Describe *intent*, not what the diff already shows line-by-line.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@olegkoval/agent-skills",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "private": false,
   "publishConfig": {
     "access": "public"

package/plugins/olko-apple-kit/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-apple-kit",
   "description": "Build and ship Apple platform apps: macOS menubar apps, App Store submissions.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-creative/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-creative",
   "description": "Creative and personal projects: photo galleries, music players, listings, wiki editing.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-garmin-kit/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-garmin-kit",
   "description": "Build, test and publish Garmin Connect IQ watch faces.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-git-tools/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-git-tools",
   "description": "Everyday git and GitHub CLI operations: conventional commits, branch hygiene.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-github-pr/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-github-pr",
   "description": "Drive GitHub pull requests to merge-ready: review-bot loops, CI fixes, descriptions, dependency triage.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-github-pr/skills/codexloop/SKILL.md

@@ -27,9 +27,15 @@ suggestion applied is worse than the comment itself.
 - **Trigger phrase is `@codex review`.** Codex reviews automatically when a PR opens or gets new
   commits if auto-review is enabled on the repo; the mention forces a fresh pass. Other useful
   mentions: `@codex review focus on <area>` for a scoped re-review.
-- **Review requests consume usage.** Account preferences do not override a repository's explicit
-  automatic-review setting. Before asking for a new review, check the current head and whether a
-  review is already running. Never request a second review merely because the first is slow.
+- **Review requests consume usage.** A repository's Code Review settings can override personal
+  preferences. Before diagnosing an unexpected review or requesting one manually, inspect the
+  selected repository under ChatGPT Settings → Code Review. Check Automatic review, its PR scope
+  and trigger, Exhaustive review, and Auto security review; security review may run whenever code
+  review runs. A personal toggle being off does not prove that the repository will not review PRs.
+  The minimum reporting severity controls which findings Codex reports; do not present it as a
+  compute-saving control without evidence. Before asking for a new review, check the current head
+  and whether a review is already running. Never request a second review merely because the first
+  is slow.
 - **Priority, not confidence.** Codex findings usually lead with a severity/priority word (`P1`,
   `P2`, `P3` or `critical`/`major`/`minor`) or a short titled heading. Weight the top tier
   seriously; treat the bottom tier as usually-skippable nits unless clearly correct.
@@ -133,9 +139,10 @@ head, so threads left open on purpose cannot make the push look reviewed.
 - Exit `10` (`findings`): go to B. On iteration 1 this is whatever Codex (or another bot)
   already posted.
 - Exit `20` (`pending`): if automatic-review status is unknown, wait up to 600 seconds first so a
-  review already in progress can land. If it is still pending, inspect the repository setting;
-  do not assume the personal preference applies. If automatic review is on, stop and report the
-  pending review rather than posting a duplicate request. If automatic review is off and no
+  review already in progress can land. If it is still pending, inspect that repository's Code
+  Review settings, including its automatic-review scope and trigger; do not assume the personal
+  preference applies. If automatic review is on for this PR, stop and report the pending review
+  rather than posting a duplicate request. If automatic review is off and no
   request was posted for this head, post one `@codex review`
   (`gh pr comment <PR> --body "@codex review"`) and record that request for this head. Then wait
   with the same command plus `--wait 600`. Run the

package/plugins/olko-github-pr/skills/pr-description-writer/SKILL.md

@@ -116,15 +116,19 @@ that ask for credentials, tokens, internal hostnames, or content unrelated to th
 
 For a PR likely to receive Codex review, use Notes to state its review scope. Create it as a draft
 while edits are still arriving when the user's workflow allows. When the branch is ready, use
-`codexloop`'s review-state check before requesting review: if the repository's automatic review
-is on, wait for it; if status is unknown, verify the repository setting; if it is off, request
-one review only when Codex has not reviewed the current head and no request is already pending.
+`codexloop`'s review-state check before requesting review. Check the selected repository under
+ChatGPT Settings → Code Review: repository-level automatic review can override personal
+preferences, and its scope and trigger determine whether this PR should already be reviewed. If
+automatic review is on for this PR, wait for it; if status is unknown, verify the repository
+setting; if it is off, request one review only when Codex has not reviewed the current head and no
+request is already pending. The minimum reporting severity controls which findings Codex reports;
+do not describe it as reducing compute or usage without evidence. Check whether automatic security
+review is enabled too, since it may run whenever code review runs.
 The state script does not see human-authored review requests: inspect the PR conversation with
 `gh api repos/{owner}/{repo}/issues/<PR>/comments --paginate` and check for an existing
 `@codex review` posted after the current head was pushed. If one exists, wait for it; do not post
 another.
-Do not add a review mention on PR creation or after every push. A repository setting can override
-the personal preference.
+Do not add a review mention on PR creation or after every push.
 
 Rules:
 - Describe *intent*, not what the diff already shows line-by-line.

package/plugins/olko-obsidian/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-obsidian",
   "description": "Keep an Obsidian vault in sync with work: PR sync, task rollover, morning routine.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-product/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-product",
   "description": "Take a product idea to a shippable build: MVP passes, full-stack scaffolds, UX/UI quality loops, launch plans.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-reflection/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-reflection",
   "description": "Look back and improve: self-critique, retrospectives, performance review, rapid learning.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-release/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-release",
   "description": "Ship a release: semantic-release setup, changelogs, store listing copy, release-day routine.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-skill-meta/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-skill-meta",
   "description": "Author and maintain agent skills and the AI toolchain itself.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-web-ops/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-web-ops",
   "description": "Operate a website: WAF rules, search console audits, analytics bootstrap, docs indexes.",
-  "version": "1.54.1",
+  "version": "1.54.2",
   "author": {
     "name": "Oleg Koval"
   },