sdd-code-review

sdd-code-review is a skill for Claude Code from danweinerdev/claude-sdd-planner. It costs 28 tokens per session (1,160 once invoked), scanned A, original, MIT.

A code-review skill that compares implemented code with a plan, specification, or design. It checks for missing work, incorrect behavior, requirement violations, unnecessary complexity, and overlooked risks.

In plain words
What is it for?
Use it to review a code change against its intended design, test its correctness and safety, and identify gaps before merging.
Why use it?
It helps find where the implementation has drifted from the agreed plan or quietly misses important requirements.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the sdd-planner plugin — 34 skills, 8 agents shipped together

Good fit Use it to review a code change against its intended design, test…

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/danweinerdev/claude-sdd-planner/sdd-code-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add danweinerdev/claude-sdd-planner --skill sdd-code-review
Clone the repo
git clone --depth 1 https://github.com/danweinerdev/claude-sdd-planner

Made for: Claude Code.

Or install sdd-planner, the plugin that ships this one along with the rest of its 34 skills, 8 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sdd-code-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review.svg)](https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review)
Your own site
<a href="https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review"><img src="https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 28 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,160 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00028 $0.01160
Opus 5 $0.00014 $0.00580
Sonnet 5 $0.00006 $0.00232
Haiku 4.5 $0.00003 $0.00116

Measured 2d ago against content hash 62eeb34c5b38, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

sdd-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex-plugin/skills/sdd-code-review/SKILL.md · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Implementation Code Review

Resources

Before opening shared/..., follow symlinks in this loaded file's path, derive <plugin-root> from <plugin-root>/skills/<name>/SKILL.md, and read shared/agent-runtime.md, shared/path-resolution.md, shared/vcs-detection.md, shared/completion-evidence.md, and shared/review-lanes.md in place. Never copy or symlink plugin material into a working directory, target repository, or planning root.

Review Lanes

Use four independent lenses. When fresh non-inheriting contexts are available, dispatch all four in parallel; otherwise run affected lanes serially and record the accurate mixed or single-agent review mode. Do not claim independent corroboration for serial lanes.

Lens Dispatch identifier Inputs Purpose
Plan drift review_plan_drift Diff, plan, phase, prior debriefs Missing work, scope creep, approach drift
Quality review_quality Diff and code only Correctness, safety, maintainability, tests, needless complexity
Spec compliance review_spec_compliance Diff, specs, designs Requirements coverage and contract violations
Blind spots review_blind_spots Diff and changed-code context only Adversarial edge cases, production failures, security, concurrency

Do not pass plan, spec, or design material to the quality or blind-spot lanes. Use exactly these runtime-neutral identifiers when the runtime exposes a task name or description field; do not request an agent or model.

Synthesis Rules

  • Only independently run lanes can corroborate findings; serial lanes do not corroborate, including in mixed or single-agent review mode.
  • Surface lane disagreements with their evidence rather than silently resolving them in synthesis.
  • Label a finding raised only by the blind-spots lane as blind-spot-only.
  • Do not manufacture primary-agent findings in synthesis; consolidate only findings actually reported by a lane.

Process

  1. Identify the active plan, phase, target repository, and concrete diff range. A phase-completion gate requires a frozen durable native SCM revision/range; dirty or no-SCM work is not eligible.
  2. Check completion evidence. Missing, pending, vague, failing, or source-identity-mismatched evidence is a plan-drift finding, not proof.
  3. Render and run all four lanes, preserving their input isolation. Consolidate only actual findings and give Aligned, Needs changes, Blocked, or No reviewable diff with actual verification results.
  4. Persist the review using shared/templates/review.md. A phase gate is driven through the binary: `sdd review scaffold --frozen
  5. Validate the persisted gate with sdd validate --scope Plans/<PlanName> --format json before handing the result back to sdd-implement, and cite the gate from phase evidence as - Final aligned review: <artifact path>; frozen: <exact rev>. The Git target adapter uses a full immutable <base>..<endpoint> range whose endpoint is the clean phase checkpoint. The planning Git adapter loads phase and plan content at reviewed_planning_revision; only lifecycle-only changes may follow review. Write the review in-flow. At phase close, it belongs unchanged at planning HEAD in the planning-root atomic commit with the debrief, evidence/status, and plan phase-array update. Record a repo-owned ledger in that commit when it shares the root; otherwise record its root once at the same boundary (D-0024). In Git, commit only in commit-capable workflows where commits are authorized. Unsupported planning or target SCM adapters keep the phase non-complete.
  6. Material findings create new planned tasks. Implement each as a complete, reviewed native revision, then freeze and rerun all four lanes.

Read the full file on GitHub · 94 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed 62eeb34c5b38
  2. 6d ago First seen · 94 lines · 28 tokens per session scan A 9ef17e25339f

Subscribe to this mod's changes

sdd-code-review is a skill published in the GitHub repository danweinerdev/claude-sdd-planner (2 stars, last pushed 2d ago), licensed MIT. It adds 28 tokens to every session and 1,160 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

moai-ref-cross-model-audit

Cross-model audit convergence reference for the plan-auditor and sync-auditor agents. Documents how to invoke the auditmulti MCP tool to fan a code review out across the codex and GLM (z.ai) backends in parallel, converge their verdicts with the in-session Claude verdict, and fold the resulting per-backend verdicts +…

modu-ai/moai-adk · 99 tokens

moai-foundation-quality

TRUST 5 quality principles and how MoAI enforces them through agents, the 3-level harness, /moai gate, and sync-auditor scoring. Use for code review, quality gate checks, coverage targets, or TRUST 5 compliance.

modu-ai/moai-adk · 58 tokens

code-reviewer

Automatic code quality and best practices analysis. Use proactively when files are modified, saved, or committed. Analyzes code style, patterns, potential bugs, and security basics. Triggers on file changes, git diff, code edits, quality mentions.

alirezarezvani/claude-code-tresor · 54 tokens

prospec-verify

A review skill that checks an implementation against its tasks, written requirements, project rules, supporting knowledge, tests, and—when relevant—its design.

benwu95/prospec · 70 tokens

prospec-review

Adversarial Code Review → Fix Loop - Between implement and verify, an independent fresh-context reviewer audits the whole change diff; verifier-confirmed criticals are auto-fixed, majors are proposed, and a spec-aware lens checks delta-spec/dependency-direction. Triggers: review, code review, adversarial review, find…

benwu95/prospec · 94 tokens

fresh-eyes

Fresh-context audit of a finished diff against the conversation's stated intent. A subagent with zero conversation history reviews the diff blind — reporting what it believes the change does, its quality, and any oversights — then the main context reconciles that blind read against what the work was actually meant to…

adamlinscott/claude-skills · 118 tokens