Borrowing it
Nothing to install: this file belongs to AsiaOstrich/EngramGraph. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/AsiaOstrich/EngramGraph/main/.agents/skills/code-review-assistant/SKILL.mdgit clone --depth 1 https://github.com/AsiaOstrich/EngramGraphWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/asiaostrich/engramgraph/code-review-assistant)<a href="https://agentmods.dev/skills/asiaostrich/engramgraph/code-review-assistant"><img src="https://agentmods.dev/badge/skills/asiaostrich/engramgraph/code-review-assistant/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/asiaostrich/engramgraph/code-review-assistant"><img src="https://agentmods.dev/badge/skills/asiaostrich/engramgraph/code-review-assistant.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00125 | $0.01432 |
| Opus 5.5 | $0.00050 | $0.00573 |
| Sonnet 5.5 | $0.00025 | $0.00286 |
| Haiku 4.5 | $0.00013 | $0.00143 |
Grade A, and why
code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code Review Assistant | 程式碼審查助手
⚠️ Status: Reference（參考用，非可執行流程） — 程式碼審查流程協調（4 步驟序列、outcome gating）已於 2026-04-28 移至 adoption layer（XSPEC-095）。此處保留 8 大審查類別定義、BLOCKING/IMPORTANT/SUGGESTION/QUESTION/NOTE 前綴語意供參考。 Lifecycle orchestration has moved to the adoption layer (XSPEC-095); this document is reference-only. For enforced execution, use your adoption layer's toolchain.
Perform systematic code review using standardized checklists and comment prefixes.
執行系統性的程式碼審查，使用標準化的檢查清單和評論前綴。
Workflow | 工作流程
📖 以下為流程的參考結構，非可執行步驟；自動化／強制執行請用 adoption layer 工具鏈（XSPEC-095）。 The steps below are a reference structure, not an executable workflow.
- Identify changes - Get diff of files to review via
git difforgit show - Apply checklist - Check each review category systematically
- Generate report - Output findings with standard comment prefixes
- Summarize - Provide overall assessment and recommended actions
Review Categories | 審查類別
- Functionality - Does it work correctly? | 功能是否正確？
- Design - Is the architecture appropriate? | 架構是否合適？
- Quality - Is the code clean and maintainable? | 程式碼是否乾淨可維護？
- Readability - Is it easy to understand? | 是否容易理解？
- Tests - Is there adequate test coverage? | 測試覆蓋是否足夠？
- Security - Are there any vulnerabilities? | 是否有安全漏洞？
- Performance - Is it efficient? | 是否有效率？
- Error Handling - Are errors handled properly? | 錯誤處理是否妥當？
Comment Prefixes | 評論前綴
| Prefix | Meaning | Action | 動作 |
|---|---|---|---|
| BLOCKING | Must fix before merge | Required | 必須修復 |
| IMPORTANT | Should fix | Recommended | 建議修復 |
| SUGGESTION | Nice-to-have | Optional | 可選改善 |
| QUESTION | Need clarification | Discuss | 需要討論 |
| NOTE | Informational | FYI | 僅供參考 |
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago First seen · 95 lines · 125 tokens per session scan A 63ca01669685
code-review is a skill published in the GitHub repository AsiaOstrich/EngramGraph (3 stars, last pushed today), licensed MIT. It adds 125 tokens to every session and 1,432 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-16.
Other skills, from other repositories
memgraph-storage-reviewer
Review code changes in Memgraph's storage layer, including MVCC, concurrency patterns, WAL, recovery, DDL operations, index/constraint management, delta chains, and skip list operations. Invoke for pull requests or changes to src/storage/v2/.
code-knowledge-graph
Codebase'i knowledge graph olarak analiz et. Dependency, call graph, hotspot analizi.
kivgraph
Use Kivgraph's local MCP server to search symbols, read their source, and follow references, dependencies, cross-repository consumers and graph status in the indexed code graph.
mushroom
Live graph memory for agents — query and create entities, derive relationships by rule, explain why two things are associated, read the graph at a past commit, ask what a change would do, and answer as one role. Trigger on: memory, remember, recall, relationship, entity, association, why are X and Y related, as of…
understand-diff
Use when you need to analyze git diffs or pull requests to understand what changed, affected components, and risks.
pr-comment-evaluator
Use to judge whether a PR review comment sounds polite.