Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add bengous/claude-code-plugins/plugin install agents-bridgeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bengous/claude-code-plugins/adversarial-review)<a href="https://agentmods.dev/skills/bengous/claude-code-plugins/adversarial-review"><img src="https://agentmods.dev/badge/skills/bengous/claude-code-plugins/adversarial-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bengous/claude-code-plugins/adversarial-review"><img src="https://agentmods.dev/badge/skills/bengous/claude-code-plugins/adversarial-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.01233 |
| Opus 5.5 | $0.00041 | $0.00493 |
| Sonnet 5.5 | $0.00020 | $0.00247 |
| Haiku 4.5 | $0.00010 | $0.00123 |
Grade A, and why
adversarial-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Adversarial review of local changes
Codex tries to break confidence in a git change: it looks for the strongest reasons the change must not ship. The review is read-only. This skill edits no file; fixing a finding is a separate request.
The diff and the untracked files it lists go to OpenAI. Stop and ask when an untracked file looks like a secret or a dependency tree.
For a proposal that lives in the conversation, not on disk, use critique.
Workflow
-
Parse the arguments.
--base <ref>selects the branch diff against<ref>; without it, the target is the uncommitted work (staged, unstaged, untracked).-m <model>selects the Codex model. Everything else is the user's focus text, kept verbatim.<ref>and<model>go into commands inside single quotes, as written below. -
Check that the target is not empty. A Codex run on nothing wastes minutes, so stop here with the reason when a check fails.
- Uncommitted:
git status --short --untracked-files=allmust print at least one line. When it prints nothing, suggest--base <ref>. - Branch:
git rev-parse --verify --end-of-options '<ref>'must succeed, andgit diff --shortstat '<ref>...HEAD'must print a line. Also rungit status --short: when it prints lines, tell the user that this uncommitted work is outside the review.
- Uncommitted:
-
Create the run directory. Use the printed path literally in every later step: shell variables do not survive between Bash calls.
"${CLAUDE_PLUGIN_ROOT}/scripts/codex-run.ts" new review -
Write the prompt with the Write tool to
<dir>/prompt.md. User text goes in this file, never inline in the shell command: quotes and backticks break it.Run an adversarial code review. Read ${CLAUDE_PLUGIN_ROOT}/skills/adversarial-review/prompt.md and follow it exactly. ## Target uncommitted <- or: base <ref> ## Focus from the user <focus text verbatim, or: none>
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed · -18 lines ad24b870b891
- 1mo ago First seen · 125 lines · 102 tokens per session scan A 4297d4090756
adversarial-review is a skill published in the GitHub repository bengous/claude-code-plugins (5 stars, last pushed today), licensed MIT. It adds 102 tokens to every session and 1,233 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
verify-change
A change-checking skill that reviews code differences and checks whether related documentation, tests, and records were updated.
verify-module
A module-checking skill that scans a project’s folders, code, and documentation. It expects each module to include a README.md and DESIGN.md, which explain how the module is used and why it was designed that way.
verify-quality
A code-quality checker that measures complexity, size, naming, and common code smells. It reports problems such as duplicated code, unused code, and overly long functions.
planning
ONLY for coordinated multi-artifact work: multiple workflows with dependencies, shared data-table schema/migration across tasks, or the user explicitly asked to review a plan first. If create-tasks is not visible, load it via loadtool (search "create tasks"). Do NOT use for new one-off workflows, single-workflow…
criticism-self-criticism
A structured review method for examining completed work, criticism, and repeated mistakes. It focuses on specific evidence, causes, effects, and practical improvements.
flow-next-impl-review
Carmack-level implementation review of changes via the configured backend. Use when asked to review code or a diff in a flow-next repo.