LoopX is a provider-neutral control plane that gives long-running AI-agent work persistent state, decisions, governance, recovery, and handoffs across different agent harnesses. It is for managing and reviewing durable work performed by Codex, Claude Code, Cursor, dsh, or custom agent systems.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add huangruiteng/loopx --skill loopx-pr-reviewgit clone --depth 1 https://github.com/huangruiteng/loopxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/huangruiteng/loopx/loopx-pr-review)<a href="https://agentmods.dev/skills/huangruiteng/loopx/loopx-pr-review"><img src="https://agentmods.dev/badge/skills/huangruiteng/loopx/loopx-pr-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/huangruiteng/loopx/loopx-pr-review"><img src="https://agentmods.dev/badge/skills/huangruiteng/loopx/loopx-pr-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.02429 |
| Opus 5.5 | $0.00032 | $0.00972 |
| Sonnet 5.5 | $0.00016 | $0.00486 |
| Haiku 4.5 | $0.00008 | $0.00243 |
Grade A, and why
loopx-pr-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 181 lines — stays where its author put it; the contents beside it link to each section on GitHub.
LoopX PR Review
This skill is a thin host adapter. The built-in pull-request-review
capability owns review depth, evidence requirements, completeness, and verdict
policy through the CLI packet. Do not copy those rules into this skill or
replace them with a host-specific checklist.
Route
Use this skill for /loopx-pr-review, explicit PR reviews, or review queues by
state or time window. Route approval, merge, self-merge, and admin bypass to
loopx-pr-merge (optional repo-kept workflow, not installed by default) after
the evidence review is complete; it never replaces this skill's exact-head gate.
Run loopx --format json pr-review --state all before ad hoc GitHub reads.
Translate only explicit filters:
--repo owner/repo--since ISO--state open|merged|all--limit N--review-priority other-developers-first|owner-first(defaultother-developers-first; useowner-firstto opt into owner priority) When omitted, the CLI resolvespull_request_reviewfrom the standard machine capability editor; an absent namespace keeps the defaultother-developers-first. Words such astoday,open, ormergedare filters, not permission to return a table only; stats-only output needs an explicit opt-out such as只统计orstats only.
Preserve The Packet
Save the full first JSON packet before printing a compact projection. Keep all
paths named by agent_response_contract.required_packet_fields_to_preserve:
agent_response_contract.review_execution_contractresult_completenessandscheduling_policyreview_groupspull_requests[review_action_kind!=null].review_planpull_requests[review_action_kind!=null].review_templatepull_requests[review_action_kind!=null].evidence_commands
Do not pipe the only copy through jq. When an exhaustive request has
result_completeness.complete=false, rerun with its recommended_limit before
reviewing.
Require execution policy_revision == 7; a schema name alone is insufficient.
If missing or unequal, do not publish APPROVE; a conservative REQUEST_CHANGES is
allowed only when it names the incompatible-policy evidence gap. Do not retain
expired temporary worktree overrides. Honor explicit runtime pins, but report
incompatible policy instead of silently downgrading the review.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 752a90c3e00f
- 1mo ago Changed 64c5464e3af4
- 1mo ago Changed d1f2c2b0e568
- 1mo ago Changed · +1 lines f0931a3e82e8
- 1mo ago Changed a428012b9483
- 1mo ago Changed · -1 lines 863ab5c172a7
- 1mo ago Changed 287fa34606ec
- 1mo ago Changed · +1 lines 2a5f69f31982
- 1mo ago Changed · -9 lines da5068899d1a
- 1mo ago First seen · 189 lines · 79 tokens per session scan A 67c7f2d8cf11
loopx-pr-review is a skill published in the GitHub repository huangruiteng/loopx (6,356 stars, last pushed 6d ago), licensed Apache-2.0. It adds 79 tokens to every session and 2,429 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
build-review-loop
Use when the user says 'review loop N times', 'build then review', 'fix and re-review', or wants an iterative quality gate with different models building vs reviewing. Orchestrates N rounds of build-review-fix using Cursor CLI for build and Codex or another model for review.
curating-dataflow-pipeline-skills
Promote exceptionally reviewed DataFlow pipelines into reusable task-pattern skills, or update an inferior same-task skill while preserving comparison evidence and history.
taste
Cross-model code review - Codex reviews the diff read-only, then Claude validates every finding against the code before presenting it. Use when the user asks for a review, a second opinion, or a cross-model check. Offer it for large or risky diffs; invoke it directly only when the routing policy is autonomous.
refire
Turns confirmed findings from a taste into one scoped fix run, then re-verifies each finding at its cited location. Use after /sous-chef:taste when the user says to fix the findings, apply the review, or refire it. Not for new feature work - that is a fresh /sous-chef:fire.
anti-pattern
Anti-pattern detection and prevention skill. Catches hardcoded data, non-functional UI elements, placeholder code, N+1 queries, and other common development anti-patterns before they ship.
security-code-review
Use when reviewing code for security vulnerabilities, OWASP Top 10 compliance, secure coding standards, authentication/authorization patterns, and vulnerability remediation. Includes static analysis, threat modeling integration, and security testing guidance. Based on CSSLP, CISSP certifications and OWASP standards.