Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add emaraschio/cursor-commands --skill thermo-nuclear-code-quality-reviewgit clone --depth 1 https://github.com/emaraschio/cursor-commandsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/emaraschio/cursor-commands/thermo-nuclear-code-quality-review)<a href="https://agentmods.dev/skills/emaraschio/cursor-commands/thermo-nuclear-code-quality-review"><img src="https://agentmods.dev/badge/skills/emaraschio/cursor-commands/thermo-nuclear-code-quality-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/emaraschio/cursor-commands/thermo-nuclear-code-quality-review"><img src="https://agentmods.dev/badge/skills/emaraschio/cursor-commands/thermo-nuclear-code-quality-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.01329 |
| Opus 5.5 | $0.00023 | $0.00532 |
| Sonnet 5.5 | $0.00012 | $0.00266 |
| Haiku 4.5 | $0.00006 | $0.00133 |
Grade A, and why
thermo-nuclear-code-quality-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Overview
An unusually strict review of implementation quality, maintainability, abstraction quality, and codebase health. Above all, be ambitious about structure: do not stop at local cleanup. Actively hunt for the code judo move, a restructuring that preserves behavior while making the implementation dramatically simpler, smaller, more direct, and more elegant. Prefer deleting complexity over rearranging it.
Run this skill only on explicit request. The repo command schema has no disable-model-invocation field, so explicit-only is carried by the description wording and the slash command, not by auto-suggestion.
Steps
- Read
SKILL.md(this file) and scope the diff: read the current branch's changes against its merge base, then list the files touched and the concepts each change introduces. - Model the ideal shape first. Before judging the diff, ask what the simplest behavior-preserving implementation would look like. That target is the bar.
- Hunt for the code judo move. For every meaningful change, look for a reframing that makes whole branches, helpers, modes, conditionals, or layers disappear. Prefer the solution that feels inevitable in hindsight.
- Check structural health against the Standards below: file size, spaghetti growth, directness, type and boundary cleanliness, canonical-layer ownership, and orchestration or atomicity.
- Prioritize and report. Lead with structural regressions and missed simplifications, keep behavior identical, and prefer a few high-conviction findings over a long list of nits.
Standards
Apply every standard. Treat each as a presumptive blocker unless the author justifies it clearly.
- Be ambitious about simplification. Look for the reframing that deletes categories of complexity, not the version that spreads the same complexity around. If a path deletes complexity, push hard for it.
- Guard the 1000-line threshold. Do not let a change push a file from under 1000 lines to over 1000 lines without a very strong reason. Prefer extracting helpers, subcomponents, or modules. If the diff crosses that line, ask whether to decompose first.
- Block spaghetti growth. Be highly suspicious of new ad-hoc conditionals, scattered special cases, or one-off branches bolted onto unrelated flows. Push the logic into a dedicated abstraction, helper, state machine, or policy object instead of tangling an existing path.
- Clean the design, do not just accept working code. If behavior can stay the same while the structure gets meaningfully cleaner, push for the cleaner version. Do not rubber-stamp "it works" code that leaves the codebase messier.
- Prefer direct, boring code over magic. Treat brittle, ad-hoc, or magical behavior as a quality problem. Flag thin wrappers, identity abstractions, and pass-through helpers that add indirection without buying clarity.
- Keep type and boundary contracts clean. Question unnecessary optionality,
unknown,any, or cast-heavy code when a clearer boundary could exist. If a branch leans on a silent fallback to paper over an unclear invariant, ask to make the boundary explicit. - Keep logic in its canonical layer. Call out feature logic leaking into shared paths or implementation details leaking through an API. Reuse the existing canonical helper instead of a near-duplicate, and move logic to the package or module that already owns the concept.
- Treat needless sequential orchestration and non-atomic updates as smells when the cleaner structure is obvious: parallelize independent work, and restructure related updates so state cannot land half-applied.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 75 lines · 58 tokens per session scan A e0b0050770e5
thermo-nuclear-code-quality-review is a skill published in the GitHub repository emaraschio/cursor-commands (9 stars, last pushed yesterday), licensed MIT. It adds 58 tokens to every session and 1,329 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
review-all
Use when the user asks for a deep review, full review, comprehensive review, production readiness assessment, full audit, multi-domain audit, "security and reliability and code review", or "review everything". Also use when the user explicitly requests performance review alongside the comprehensive request (e.g.…
active-review
Use when the user wants to prepare for a manual PR code review and asks for help targeting it — a terse PR summary, ranked files to read first, and paste-ready inline comment drafts with GitHub deep-links. Triggers: "active review this PR", "walk me through this PR", "help me review this", "give me inline comments to…
review-api-compat
Use when the user asks for an API compatibility review, breaking change review, proto breaking change review, buf breaking review, OpenAPI compatibility check, gRPC backwards compatibility audit, "are these API changes breaking", "did we break the wire", contract evolution review, or backwards-compatibility audit on…
review-documentation
Use when the user asks for a documentation review, doc audit, doc comment review, godoc review, proto comment review, OpenAPI or Swagger spec review, README review, example test review, "are the docs in sync with the code", "do the docs still match", "are these comments accurate", or "check the examples". Also use…
review-reliability
Use when the user asks for a reliability review, production readiness assessment, stability analysis, graceful shutdown audit, drain or rollout review, timeout review, timeout budget check, deadline propagation review, circuit breaker or bulkhead review, retry and backoff review, goroutine leak or resource leak…
review-trajectory
Use when the user asks whether it is time to refactor, consolidate, simplify, or re-architect, asks "is this the third time we have done this", "should we extract this", "are we duplicating too much", "is now the time to consolidate", or asks for a trajectory review, architectural drift check, duplication census, or…