agent-review

agent-review is a skill for Claude Code from EmpiricaAI/empirica. It costs 72 tokens per session (1,836 once invoked), scanned A, original, MIT.

A post-work review skill for reading a completed subagent or workflow thread and marking its evidence, claims, tasks, and proposed answers. Each mark is tied to an exact turn and quotation, and a script checks those references.

In plain words
What is it for?
Use it after multi-agent audits, sweeps, research threads, or other substantial work that will guide follow-up actions.
Why use it?
It catches unsupported claims and hindsight issues after the work is complete without distracting the worker during the task.

Skill for Claude Code

Written for Claude Code: SubagentStop hook event. Also seen: reads .claude/ paths; mentions subagents; names the AskUserQuestion tool.

Part of the empirica plugin — 21 skills, 2 commands, 4 agents shipped together

Good fit Use it after multi-agent audits, sweeps, research threads, or other substantial work that will guide follow-up actions.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/empiricaai/empirica/agent-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add EmpiricaAI/empirica --skill agent-review
Clone the repo
git clone --depth 1 https://github.com/EmpiricaAI/empirica

Made for: Claude Code.

Or install empirica, the plugin that ships this one along with the rest of its 21 skills, 2 commands, 4 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agent-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/empiricaai/empirica/agent-review/github.svg)](https://agentmods.dev/skills/empiricaai/empirica/agent-review)
Your own site
<a href="https://agentmods.dev/skills/empiricaai/empirica/agent-review"><img src="https://agentmods.dev/badge/skills/empiricaai/empirica/agent-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agent-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/empiricaai/empirica/agent-review"><img src="https://agentmods.dev/badge/skills/empiricaai/empirica/agent-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,836 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00072 $0.01836
Opus 5.5 $0.00029 $0.00734
Sonnet 5.5 $0.00014 $0.00367
Haiku 4.5 $0.00007 $0.00184

Measured 17d ago against content hash 544e5adceb4a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agent-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/build_trace.py, scripts/check_stamp.py, scripts/score_tiers.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

empirica/plugins/claude-code-integration/skills/agent-review/SKILL.md · 109 lines

How it starts

The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent review: work first, then stamp

The worker does the work and returns raw evidence. A separate reviewer reads the finished thread and tags it. Tagging while working splits the worker's attention; tagging a finished thread puts all of the reviewer's attention on reading and typing. It also sees what only hindsight shows: which approach was a dead end, which belief was later retracted, what a result turned out to cause.

Opt-in. Use it when you will act on what agents found (a sweep, a multi-agent audit, a long research thread). A one-line lookup does not need it.

Measured on five finished threads (2026-10-05): a reviewer stamped 101 artifacts, every anchor and quote checked out mechanically, 34% needed hindsight, and the known defects were present in 12 of 13 cases. (The SubagentStop hook's keyword extractor found nothing on the same threads; that describes the hook, it is not a baseline for the method.) Caveats are at the end. Method and numbers: docs/guides/AGENT_REVIEW.md.

Part 1: the work (nothing to add to the worker)

Dispatch the agent as usual. The one request worth making: quote or run, never summarise. Every result it reports should carry the command it ran or the file lines it read, so a reviewer has evidence to anchor to. An agent that only reports its conclusion gives the reviewer nothing but testimony.

If it is a Workflow, give its agents only prompt-free tools (Read, rg, fd, sed -n). A prompt that asks them to run python raises a permission prompt per call for the human.

Part 2: the review

Files beside this skill: scripts/build_trace.py, scripts/check_stamp.py, stamp.schema.json, reviewer-prompt.md.

  1. Find the transcript. Subagents: ~/.claude/projects/<project>/<session>/subagents/agent-<id>.jsonl. Workflow agents: .../subagents/workflows/wf_*/agent-*.jsonl, labelled in the adjacent .meta.json.
  2. Build the numbered trace. python3 scripts/build_trace.py <transcript.jsonl> --out-dir <dir> --name <name> writes trace_<name>.txt and turns_<name>.json. Tool calls and results are truncated (500 and 700 characters); raise --call-limit / --result-limit if the evidence you need is cut off, because a reviewer can only quote what the trace shows.
  3. Dispatch a fresh reviewer with reviewer-prompt.md (fill {ABOUT} and {TRACE_PATH}) and stamp.schema.json as the structured-output schema. Tools: Read, rg, fd, sed -n only. One reviewer per thread; run them in parallel for several threads.
  4. Check the stamp. python3 scripts/check_stamp.py stamp.json turns_<name>.json. It verifies that every anchor names a real turn and every quote is a verbatim substring of that turn, and exits 1 if any fail. Reject a failing stamp: re-run the reviewer, do not repair quotes by hand.
  5. Log what survives. Findings with grounding ran or read go in as findings; retrieved and assumed go in as assumptions; unknown, decision, dead_end, mistake keep their type. Use log-artifacts so the edges come with them, and put the thread name and anchor turn in each description so the provenance survives. Tasks become goals-add-task entries only if the work is still yours to do.
  6. Put the proposals to the human, after re-checking them. A proposal is a question with a predicted answer and options. It was written when the thread ended; before asking, check it against current state (11 of 15 were already answered by the time they were read). Ask with AskUserQuestion, the prediction first and marked Recommended. Record the pick next to the prediction (finding-log): agreement rate over time is the reviewer's calibration.

Read the full file on GitHub · 109 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago First seen · 109 lines · 72 tokens per session scan A 544e5adceb4a

Subscribe to this mod's changes

agent-review is a skill published in the GitHub repository EmpiricaAI/empirica (251 stars, last pushed yesterday), licensed MIT. It adds 72 tokens to every session and 1,836 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.