Borrowing it
Nothing to install: this file belongs to imbenrabi/Financial-Modeling-Prep-MCP-Server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/imbenrabi/Financial-Modeling-Prep-MCP-Server/main/.claude/skills/code-review/SKILL.mdgit clone --depth 1 https://github.com/imbenrabi/Financial-Modeling-Prep-MCP-ServerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/imbenrabi/financial-modeling-prep-mcp-server/code-review)<a href="https://agentmods.dev/skills/imbenrabi/financial-modeling-prep-mcp-server/code-review"><img src="https://agentmods.dev/badge/skills/imbenrabi/financial-modeling-prep-mcp-server/code-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/imbenrabi/financial-modeling-prep-mcp-server/code-review"><img src="https://agentmods.dev/badge/skills/imbenrabi/financial-modeling-prep-mcp-server/code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00095 | $0.02646 |
| Opus 5 | $0.00048 | $0.01323 |
| Sonnet 5 | $0.00019 | $0.00529 |
| Haiku 4.5 | $0.00010 | $0.00265 |
Grade A, and why
code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 188 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code Review — FMP MCP Server
You are reviewing changes to this repository. This server exposes 253+ read-only
financial-data tools over MCP (HTTP/SSE) using toolception + Fastify. Most of the
load-bearing rules here are non-obvious and live in the intent layer (the
AGENTS.md hierarchy), not in the code. A generic review misses them. Your job is to
catch real bugs and any violation of this repo's documented invariants.
Work through the steps in order. Do not skip step 1 or step 3 — nor step 4 when the diff touches the toolception integration surface.
1. Load behavioral guidelines
Invoke the karpathy-guidelines skill first (via the Skill tool) and review through its
four lenses:
- Surgical changes — every changed line should trace to the PR's stated purpose. Flag drive-by refactors, reformatting, or "improvements" to untouched code.
- Simplicity — flag speculative abstraction, unused config/flexibility, and error handling for impossible states.
- Surfaced assumptions — flag silent decisions where multiple interpretations existed.
- Verifiable success — flag behavior changes that arrive without a test proving them.
2. Scope the diff
Determine what changed.
- Given a PR reference — CI passes it as
owner/repo/pull/N. Extract the numberNand rungh pr diff N(the repo is inferred from the checkout); a full PR URL also works. - Otherwise (local working branch) — diff against
main:
git diff --merge-base main --stat
git diff --merge-base main
List the changed files and collapse them to the source directories touched — that set drives step 3.
3. Load the intent layer (live read — do not rely on memory)
Always read the root AGENTS.md (it defines the intent layer and its maintenance
rules). Then, for each touched directory, read its matching doc. Read the area's FLOW.md
too when one exists. Loading is hierarchical and T-shaped: root + the specific node.
| Changed path | Read |
|---|---|
src/ (startup, index.ts, Fastify wiring) |
docs/src/AGENTS.md, docs/src/FLOW.md |
src/api/** |
docs/src/api/AGENTS.md |
src/tools/** |
docs/src/tools/AGENTS.md |
src/toolception-adapters/** |
docs/src/toolception-adapters/AGENTS.md |
src/server-mode-enforcer/** |
docs/src/server-mode-enforcer/AGENTS.md |
src/endpoints/** |
docs/src/endpoints/AGENTS.md, docs/src/endpoints/FLOW.md |
__tests__/smoke/** |
docs/tests/smoke/AGENTS.md |
| Adding a tool/module/tool set | docs/GUIDE.md (the procedure to follow) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 188 lines · 95 tokens per session scan A 513071f39b78
code-review is a skill published in the GitHub repository imbenrabi/Financial-Modeling-Prep-MCP-Server (143 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 95 tokens to every session and 2,646 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sprr
Single PR reviewer for awesome-quant. Use when the user asks to review, validate, comment on, label, close, or merge one specific pull request that adds README.md entries. Triggers include "sprr", "review PR", "check PR", and "validate contribution".
ln-41-test-strategy-planner
Plans a risk-based test portfolio and prioritized scenarios without editing tests. Not for test execution or implementation.
ai-slop
Operational rubric that turns "don't make AI slop" into observable properties, severity levels, evidence requirements, and repair actions for interface design. Use as the reference rubric when building or reviewing marketing sites, product interfaces, dashboards, portfolios, or e-commerce pages, especially alongside…
bprr
Bulk PR reviewer for awesome-quant. Use when the user asks to review all open PRs, review unreviewed PRs, bulk review, or mentions "bprr". Reviews open PRs lacking the reviewed label and presents a summary before any merge/comment/label action.
vertical-fintech-mobile
Domain-knowledge pack for money on a phone — wallets, payments, custody and signing, transaction lifecycle, KYC/AML gates, and offline reconciliation. The rules that separate a payments app from a CRUD app with a currency symbol: a balance is a claim about a server, an idempotency key must outlive the process that…
product-economics
Does this product make money at a price someone will pay? Forces contribution margin, a price with a stated basis, and a bottom-up market size — each number labelled measured / assumed / unknown, so a guess can never be read as a calculation.