[kanywst]

--allowedTools is a closed list and did not include Read/Grep/Glob, so the reviewer could not open the README / CLAUDE.md its prompt tells it to read (the same workflow in kanywst/bellman logged 4 refused tool calls). Adds them, and prints each refused tool call in the report step. Changes the reviewer itself, so it cannot review this PR.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 9a18bc86-3636-4910-84da-73a154e4a87d

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[claude]

No findings. The added read tools and the denial logging are consistent with the workflow's stated intent, permissions stay least-privilege, and the logged output is single-line (tojson), so it cannot start a workflow command.