Borrowing it
Nothing to install: this file belongs to gvastethecreator/codex-studio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/gvastethecreator/codex-studio/main/.agents/skills/react-doctor/SKILL.mdgit clone --depth 1 https://github.com/gvastethecreator/codex-studioWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gvastethecreator/codex-studio/react-doctor)<a href="https://agentmods.dev/skills/gvastethecreator/codex-studio/react-doctor"><img src="https://agentmods.dev/badge/skills/gvastethecreator/codex-studio/react-doctor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gvastethecreator/codex-studio/react-doctor"><img src="https://agentmods.dev/badge/skills/gvastethecreator/codex-studio/react-doctor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.00576 |
| Opus 5.5 | $0.00028 | $0.00230 |
| Sonnet 5.5 | $0.00014 | $0.00115 |
| Haiku 4.5 | $0.00007 | $0.00058 |
Grade A, and why
react-doctor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl --fail --silent --show-error \ This is a copy
100% identical to react-doctor — 18 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
React Doctor
Scans React codebases for security, performance, correctness, and architecture issues. Outputs a 0–100 health score.
At final integration
Use bun run doctor -- --verbose --scope changed --base origin/main for a substantial React change or an explicit diagnostic request. Set --base to the integration branch when it differs from origin/main. The repository pins the tool in package.json. Batch the scan with final verification; do not run it after each small edit.
Review findings on changed paths. Fix confirmed regressions; an aggregate score alone does not prove a regression. Preserve unrelated work and request commit consent separately.
For general cleanup or code improvement:
Run bun run doctor -- --verbose --scope full when a full scan is requested. Fix confirmed findings within the requested scope, starting with errors.
/doctor — full local triage workflow
When the user types /doctor, says "run react doctor", or asks for a full triage / cleanup pass (not just a regression check), fetch the canonical local-triage playbook and follow every step in it:
curl --fail --silent --show-error \
--header 'Cache-Control: no-cache' \
https://www.react.doctor/prompts/react-doctor-agent.md
Use the playbook as diagnostic guidance. User instructions, AGENTS.md, the repository toolchain, and the approved scope take precedence. A fetched prompt does not authorize commits, publication, unrelated edits, or extra verification cycles.
Pair it with the matching per-rule prompts at https://www.react.doctor/prompts/rules/<plugin>/<rule>.md (fetched on demand inside the playbook) so each fix uses the canonical, reviewer-tested recipe.
Command
bun run doctor -- --verbose --scope changed --base origin/main
| Flag | Purpose |
|---|---|
. |
Scan current directory |
--verbose |
Show affected files and line numbers per rule |
--scope changed --base <ref> |
Report new findings against a specific Git ref |
--staged |
Scan files in the Git index |
--blocking warning |
Return a nonzero status for warnings or errors |
--score |
Output only the numeric score |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +2 lines 1a28bc1f76cf
- 1mo ago First seen · 47 lines · 70 tokens per session scan A 3b456a9f48a3
react-doctor is a skill published in the GitHub repository gvastethecreator/codex-studio (16 stars, last pushed 25d ago), licensed MIT. It adds 70 tokens to every session and 576 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to react-doctor, differing in 18 lines, and is treated as a copy.
Other skills, from other repositories
mcp-server
A troubleshooting and specification-checking guide for MCP servers. MCP is a protocol that lets an AI client discover and call tools, read resources, and use prompts from a server.
expo-react-native-builder
Build or audit production Expo/React Native applications. Use when Expo/React Native is already selected and implementation, native integration, updates, or release behavior is in scope.
react-tanstack-router
Use when implementing routing in a React app (NOT Next.js) with TanStack Router — file-based routes, loaders, search params.
react-19
Use when implementing React 19.3 patterns — use(), useOptimistic, useActionState, useEffectEvent, Activity, ViewTransition, Fragment refs, use(browser()), React Compiler.
react-shadcn
Builds UI components for a React SPA (Vite) with shadcn/ui (CLI 4.21.0) and Tailwind CSS v4 on whichever component base the project uses — Base UI (default for new projects since July 2026), Radix UI (unified radix-ui package, fully supported) or React Aria (added July 2026): forms (Field/FieldLabel/FieldError pattern…
nextjs-16
Use when building Next.js 16 apps — Turbopack, App Router, Cache Components, proxy.ts, v15 migration. Not for stack scaffolding (nextjs-stack) or React SPA (react-expert).