Borrowing it
Nothing to install: this file belongs to Piyush8296/claude-workspace. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Piyush8296/claude-workspace/main/.claude/commands/code-quality.mdgit clone --depth 1 https://github.com/Piyush8296/claude-workspaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/piyush8296/claude-workspace/code-quality)<a href="https://agentmods.dev/commands/piyush8296/claude-workspace/code-quality"><img src="https://agentmods.dev/badge/commands/piyush8296/claude-workspace/code-quality/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/piyush8296/claude-workspace/code-quality"><img src="https://agentmods.dev/badge/commands/piyush8296/claude-workspace/code-quality.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00010 | $0.00429 |
| Opus 5.5 | $0.00004 | $0.00172 |
| Sonnet 5.5 | $0.00002 | $0.00086 |
| Haiku 4.5 | $0.00001 | $0.00043 |
Grade A, and why
code-quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Code Quality Review
Review code quality in: $ARGUMENTS
Instructions
1. Identify target files
Find all .ts and .tsx files in the target path. Exclude node_modules, dist, .next, and generated files (*.generated.*, *.d.ts).
2. Run automated checks
# Lint
npx eslint --no-error-on-unmatched-pattern $ARGUMENTS
# Type check
npx tsc --noEmit
# Format check (don't fix, just report)
npx prettier --check $ARGUMENTS
3. Manual review checklist
For each file, verify:
- No TypeScript
anytypes (useunknownwith type guards) - No type assertions without
// SAFETY:comment - Error handling: all
catchblocks surface feedback to user - Loading states:
isPending && !datapattern, not bareloading - Empty states: every list has an explicit empty state
- Mutations: triggers disabled during pending,
onErrorshows toast - Accessibility: semantic HTML, alt text, keyboard support
- No inline styles for layout — use Tailwind/CSS modules
- Functions under 50 lines, components under 250 lines
- Imports: no circular dependencies, no deep barrel re-exports
4. Report findings
Organize by severity:
CRITICAL (must fix before merge)
- Security vulnerabilities, data loss risks, logic errors
WARNING (should fix)
- Convention violations, accessibility gaps, missing error handling
SUGGESTION (consider improving)
- Naming, readability, minor performance gains
Include file:line references and example fixes for each finding.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 58 lines · 10 tokens per session scan A 8b6327f4b767
code-quality is a command published in the GitHub repository Piyush8296/claude-workspace (2 stars, last pushed 6mo ago), licensed MIT. It adds 10 tokens to every session and 429 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
assemble-team
Assemble a pre-built agent team for parallel work - review, feature, debug, cross-platform, full-stack, or research.
sm-buff
You usually don't run buff directly — run sm sail. sm sail drives the whole PR to green and calls buff watch / triage for you, stopping only when it needs you to act (see /sm-sail). Reach for sm buff here only for surgical work: inspecting a specific failure, or resolving a single review thread when sail has parked on…
sm-scour
Run slop-mop's comprehensive pre-PR sweep for this repository.
pr
Open a Pull Request on GitHub following team conventions. Draft by default.
review-branch
Review an existing branch holistically before merging — blast radius, conventions, security, and spec compliance.
review
Adversarial staff-level review of a System Design Doc. Interrogates the 10 staff questions, finds cost and failure risks, returns a verdict. Sensors and evals gate.