briefbound-bug-review

briefbound-bug-review is a skill for Claude Code, Codex from CCDawn/codex-skills. It costs 60 tokens per session (1,104 once invoked), scanned A, original, MIT.

A debugging and repair guide for software problems. It uses the expected behavior, observed behavior, code, logs, tests, and recent changes to identify the cause and make a limited fix when requested.

In plain words
What is it for?
Use it for bugs, failing tests, build failures, regressions, abnormal behavior, and problems whose cause is not yet clear.
Why use it?
It helps separate the real cause of a failure from its visible symptoms and avoids making unrelated changes.

Skill for Claude CodeCodex

Written for Claude Code and Codex: shipped in a Claude Code plugin, but also agents/openai.yaml present.

Part of the briefbound-skills plugin — 30 skills shipped together

Good fit Use it for bugs, failing tests, build failures, regressions, abnormal behavior, and problems whose cause is not yet clear.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ccdawn/codex-skills/briefbound-bug-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add CCDawn/codex-skills --skill briefbound-bug-review
Clone the repo
git clone --depth 1 https://github.com/CCDawn/codex-skills

Made for: Claude Code, Codex.

Or install briefbound-skills, the plugin that ships this one along with the rest of its 30 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for briefbound-bug-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/ccdawn/codex-skills/briefbound-bug-review/github.svg)](https://agentmods.dev/skills/ccdawn/codex-skills/briefbound-bug-review)
Your own site
<a href="https://agentmods.dev/skills/ccdawn/codex-skills/briefbound-bug-review"><img src="https://agentmods.dev/badge/skills/ccdawn/codex-skills/briefbound-bug-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for briefbound-bug-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/ccdawn/codex-skills/briefbound-bug-review"><img src="https://agentmods.dev/badge/skills/ccdawn/codex-skills/briefbound-bug-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 60 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,104 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00060 $0.01104
Opus 5 $0.00030 $0.00552
Sonnet 5 $0.00012 $0.00221
Haiku 4.5 $0.00006 $0.00110

Measured 9d ago against content hash ed4c7125d74a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

briefbound-bug-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/engineering/briefbound-bug-review/SKILL.md · 62 lines

What it actually says

Briefbound Bug Review

目标

直接承接 bug 诊断与契约内修复:先用证据定位根因,再做最小修复和风险相称的验证。不要求展示固定阶段、长检查表或完整思维过程。

Briefbound task contract

  • Context Boundary: 预期行为、实际症状、失败命令/日志、相关代码与测试、允许修改面和非目标。
  • Output Contract: 根因状态、证据链、最小修复或下一 probe、影响范围、验证结果和剩余风险。
  • Allowed Action: 用户要求修复且边界清楚时可直接读取、复现、修改和验证;只要求审查时保持只读。
  • Success Evidence: 失败可复现或有等价证据,根因与修复存在因果联系,目标验证通过且未越界。
  • Stop Condition: 缺少必要对象/权限、根因仍不稳定且写入会扩大误改、需要破坏性动作、需求冲突或风险越过当前授权。
  • Route Out: 契约内修复、root-cause-tracingbriefbound-performance-engineeringbriefbound-planningbriefbound-development-cleanupbriefbound-pr-reviewbriefbound-router 或 BLOCKED。

统一调用契约

  • 只处理 Briefbound task contract 范围;不匹配时回 briefbound-router 或更具体 owner,复合任务不吞其他 owner。
  • 用户可见内容默认中文,完成只报状态、产出、证据和剩余风险;代码、命令、路径、错误原文、API/协议、skill 名和枚举保留原样;Route Out 仅以 Briefbound task contract 为准,末行写 下一步建议: <一个具体动作>

调试契约

  1. 写清 Expected / Actual / Scope,先读本地可得的代码、日志、失败测试和近期 diff。
  2. 优先复用现有失败测试或稳定复现;无法直接运行时,用调用链、状态变化或日志建立最窄证据链。
  3. 定位 owning surface,沿数据流或控制流追到最早错误来源。来源藏在深层链路时才加载 root-cause-tracing
  4. 可直接确认的 N+1、循环 I/O、重复计算等明显低效留给当前 owner;已观察故障、正确性回归或根因不明才由本 skill 诊断;可测性能问题路由 briefbound-performance-engineering
  5. 标记根因:CONFIRMED / HYPOTHESIS / ENVIRONMENT / TEST_ISSUE / REQUIREMENT_MISMATCH。只有 CONFIRMED 才进入行为修复;其他状态继续低风险 probe 或路由正确 owner。
  6. 用户已授权修复且根因、边界、回滚和验证清楚时,直接做最小修复;不为流程形式停下确认。
  7. 运行能证明因果关系的窄验证,再按影响面决定是否扩展。区分实现失败、测试意图过期、环境失败和需求不一致。

Bug 测试锚点

Bug 修复不转交 TDD owner。已有失败测试或稳定复现直接作为 RED;若回归风险显著且没有自动化证据,在当前 owner 内补一个最小行为测试,确认它因目标缺陷失败后修复并得到 GREEN。局部、可逆且现有验证足够时直接修复,不为形式制造 RED。

测试只证明已确认的预期行为,不替代根因诊断。测试意图过期时标记 TEST_ISSUE,需求不一致时标记 REQUIREMENT_MISMATCH,不得为了 GREEN 固化旧约束。

流程重量

简单、局部、可逆问题直接修复并验证,不 planning、拆分或创建 worktree。只有真实设计分叉、跨系统迁移或边界不稳才进入 briefbound-planning;多文件或复杂调用链本身不升级流程。

输出

普通修复只需汇报:根因 / 修改 / 验证 / 剩余风险 / 下一步建议。只读审查或阻塞时再补:

Bug 判断:
- 根因状态:
- 关键证据:
- 影响范围:
- 建议动作:
- 停止条件:
下一步建议: <一个具体动作>

不得为了让测试通过而削弱正确行为,也不得在根因仍是猜测时堆叠补丁。

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 62 lines · 60 tokens per session scan A ed4c7125d74a

Subscribe to this mod's changes

briefbound-bug-review is a skill published in the GitHub repository CCDawn/codex-skills (4 stars, last pushed 26d ago), licensed MIT. It adds 60 tokens to every session and 1,104 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.