Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/doodledood/manifest-dev/review-codenpx skills add doodledood/manifest-dev --skill review-codegit clone --depth 1 https://github.com/doodledood/manifest-devWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00103 | $0.02077 |
| Opus 5 | $0.00051 | $0.01038 |
| Sonnet 5 | $0.00021 | $0.00415 |
| Haiku 4.5 | $0.00010 | $0.00208 |
Grade A, and why
review-code scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
review-code — one dimension per invocation
Audit a change along one review dimension and report findings. This skill is the single home for the quality reviewers that used to be separate agents; each dimension's detection content lives in its own reference file and loads only when requested (progressive disclosure).
Input
$ARGUMENTS carries the dimension plus optional scope, e.g. dimension=code-bugs or code-bugs src/foo.ts. A manifest gate's body activates this skill with the dimension under /do's selected evaluator; the gate names the dimension and this skill owns the threshold. If no dimension is given, list the available dimensions and ask which one — one invocation, one dimension.
Dimensions and thresholds
Load references/<dimension>.md for the requested dimension and follow it. The threshold is the bar a change must clear to PASS on that dimension:
| Dimension | Reference | Role | Threshold (PASS requires) |
|---|---|---|---|
change-intent |
references/change-intent.md |
defect-finder | no LOW-or-higher findings |
code-bugs |
references/code-bugs.md |
defect-finder | no LOW-or-higher findings |
contracts |
references/contracts.md |
defect-finder | no LOW-or-higher findings |
type-safety |
references/type-safety.md |
defect-finder | no LOW-or-higher findings |
defect-class |
references/defect-class.md |
defect-finder | no LOW-or-higher findings |
operational-readiness |
references/operational-readiness.md |
advisory | no MEDIUM-or-higher findings |
code-design |
references/code-design.md |
advisory | no MEDIUM-or-higher findings |
code-maintainability |
references/code-maintainability.md |
advisory | no MEDIUM-or-higher findings |
code-simplicity |
references/code-simplicity.md |
advisory | no MEDIUM-or-higher findings |
code-testability |
references/code-testability.md |
advisory | no MEDIUM-or-higher findings |
test-quality |
references/test-quality.md |
advisory | no MEDIUM-or-higher findings |
docs |
references/docs.md |
advisory | no MEDIUM-or-higher findings |
prose-value |
references/prose-value.md |
advisory | no MEDIUM-or-higher findings |
context-file-adherence |
references/context-file-adherence.md |
advisory | no MEDIUM-or-higher findings |
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/change-intent.md 13 KB
- references/code-bugs.md 12 KB
- references/code-design.md 19 KB
- references/code-maintainability.md 21 KB
- references/code-simplicity.md 9.2 KB
- references/code-testability.md 11 KB
- references/context-file-adherence.md 7.3 KB
- references/contracts.md 13 KB
- references/defect-class.md 15 KB
- references/docs.md 7.0 KB
- references/operational-readiness.md 6.6 KB
- references/prose-value.md 12 KB
- references/test-quality.md 12 KB
- references/type-safety.md 11 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 102 lines · 103 tokens per session scan A f10f15c87574
review-code is a skill published in the GitHub repository doodledood/manifest-dev (72 stars, last pushed 3d ago), licensed MIT. It adds 103 tokens to every session and 2,077 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
external-context
Invoke parallel document-specialist agents for external web searches and documentation lookup.
security-ownership-map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for…
moai-ref-ui-polish
UI polish and interface-completion reference: the small visual details — concentric border radius, optical alignment, shadow-vs-border, motion easing, typography smoothing, tabular numbers, icon stroke weight, hit areas — that separate polished interfaces from generic ones. Agent-extending skill that amplifies…
cross-task-learner
Enable agent loops to learn from similar past tasks and share patterns across loops.
ralph-specum-requirements
This skill should be used only when the user explicitly asks to use $ralph-specum-requirements, or explicitly asks Ralph Specum in Codex to run the requirements phase.
devkit-create-command
Create a new slash command with AI-guided behavior definition.