sdd-code-review

sdd-code-review is a skill for Claude Code from danweinerdev/claude-sdd-planner. It costs 28 tokens per session (1,348 once invoked), scanned A, original, MIT.

A code-review skill that compares implemented code with a plan, specification, or design. It checks for missing work, incorrect behavior, requirement violations, unnecessary complexity, and overlooked risks.

In plain words
What is it for?
Use it to review a code change against its intended design, test its correctness and safety, and identify gaps before merging.
Why use it?
It helps find where the implementation has drifted from the agreed plan or quietly misses important requirements.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the sdd-planner plugin — 40 skills, 8 agents shipped together

Good fit Use it to review a code change against its intended design, test its correctness and safety, and identify gaps before merging.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/danweinerdev/claude-sdd-planner/sdd-code-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add danweinerdev/claude-sdd-planner --skill sdd-code-review
Clone the repo
git clone --depth 1 https://github.com/danweinerdev/claude-sdd-planner

Made for: Claude Code.

Or install sdd-planner, the plugin that ships this one along with the rest of its 40 skills, 8 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sdd-code-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review/github.svg)](https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review)
Your own site
<a href="https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review"><img src="https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sdd-code-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/danweinerdev/claude-sdd-planner/sdd-code-review"><img src="https://agentmods.dev/badge/skills/danweinerdev/claude-sdd-planner/sdd-code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 28 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,348 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00028 $0.01348
Opus 5.5 $0.00011 $0.00539
Sonnet 5.5 $0.00006 $0.00270
Haiku 4.5 $0.00003 $0.00135

Measured 1mo ago against content hash 824a27f0d078, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

sdd-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex-plugin/skills/sdd-code-review/SKILL.md · 105 lines

How it starts

The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Implementation Code Review

Resources

Before opening shared/..., follow symlinks in this loaded file's path, derive <plugin-root> from <plugin-root>/skills/<name>/SKILL.md, and read shared/agent-runtime.md, shared/path-resolution.md, shared/vcs-detection.md, shared/completion-evidence.md, and shared/review-lanes.md in place. Never copy or symlink plugin material into a working directory, target repository, or planning root.

Review Lanes

Use four independent lenses. When fresh non-inheriting contexts are available, dispatch all four in parallel; otherwise run affected lanes serially and record the accurate mixed or single-agent review mode. Do not claim independent corroboration for serial lanes.

Lens Dispatch identifier Inputs Purpose
Plan drift review_plan_drift Diff, plan, phase, prior debriefs Missing work, scope creep, approach drift
Quality review_quality Diff and code only Correctness, safety, maintainability, tests, needless complexity
Spec compliance review_spec_compliance Diff, specs, designs Requirements coverage and contract violations
Blind spots review_blind_spots Diff and changed-code context only Adversarial edge cases, production failures, security, concurrency

Do not pass plan, spec, or design material to the quality or blind-spot lanes. Use exactly these runtime-neutral identifiers when the runtime exposes a task name or description field; do not request an agent or model.

Synthesis Rules

  • Only independently run lanes can corroborate findings; serial lanes do not corroborate, including in mixed or single-agent review mode.
  • Surface lane disagreements with their evidence rather than silently resolving them in synthesis.
  • Label a finding raised only by the blind-spots lane as blind-spot-only.
  • Do not manufacture primary-agent findings in synthesis; consolidate only findings actually reported by a lane.

Process

  1. Identify the active plan, phase, target repository, and concrete diff range. A phase-completion gate requires a frozen durable native SCM revision/range; dirty or no-SCM work is not eligible. If synthesis or resolution relies on a decision, run sdd decide current --plan <Name> for the plan's standing decisions. Do not pass that context to any of the four intent-isolated lanes. A resolution that binds work beyond this artifact follows shared/decision-log.md: show the exact statement, then run sdd decide add --plan <Name> --statement "..." once approved.
  2. Check completion evidence. Missing, pending, vague, failing, or source-identity-mismatched evidence is a plan-drift finding, not proof.
  3. Render and run all four lanes, preserving their input isolation. Consolidate only actual findings and give Aligned, Needs changes, Blocked, or No reviewable diff with actual verification results. For a graph plan's review-role node, every finding left open carries action: revise (with nodes and a revise: block) or action: extend (with a node: fragment), and the verdict is Aligned only when every finding is terminal, else Amend — the frozen findings report sdd graph amend applies (shared/review-artifacts.md).
  4. Persist the review using shared/templates/review.md. A phase gate is driven through the binary: `sdd review scaffold --frozen
  5. Validate the persisted gate with sdd validate --scope Plans/<PlanName> --format json before handing the result back to sdd-implement, and cite the gate from phase evidence as - Final aligned review: <artifact path>; frozen: <exact rev>. The Git target adapter uses a full immutable <base>..<endpoint> range whose endpoint is the clean phase checkpoint. The planning Git adapter loads phase and plan content at reviewed_planning_revision; only lifecycle-only changes may follow review. Write the review in-flow. At phase close, it belongs unchanged at planning HEAD in the planning-root atomic commit with the debrief, evidence/status, and plan phase-array update. Record every affected plan decisions file in that same planning-root boundary commit (shared/autonomy.md § SCM boundary cadence). In Git, commit only in commit-capable workflows where commits are authorized. Unsupported planning or target SCM adapters keep the phase non-complete.
  6. Material findings create new planned tasks. Implement each as a complete, reviewed native revision, then freeze and rerun all four lanes.

Read the full file on GitHub · 105 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +6 lines 824a27f0d078
  2. 1mo ago Changed · +5 lines ad87b873c6b1
  3. 2mo ago Changed 62eeb34c5b38
  4. 2mo ago First seen · 94 lines · 28 tokens per session scan A 9ef17e25339f

Subscribe to this mod's changes

sdd-code-review is a skill published in the GitHub repository danweinerdev/claude-sdd-planner (2 stars, last pushed 1mo ago), licensed MIT. It adds 28 tokens to every session and 1,348 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

sdd-code-review compared with skills from other repositories

sdd-code-review next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
sdd-code-reviewdanweinerdev/claude-sdd-plannerSkill21mo agoMITA28Claude Code
moai-ref-cross-model-auditmodu-ai/moai-adkSkill1.3k4d agoApache-2.0A96Claude Code
moai-foundation-qualitymodu-ai/moai-adkSkill1.3k4d agoApache-2.0A58Claude Code
moai-reviewmodu-ai/moai-adkSkill1.3k4d agoApache-2.0A14Claude Code
code-revieweralirezarezvani/claude-code-tresorSkill7824mo agoMITA54Claude Code
fresh-eyesadamlinscott/claude-skillsSkill48d agoMITA123Claude Code
amby-convergeambystechcom/AmbyKitSkill22d agoMITA28Claude Code, Codex