Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add HECer/yoke --skill plan-eng-reviewgit clone --depth 1 https://github.com/HECer/yokeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hecer/yoke/plan-eng-review)<a href="https://agentmods.dev/skills/hecer/yoke/plan-eng-review"><img src="https://agentmods.dev/badge/skills/hecer/yoke/plan-eng-review.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.04017 |
| Opus 5 | $0.00030 | $0.02008 |
| Sonnet 5 | $0.00012 | $0.00803 |
| Haiku 4.5 | $0.00006 | $0.00402 |
Grade A, and why
plan-eng-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 363 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plan Review Mode
You are running the plan-eng-review skill. Review this plan thoroughly before making any code changes. For every issue or recommendation, explain the concrete tradeoffs, give an opinionated recommendation, and ask for user input before assuming a direction.
Priority hierarchy
Step 0 > Test diagram > Opinionated recommendations > Everything else. Never skip Step 0 or the test diagram.
Engineering preferences (use these to guide recommendations)
- DRY is important — flag repetition aggressively.
- Well-tested code is non-negotiable; better too many tests than too few.
- Code should be "engineered enough" — not under-engineered (fragile, hacky) and not over-engineered (premature abstraction, unnecessary complexity).
- Err on the side of handling more edge cases, not fewer; thoughtfulness > speed.
- Bias toward explicit over clever.
- Right-sized diff: favor the smallest diff that cleanly expresses the change — but don't compress a necessary rewrite into a minimal patch. If the existing foundation is broken, say "scrap it and do this instead."
Cognitive Patterns — How Great Eng Managers Think
These are thinking instincts — the pattern recognition that separates "reviewed the code" from "caught the landmine." Apply them throughout the review.
- State diagnosis — Teams exist in four states: falling behind, treading water, repaying debt, innovating. Each demands a different intervention.
- Blast radius instinct — Every decision evaluated through "what's the worst case and how many systems/people does it affect?"
- Boring by default — Every company gets about three innovation tokens. Everything else should be proven technology.
- Incremental over revolutionary — Strangler fig, not big bang. Canary, not global rollout. Refactor, not rewrite.
- Systems over heroes — Design for tired humans at 3am, not your best engineer on their best day.
- Reversibility preference — Feature flags, A/B tests, incremental rollouts. Make the cost of being wrong low.
- Failure is information — Blameless postmortems, error budgets, chaos engineering. Incidents are learning opportunities.
- DX is product quality — Slow CI, bad local dev, painful deploys → worse software, higher attrition.
- Essential vs accidental complexity — Before adding anything: "Is this solving a real problem or one we created?"
- Make the change easy, then make the easy change — Refactor first, implement second.
- Own your code in production — No wall between dev and ops.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 363 lines · 61 tokens per session scan A 133547ebf508
plan-eng-review is a skill published in the GitHub repository HECer/yoke (2 stars, last pushed yesterday), licensed MIT. It adds 61 tokens to every session and 4,017 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-review-checklist
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability.
create-pr
Create pull requests following Sentry conventions. Use when opening PRs, writing PR descriptions, or preparing changes for review. Follows Sentry's code review guidelines.
codex-review
Professional code review with auto CHANGELOG generation, integrated with Codex AI.
refine-tests
Reviews existing test code for conformance to the test-designing-guide and test-writing-guide, then applies the refinements. Use this skill when the user wants to review or refine existing test code so it follows the project's test design and writing conventions. Typically invoked as /refine-tests .
work-review
Perform exhaustive code reviews using multi-agent analysis. Reviews PRs, branches, or current changes. Writes review.findings.json to the active session. Triggers on "review", "code review", "check PR".
reviewer
Philosophical guardrails enforcer — independently audits code, tests, and spec for layered-integrity, Why>What, error-as-data, and the related Ironclad philosophical invariants. Activate only when the connected project contains spec.yaml or the user explicitly names Cladding; ignore ordinary requests in uninitialized…