Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add danweinerdev/claude-sdd-planner --skill sdd-code-reviewgit clone --depth 1 https://github.com/danweinerdev/claude-sdd-plannerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review)<a href="https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review"><img src="https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01160 |
| Opus 5 | $0.00014 | $0.00580 |
| Sonnet 5 | $0.00006 | $0.00232 |
| Haiku 4.5 | $0.00003 | $0.00116 |
Grade A, and why
sdd-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Implementation Code Review
Resources
Before opening shared/..., follow symlinks in this loaded file's path, derive
<plugin-root> from <plugin-root>/skills/<name>/SKILL.md, and read
shared/agent-runtime.md, shared/path-resolution.md, shared/vcs-detection.md,
shared/completion-evidence.md, and shared/review-lanes.md in place. Never
copy or symlink plugin material into a working directory, target repository, or
planning root.
Review Lanes
Use four independent lenses. When fresh non-inheriting contexts are available,
dispatch all four in parallel; otherwise run affected lanes serially and record
the accurate mixed or single-agent review mode. Do not claim independent
corroboration for serial lanes.
| Lens | Dispatch identifier | Inputs | Purpose |
|---|---|---|---|
| Plan drift | review_plan_drift |
Diff, plan, phase, prior debriefs | Missing work, scope creep, approach drift |
| Quality | review_quality |
Diff and code only | Correctness, safety, maintainability, tests, needless complexity |
| Spec compliance | review_spec_compliance |
Diff, specs, designs | Requirements coverage and contract violations |
| Blind spots | review_blind_spots |
Diff and changed-code context only | Adversarial edge cases, production failures, security, concurrency |
Do not pass plan, spec, or design material to the quality or blind-spot lanes. Use exactly these runtime-neutral identifiers when the runtime exposes a task name or description field; do not request an agent or model.
Synthesis Rules
- Only independently run lanes can corroborate findings; serial lanes do not corroborate, including in mixed or single-agent review mode.
- Surface lane disagreements with their evidence rather than silently resolving them in synthesis.
- Label a finding raised only by the blind-spots lane as
blind-spot-only. - Do not manufacture primary-agent findings in synthesis; consolidate only findings actually reported by a lane.
Process
- Identify the active plan, phase, target repository, and concrete diff range. A phase-completion gate requires a frozen durable native SCM revision/range; dirty or no-SCM work is not eligible.
- Check completion evidence. Missing, pending, vague, failing, or source-identity-mismatched evidence is a plan-drift finding, not proof.
- Render and run all four lanes, preserving their input isolation. Consolidate
only actual findings and give
Aligned,Needs changes,Blocked, orNo reviewable diffwith actual verification results. - Persist the review using
shared/templates/review.md. A phase gate is driven through the binary: `sdd review scaffold --frozen - Validate the persisted gate with
sdd validate --scope Plans/<PlanName> --format jsonbefore handing the result back tosdd-implement, and cite the gate from phase evidence as- Final aligned review: <artifact path>; frozen: <exact rev>. The Git target adapter uses a full immutable<base>..<endpoint>range whose endpoint is the clean phase checkpoint. The planning Git adapter loads phase and plan content atreviewed_planning_revision; only lifecycle-only changes may follow review. Write the review in-flow. At phase close, it belongs unchanged at planningHEADin the planning-root atomic commit with the debrief, evidence/status, and plan phase-array update. Record a repo-owned ledger in that commit when it shares the root; otherwise record its root once at the same boundary (D-0024). In Git, commit only in commit-capable workflows where commits are authorized. Unsupported planning or target SCM adapters keep the phase non-complete. - Material findings create new planned tasks. Implement each as a complete, reviewed native revision, then freeze and rerun all four lanes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 62eeb34c5b38
- 6d ago First seen · 94 lines · 28 tokens per session scan A 9ef17e25339f
sdd-code-review is a skill published in the GitHub repository danweinerdev/claude-sdd-planner (2 stars, last pushed 2d ago), licensed MIT. It adds 28 tokens to every session and 1,160 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
moai-ref-cross-model-audit
Cross-model audit convergence reference for the plan-auditor and sync-auditor agents. Documents how to invoke the auditmulti MCP tool to fan a code review out across the codex and GLM (z.ai) backends in parallel, converge their verdicts with the in-session Claude verdict, and fold the resulting per-backend verdicts +…
moai-foundation-quality
TRUST 5 quality principles and how MoAI enforces them through agents, the 3-level harness, /moai gate, and sync-auditor scoring. Use for code review, quality gate checks, coverage targets, or TRUST 5 compliance.
code-reviewer
Automatic code quality and best practices analysis. Use proactively when files are modified, saved, or committed. Analyzes code style, patterns, potential bugs, and security basics. Triggers on file changes, git diff, code edits, quality mentions.
prospec-verify
A review skill that checks an implementation against its tasks, written requirements, project rules, supporting knowledge, tests, and—when relevant—its design.
prospec-review
Adversarial Code Review → Fix Loop - Between implement and verify, an independent fresh-context reviewer audits the whole change diff; verifier-confirmed criticals are auto-fixed, majors are proposed, and a spec-aware lens checks delta-spec/dependency-direction. Triggers: review, code review, adversarial review, find…
fresh-eyes
Fresh-context audit of a finished diff against the conversation's stated intent. A subagent with zero conversation history reviews the diff blind — reporting what it believes the change does, its quality, and any oversights — then the main context reconciles that blind read against what the work was actually meant to…