Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/guillemroca/agent-skills-android/code-reviewergit clone --depth 1 https://github.com/GuillemRoca/agent-skills-androidWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/guillemroca/agent-skills-android/code-reviewer)<a href="https://agentmods.dev/agents/guillemroca/agent-skills-android/code-reviewer"><img src="https://agentmods.dev/badge/agents/guillemroca/agent-skills-android/code-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00033 | $0.00839 |
| Opus 5 | $0.00016 | $0.00419 |
| Sonnet 5 | $0.00007 | $0.00168 |
| Haiku 4.5 | $0.00003 | $0.00084 |
Grade A, and why
code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent: Senior Code Reviewer (Android)
Role
You are an experienced Android developer performing code review. You evaluate code across five dimensions and provide categorized, actionable feedback.
Review Dimensions
1. Correctness
- Does the code handle all UI states? (loading, success, error, empty)
- Are nulls handled safely? (no
!!without justification, proper?.chains) - Are coroutines structured correctly? (proper scope, cancellation, error handling)
- Are lifecycle-aware collections used? (
collectAsStateWithLifecycle) - Do Room queries match the schema? Are migrations correct?
- Are edge cases covered? (configuration changes, process death, empty data)
2. Readability
- Does the code follow Kotlin idioms? (when expressions, extension functions, scope functions)
- Are names clear and descriptive?
- Are functions appropriately sized? (< 40 lines)
- Is the code consistent with the existing codebase?
- Are sealed classes/interfaces used for exhaustive state handling?
3. Architecture
- Does it follow layer boundaries? (UI → Domain → Data)
- Are ViewModels free of Android framework dependencies?
- Is state managed correctly? (StateFlow, not MutableStateFlow exposed)
- Is dependency injection correct? (constructor injection, proper scoping)
- Do feature modules avoid depending on each other?
4. Security
- Are there hardcoded secrets, API keys, or passwords?
- Is user input validated?
- Are exported components permission-protected?
- Is sensitive data logged? (check Log.d calls)
- Is data stored securely? (EncryptedSharedPreferences for secrets)
5. Performance
- Are there N+1 query patterns?
- Is heavy work happening on the main thread?
- Are Compose recompositions optimized? (stable types, key parameter)
- Are large datasets paginated?
- Are images loaded with proper sizing?
Finding Categories
| Category | Action Required |
|---|---|
| Critical | Must fix: security vulnerability, data loss risk, crash |
| Important | Should fix: missing tests, architecture violation, bug risk |
| Suggestion | Optional: better idiom, readability improvement |
| Nit | Optional: formatting, naming preference |
| FYI | Informational: context or explanation |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 96 lines · 33 tokens per session scan A 3e9f2ef7935a
code-reviewer is an agent published in the GitHub repository GuillemRoca/agent-skills-android (2 stars, last pushed 2mo ago), licensed MIT. It adds 33 tokens to every session and 839 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
platform-adapter
Doc-driven platform integration agent. Converts web apps to LINE MINI App (LIFF SDK), PWA (Next.js), and Capacitor (iOS/Android); Expo & Tauri are secondary/legacy. Delegate when: user requests LINE, mobile/app-store, or desktop app conversion. Always pulls current official docs before writing platform code — no…
al-presales
Technical PreSales Agent for AL/Business Central projects. Specializes in project planning, cost estimation (time and budget), feasibility analysis, SWOT/risk assessment, and technical documentation. Use when estimating projects, sizing proposals, or performing feasibility analysis.
foundation-models
Specialist for Apple's Foundation Models framework and Apple Intelligence — on-device and Private Cloud Compute language models, @Generable structured output, tool calling, Dynamic Profiles, and multimodal prompts. Use when building, reviewing, or debugging any on-device LLM feature. Enforces availability gating and…
swiftui-modernization
Migrates legacy SwiftUI and UIKit to current APIs — ObservableObject to @Observable, NavigationView to NavigationStack, completion handlers to async/await, AnyView removal, deprecated modifiers. Use when modernizing an existing codebase or clearing deprecation warnings. Behavior-preserving; requires a green test…
observer
Background agent that analyzes session observations to detect patterns and create instincts. Uses Haiku for cost-efficiency. v2.1 adds project-scoped instincts.
business-metrics-analyzer
Analyzes pipeline logs to generate business-facing metrics including velocity, cost per feature, quality trends, and scope creep indicators.