yet-another-agent-harness: Skill for Claude Code

.claude/skills/code-reviewer/SKILL.md

code-reviewer is a skill for Claude Code from dirien/yet-another-agent-harness. It costs 130 tokens per session (1,116 once invoked), scanned A, a copy of code-reviewer, MIT.

A code-review guide for examining changes and finding problems in software. It covers bugs, security risks such as SQL injection and cross-site scripting, performance issues, design concerns, and missing tests.

In plain words
What is it for?
Use it to review pull requests, audit code, assess architecture, find security or database-query problems, check test quality, and write prioritized feedback.
Why use it?
It provides a structured way to check whether a change works, fits the existing code, protects data, and handles important edge cases before it is accepted.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

This is dirien/yet-another-agent-harness's own configuration. It tells Claude Code how to work on yet-another-agent-harness itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything yet-another-agent-harness configures →

Reuse

Borrowing it

Nothing to install: this file belongs to dirien/yet-another-agent-harness. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/dirien/yet-another-agent-harness/main/.claude/skills/code-reviewer/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/dirien/yet-another-agent-harness

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/skills/dirien/yet-another-agent-harness/code-reviewer/github.svg)](https://agentmods.dev/skills/dirien/yet-another-agent-harness/code-reviewer)
Your own site
<a href="https://agentmods.dev/skills/dirien/yet-another-agent-harness/code-reviewer"><img src="https://agentmods.dev/badge/skills/dirien/yet-another-agent-harness/code-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for code-reviewer

Your own site · 80×15
<a href="https://agentmods.dev/skills/dirien/yet-another-agent-harness/code-reviewer"><img src="https://agentmods.dev/badge/skills/dirien/yet-another-agent-harness/code-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 130 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,116 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 97% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00130 $0.01116
Opus 5.5 $0.00052 $0.00446
Sonnet 5.5 $0.00026 $0.00223
Haiku 4.5 $0.00013 $0.00112

Measured 1mo ago against content hash d8185a120158, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

97% identical to code-reviewer — 5 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/skills/code-reviewer/SKILL.md · 120 lines

How it starts

The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Code Reviewer

Senior engineer conducting thorough, constructive code reviews that improve quality and share knowledge.

When to Use This Skill

  • Reviewing pull requests
  • Conducting code quality audits
  • Identifying refactoring opportunities
  • Checking for security vulnerabilities
  • Validating architectural decisions

Core Workflow

  1. Context — Read PR description, understand the problem being solved. Checkpoint: Summarize the PR's intent in one sentence before proceeding. If you cannot, ask the author to clarify.
  2. Structure — Review architecture and design decisions. Ask: Does this follow existing patterns in the codebase? Are new abstractions justified?
  3. Details — Check code quality, security, and performance. Apply the checks in the Reference Guide below. Ask: Are there N+1 queries, hardcoded secrets, or injection risks?
  4. Tests — Validate test coverage and quality. Ask: Are edge cases covered? Do tests assert behavior, not implementation?
  5. Feedback — Produce a categorized report using the Output Template. If critical issues are found in step 3, note them immediately and do not wait until the end.

Disagreement handling: If the author has left comments explaining a non-obvious choice, acknowledge their reasoning before suggesting an alternative. Never block on style preferences when a linter or formatter is configured.

Reference Guide

Load detailed guidance based on context:

Topic Reference Load When
Review Checklist references/review-checklist.md Starting a review, categories
Common Issues references/common-issues.md N+1 queries, magic numbers, patterns
Feedback Examples references/feedback-examples.md Writing good feedback
Report Template references/report-template.md Writing final review report
Spec Compliance references/spec-compliance-review.md Reviewing implementations, PR review, spec verification
Receiving Feedback references/receiving-feedback.md Responding to review comments, handling feedback

Read the full file on GitHub · 120 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 120 lines · 130 tokens per session scan A d8185a120158

Subscribe to this mod's changes

code-reviewer is a skill published in the GitHub repository dirien/yet-another-agent-harness (20 stars, last pushed 4mo ago), licensed MIT. It adds 130 tokens to every session and 1,116 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 97% identical to code-reviewer, differing in 5 lines, and is treated as a copy.

Related

Other skills, from other repositories

autoreview

Structured code review through the shared OpenClaw agent-skills installation.

openclaw/clawhub · 17 tokens

omh-code-review

This is an OMH code-review workflow skill, projected for Agent Skills hosts (Claude Code, Codex, Cursor, opencode, OpenClaw, pi).

rlaope/oh-my-hermes · 48 tokens

revdiff-plan

Review the last Codex assistant message (plan, analysis, or proposal) with inline annotations in a TUI overlay. Extracts the most recent response from Codex rollout files and opens it in revdiff for review and annotation. Activates on "revdiff-plan", "review plan with revdiff", "annotate plan", "review last response"…

umputun/revdiff · 84 tokens

asplos-writing-style

Use when drafting or revising ASPLOS prose — engineering the first two pages that rapid review actually reads, stating the cross-layer insight as one quotable sentence, structuring per-layer mechanism sections, writing bounded claims, and fitting everything into 11 self-contained pages that include figures and…

brycewang-stanford/Awesome-Journal-Skills · 65 tokens

explore-unknowns

Guide the user through a quadrant walk that maps the unknowns of a task — open by listing the known knowns, then work through known unknowns, unknown knowns, and unknown unknowns one stage at a time, ending with a complete four-quadrant map in the user's hands. Use when a request is ambiguous or underspecified, the…

dzhng/skills · 162 tokens

re0-merge

Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…

LilMGenius/paperthin · 70 tokens