code-review

code-review is a skill for Claude Code from DDS-Solutions/AI-TadPole-OS. It costs 43 tokens per session (971 once invoked), scanned A, original, MIT.

A two-part code-review process that compares current code with a chosen earlier point: one part checks project standards and common code smells, while the other checks whether the requested requirements were implemented.

In plain words
What is it for?
It helps review commits or branches, inspect the change history and diff, check repository conventions, identify code smells, and verify a specification line by line.
Why use it?
A review can overlook either code quality or missing requirements when it checks only one of them. Separate review paths cover both concerns.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions subagents; mentions AGENTS.md.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dds-solutions/ai-tadpole-os/code-review
Any agent
npx skills add DDS-Solutions/AI-TadPole-OS --skill code-review
Clone the repo
git clone --depth 1 https://github.com/DDS-Solutions/AI-TadPole-OS

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/dds-solutions/ai-tadpole-os/code-review.svg)](https://agentmods.dev/skills/dds-solutions/ai-tadpole-os/code-review)
Your own site
<a href="https://agentmods.dev/skills/dds-solutions/ai-tadpole-os/code-review"><img src="https://agentmods.dev/badge/skills/dds-solutions/ai-tadpole-os/code-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 971 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.00971
Opus 5 $0.00022 $0.00485
Sonnet 5 $0.00009 $0.00194
Haiku 4.5 $0.00004 $0.00097

Measured 5d ago against content hash 5e1ff661e68c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agent/skills/code-review/SKILL.md · 80 lines

How it starts

The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.

[!IMPORTANT] AI Context & Knowledge Heritage

  • Subsystem: Agent Skills Registry / code-review
  • Architecture: @docs ARCHITECTURE:Documentation
  • Failure Path: Information drift, legacy terminology, or documentation mismatch.
  • Observability: Traceability via execution/parity_guard.py ([SKILL])

Two-Axis Code Review Protocol

Review the diff between HEAD and a fixed point along two distinct, un-merged axes:

  • Standards Axis: Does the code conform to documented repo standards and Fowler code smells?
  • Spec Axis: Does the code faithfully implement the originating issue / PRD / spec?

Both axes run as parallel sub-agents so they do not pollute each other's context.


1. Pin the Fixed Point

  1. Determine the fixed point (commit SHA, branch, tag, main, HEAD~5).
  2. Verify resolution: git rev-parse <fixed-point>.
  3. Capture diff once: git diff <fixed-point>...HEAD (three-dot comparison against merge-base).
  4. Capture commit log: git log <fixed-point>..HEAD --oneline.

2. Identify Sources

Spec Source

Look for the spec in this order:

  1. Issue references in commit messages (#123, Closes #45).
  2. A spec/PRD file path passed in conversation or found under docs/, specs/, or .tmp/.
  3. If no spec is found, note "No spec available" and skip the Spec sub-agent.

Standards Source & Fowler Smell Baseline

Combine repo documentation (CODING_STANDARDS.md, CONTRIBUTING.md, AGENTS.md) with the Fowler Code Smell Baseline:

  • Mysterious Name: Variable, function, or type name doesn't reveal intent $\rightarrow$ Rename.
  • Duplicated Code: Identical logic shape in multiple hunks/files $\rightarrow$ Extract shared helper.
  • Feature Envy: Method reaching into another object's data more than its own $\rightarrow$ Move method to data owner.
  • Data Clumps: Same group of parameters traveling together $\rightarrow$ Introduce dedicated type.
  • Primitive Obsession: Primitive type standing in for a domain concept $\rightarrow$ Create domain type.
  • Repeated Switches: Duplicate switch/if cascades on same type $\rightarrow$ Polymorphism or lookup table.
  • Shotgun Surgery: Single logical change requires edits across many files $\rightarrow$ Consolidate module.
  • Divergent Change: Single module edited for multiple unrelated reasons $\rightarrow$ Split module.
  • Speculative Generality: Abstraction added for hypothetical future needs $\rightarrow$ Inline back.
  • Message Chains: Long a.b().c().d() navigation $\rightarrow$ Encapsulate walk behind method on first object.
  • Middle Man: Class/function mostly delegating onward $\rightarrow$ Call target directly.
  • Refused Bequest: Subclass overriding/ignoring inherited behavior $\rightarrow$ Use composition over inheritance.

Read the full file on GitHub · 80 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 80 lines · 43 tokens per session scan A 5e1ff661e68c

Subscribe to this mod's changes

code-review is a skill published in the GitHub repository DDS-Solutions/AI-TadPole-OS (8 stars, last pushed today), licensed MIT. It adds 43 tokens to every session and 971 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

react-query-setup

Set up @trpc/tanstack-react-query with createTRPCContext(), TRPCProvider, useTRPC() hook, queryOptions/mutationOptions factories, query invalidation via queryClient.invalidateQueries with queryFilter, and type inference with inferInput/inferOutput.

trpc/trpc · 60 tokens

server-side-calls

Call tRPC procedures directly from server code using t.createCallerFactory() and router.createCaller(context) for integration testing, internal server logic, and custom API endpoints. Catch TRPCError and extract HTTP status with getHTTPStatusCodeFromError(). Error handling via onError option.

trpc/trpc · 61 tokens

trpc-router

Entry point for all tRPC skills. Decision tree routing by task: initTRPC.create(), t.router(), t.procedure, createTRPCClient, adapters, subscriptions, React Query, Next.js, links, middleware, validators, error handling, caching, FormData.

trpc/trpc · 59 tokens

migrate-oxlint

Guide for migrating a project from ESLint to Oxlint. Use when asked to migrate, convert, or switch a JavaScript/TypeScript project's linter from ESLint to Oxlint.

oxc-project/oxc · 44 tokens

axum-test-transport

Choose between in-process tower::ServiceExt::oneshot tests and real tokio::net::TcpListener server tests for Axum services in this repository.

fastrepl/anarlog · 41 tokens

changeset-pr

Create or update a .changeset/.md file for the current branch or PR in this repository, choose the correct package scope and release type, and verify the result against repo-specific Changesets config. Use when a publishable package changed, when a PR is missing a changeset, when an existing changeset needs…

module-federation/core · 88 tokens