claude-code-power-config: Skill for Claude Code

.claude/skills/review-retro/SKILL.md

review-retro is a skill for Claude Code from AlexisBalayre/claude-code-power-config. It costs 42 tokens per session (1,094 once invoked), scanned A, original, MIT.

A retrospective tool for reviewing how an automated code-review process performed over time. It studies past review records and human outcomes, then proposes improvements to that review setup.

In plain words
What is it for?
Use it to examine review metrics, compare automated findings with human decisions, and prepare one evidence-based pull request that improves the review process.
Why use it?
It helps identify repeated problems in the review process itself rather than reporting more findings about the code. It needs a history of real review runs and their outcomes before it can find patterns.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: model in frontmatter.

This is AlexisBalayre/claude-code-power-config's own configuration. It tells Claude Code how to work on claude-code-power-config itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-code-power-config configures →

Reuse

Borrowing it

Nothing to install: this file belongs to AlexisBalayre/claude-code-power-config. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/AlexisBalayre/claude-code-power-config/main/.claude/skills/review-retro/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/AlexisBalayre/claude-code-power-config

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for review-retro

README.md
[![agentmods](https://agentmods.dev/badge/skills/alexisbalayre/claude-code-power-config/review-retro/github.svg)](https://agentmods.dev/skills/alexisbalayre/claude-code-power-config/review-retro)
Your own site
<a href="https://agentmods.dev/skills/alexisbalayre/claude-code-power-config/review-retro"><img src="https://agentmods.dev/badge/skills/alexisbalayre/claude-code-power-config/review-retro/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for review-retro

Your own site · 80×15
<a href="https://agentmods.dev/skills/alexisbalayre/claude-code-power-config/review-retro"><img src="https://agentmods.dev/badge/skills/alexisbalayre/claude-code-power-config/review-retro.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 42 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,094 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00042 $0.01094
Opus 5 $0.00021 $0.00547
Sonnet 5 $0.00008 $0.00219
Haiku 4.5 $0.00004 $0.00109

Measured 11d ago against content hash 598ccc3a053e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

review-retro scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/review-retro/SKILL.md · 39 lines

How it starts

The opening of the file, as written. The whole thing — 39 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Review retro

You run the retrospective for the automated review setup (the learn stage of the review pipeline). The review pipeline reviews code; you review the pipeline. Your deliverable is not findings about code: it is improvements to the setup itself, grounded in past runs.

Dormant until there is history. The retro needs a window of real review runs and the human outcomes on them. Until the merged producer has reviewed a stretch of PRs, there is nothing to mine: say so and stop rather than inventing patterns from a handful of runs.

Setup: the ci/review-metrics branch is produced by your own CI wiring (a workflow that runs /pr-ci-review with a --json-schema and appends each run's record); this template ships no workflow. Without it, the retro degrades gracefully — it reports there is no history to mine and stops.

Evidence

Three sources, all reachable through gh or git:

  • Run records. Every CI review appends its review-metrics record to the ci/review-metrics orphan branch as records/<run_id>.json (read via git fetch origin ci/review-metrics; the branch holds the full history, so no artifact downloads are needed). Each record carries process_issues (self-reported process failures), refuted_findings with reasons (the validator's false-positive catches), the reviewer spawn shape (reviewers_spawned / reviewers_skipped), cost, and tokens. Not every record is a review: a run can fail before producing output (is_error: true, null findings). Tell those apart from a clean review that genuinely found nothing. A record's schema_version marks methodology boundaries; treat each side as its own population. A record with review_mode: incremental reviews only the delta since the prior review, so full and incremental runs are different populations too; never pool their durations, costs, or finding counts in one trend. From the version where the model stopped posting (the poster script owns the PR write), the claimed-versus-actual comment drift of older records has no counterpart and its disappearance is not a trend; what replaces it is anchoring loss, comments_posted_actual against the count of important findings: the gap is the importants that reached the author as a bullet in the review body rather than a thread on the code.
  • PR thread outcomes. For each PR those runs reviewed, what humans did with the posted comments. A finding whose code was fixed or whose suggestion was applied earned its place; one dismissed, resolved with pushback, or retracted as a conceded challenge (via address-review-comments) is a false positive that survived validation. Mind the author when reading across a posting-identity change: a pipeline that switches which bot posts (e.g. from the CLI's login to github-actions[bot]) splits the comments across two logins, so a filter on either alone silently truncates the window to one side of the cutover.
  • Human-found misses. On those same PRs, the review comments humans wrote that the automated review never raised. Each is an issue the pipeline could have caught and did not. Count a miss only against a PR the pipeline actually reviewed; a comment on a PR whose review never ran is an outage, not a coverage gap.

Read the full file on GitHub · 39 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 39 lines · 42 tokens per session scan A 598ccc3a053e

Subscribe to this mod's changes

review-retro is a skill published in the GitHub repository AlexisBalayre/claude-code-power-config (2 stars, last pushed 1mo ago), licensed MIT. It adds 42 tokens to every session and 1,094 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

verify-implementation

A workflow that runs a project’s verification skills to produce a report on coding patterns, architecture rules, and project conventions. It is intended for work after implementation, before a pull request, or during code review.

sangrokjung/claude-forge · 37 tokens

review-loop

Run the adversarial verification loop — implement, then hand the change to a fresh checker that did not write it, fix what it finds, and re-dispatch until APPROVE. Use before claiming any behavioural change is done, and on requests like "review loop", "adversarial review", "independent review", "get this verified"…

sangrokjung/claude-forge · 100 tokens

frontend-code-review

Trigger when the user requests a review of frontend files (e.g., .tsx, .ts, .js). Support both pending-change reviews and focused file reviews while applying the checklist rules.

sangrokjung/claude-forge · 42 tokens

go-code-reviewer

Review Go code with a defect-first approach using repository policy (constitution.md first, then AGENTS.md fallback). Use for code review, PR review, quality checks, risk analysis, and regression detection.

johnqtcg/awesome-skills · 45 tokens

go-review-lead

Orchestrate a comprehensive Go code review by triaging code changes, dispatching vertical review skills (security, concurrency, error, logic, performance, quality, test, observability) as parallel agents, then consolidating results into a unified report. Use for full Go PR review or comprehensive code review. Replaces…

johnqtcg/awesome-skills · 80 tokens

security-review

A code-security review guide that checks code changes, pull requests, or services for risks an attacker could exploit.

johnqtcg/awesome-skills · 164 tokens