agy-review-workflow

name	agy-review-workflow
description	Set up Antigravity workflow.
user-invocable	true
allowed-tools	["Read","Edit","Write","Bash"]

agy-review-workflow

[!IMPORTANT] Antigravity is permanently out of service (user directive, 2026-08-20), confirmed on a dispatched run that ended request failed (code 429): Your prepayment credits are depleted / Execution failed: model unreachable. This skill is kept as history, not as an option. Do not dispatch the workflow --- a dispatch burns a run and leaves a red check for a reviewer that cannot answer. For a cross-vendor second opinion use delegate-to-codex, the billed ChatGPT-plan CLI this corpus dispatches. Copilot stays requestable on the PR where the org's licensing reaches it. Tracked as ai-config#1776.

Sets up or edits the Google Antigravity PR review, security audit, and test generation workflow (antigravity-review.yml), which invokes the reusable antigravity-code-review.yml workflow from Morrison-Lab/gha.

Path: .github/workflows/antigravity-review.yml

Load-bearing pieces (don't "simplify" away)

1. Delegation to Morrison-Lab/gha reusable workflow

jobs:
  review:
    uses: Morrison-Lab/gha/.github/workflows/antigravity-code-review.yml@v2

The workflow delegates execution to Morrison-Lab/gha's reusable workflow, which executes Morrison-Lab/gha/antigravity-review@v2. This ensures updates, safety checks, and runner handling in gha are automatically shared across repos.

2. Required permissions

permissions:
  contents: read
  pull-requests: write
  issues: write
  id-token: write
  actions: read

• contents: read: Allows reading repository code and diffs.
• pull-requests: write: Grants permission to post review comments and verdicts on PRs.
• issues: write: Allows writing issue comments where required.
• id-token: write: Enables OIDC authentication where required.
• actions: read: Lets automated review agents inspect CI run status.

3. Concurrency management

concurrency:
  group: antigravity-review-${{ github.event.pull_request.number || inputs.pr_number || github.ref }}
  cancel-in-progress: true

cancel-in-progress: true cancels superseded runs on rapid sequential pushes, preventing API quota waste and review comment race conditions.

4. Secret propagation (GEMINI_API_KEY)

secrets:
  GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}

Antigravity uses the Gemini API. Ensure the target repo has GEMINI_API_KEY defined in repository or organization secrets (gh secret list).

5. Operational modes

Supported operational modes passed via inputs.mode:

• code-review (default): Performs an automated PR code review.
• security-audit: Runs targeted security inspection on modified code.
• test-generation: Generates suggested test cases for changed files.

6. Event-gated trigger policy

with:
  trigger-policy: ${{ github.event_name == 'pull_request' && 'on-push' || 'on-request' }}

• on-push: Automatically reviews PR updates on pull_request events (opened, synchronize, ready_for_review, reopened).
• on-request: Restricts review to manual execution via workflow_dispatch.

7. Fork & Dependabot safeguards

The underlying action (Morrison-Lab/gha/antigravity-review@v2) enforces guards so draft PRs, cross-repository (fork) PRs, and dependabot[bot] runs do not leak secrets or execute untrusted code.

Setting up in a new repo

1. Confirm GEMINI_API_KEY secret exists (gh secret list).
2. Write .github/workflows/antigravity-review.yml using the template below.
3. Push to main or open a PR to enable automated reviews.

Canonical Workflow Template

# Active caller for Morrison-Lab/gha's reusable Antigravity PR review workflow.
name: Antigravity Code Review

on:
  pull_request:
    types: [opened, synchronize, ready_for_review, reopened]

  workflow_dispatch:
    inputs:
      pr_number:
        description: 'Pull request number to review'
        required: true
        type: string
      mode:
        description: 'Operational mode: code-review, security-audit, or test-generation'
        required: false
        default: 'code-review'
        type: choice
        options:
          - code-review
          - security-audit
          - test-generation

concurrency:
  group: antigravity-review-${{ github.event.pull_request.number || inputs.pr_number || github.ref }}
  cancel-in-progress: true

jobs:
  review:
    permissions:
       
       
       
       
       
     
    
           
             
       
               
    
         

Relationship to other skills

• claude-review-workflow -- sets up the Claude Code PR review workflow (claude-code-review.yml).
• claude-agent-workflow -- sets up the Claude Code agent workflow (claude.yml).
• config-ai -- routes AI capability and bot workflow requests to the appropriate skill.