Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cboone/agent-harness-plugins --skill address-reviewgit clone --depth 1 https://github.com/cboone/agent-harness-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cboone/agent-harness-plugins/address-review)<a href="https://agentmods.dev/skills/cboone/agent-harness-plugins/address-review"><img src="https://agentmods.dev/badge/skills/cboone/agent-harness-plugins/address-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cboone/agent-harness-plugins/address-review"><img src="https://agentmods.dev/badge/skills/cboone/agent-harness-plugins/address-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.02352 |
| Opus 5.5 | $0.00013 | $0.00941 |
| Sonnet 5.5 | $0.00007 | $0.00470 |
| Haiku 4.5 | $0.00003 | $0.00235 |
Grade A, and why
address-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Address Review
Parse a review document, extract actionable items, and work through them systematically.
Options
The user may provide these options inline:
- --dry-run: Parse and list items without making changes
- --skip <numbers>: Skip specific item numbers (comma-separated, e.g.,
--skip 2,5,8) - --commit-per-item: Commit after each item instead of grouping related fixes
Capabilities and authority
Use the tools this session actually offers. For a question, use a structured question tool when available in the active mode; otherwise present numbered choices and wait. In a noninteractive run, report the unresolved question and preserved state instead of choosing an answer. Tool names such as Write, Read, Glob and AskUserQuestion below are examples: perform the same file or question operation with the host's supported mechanism. Write a body file completely before issuing the command that reads it; never batch those dependent operations.
Prior user authorization carries through the workflow; add no confirmation merely because the harness differs. Host approvals, active Plan or read-only mode, writable roots and network policy still apply. Stop before a prohibited write or any step dependent on a blocked operation, preserve state, and report the exact command and restriction. Never bypass controls or claim an unrun step completed. Separate completed, skipped, blocked and failed work in the result. For invocation hints, render the named skill with the running harness's form: slash invocation in Claude Code, dollar mention or the skills selector in Codex. A mention is not a tool call; load composed skills from their advertised locations.
Parent Continuation Contract
Honor a supplied parent continuation block and its resume target. On success, return control to the parent without asking whether to continue. When a decision has no supplied answer, do not ask independently or guess: return Status: needs-decision, the question, available choices and preserved state. The parent asks or stops, then invokes this skill with an answer. For an in-progress merge or rebase, list conflicts and the applicable abort command; do not abort or discard work merely to return a result.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 16d ago Changed · +12 lines cf3aeeec95a1
- 1mo ago Changed · +1 lines 883fc972eb62
- 1mo ago Changed · -4 lines · -41 tokens per session cd68bc62ae9f
- 2mo ago Changed a50b3992c4e3
- 2mo ago First seen · 224 lines · 74 tokens per session scan A 6785efe6f3f0
address-review is a skill published in the GitHub repository cboone/agent-harness-plugins (2 stars, last pushed 2d ago), licensed MIT. It adds 33 tokens to every session and 2,352 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
address-review compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| address-reviewcboone/agent-harness-plugins | Skill | 2 | 2d ago | MIT | A | 33 | Claude Code |
| coding-standardsvibeeval/vibecosystem | Skill | 549 | 2d ago | MIT | A | 23 | Claude Code, Codex |
| review-preflightsonichi/sutando | Skill | 409 | today | MIT | A | 45 | Claude Code |
| fuck-over-engineeringvinta/hal-9000 | Skill | 143 | yesterday | MIT | A | 85 | Claude Code, Codex |
| audit-agents-skillsFlorianBruniaux/claude-code-plugins | Skill | 45 | 9d ago | MIT | A | 41 | Claude Code |
| pr-triageFlorianBruniaux/claude-code-plugins | Skill | 45 | 9d ago | MIT | A | 86 | Claude Code |
| sonarqubeFlorianBruniaux/claude-code-plugins | Skill | 45 | 9d ago | MIT | A | 14 | Claude Code |