code-review-cli

code-review-cli is a skill for Claude Code from Jamie-BitFlight/claude_skills. It costs 71 tokens per session (1,211 once invoked), scanned A, original, MIT.

A review guide for command-line applications, which are programs operated through a terminal rather than a graphical interface. It covers argument handling, output streams, errors, signals, and non-interactive use.

In plain words
What is it for?
It helps review help and version flags, exit codes, argument validation, standard input and output, signal handling, color output, and dry-run behavior.
Why use it?
It catches problems that make command-line tools unreliable in scripts and automation, such as reporting errors with a success status or mixing normal output with error messages.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter.

Part of the dh plugin — 70 skills, 29 agents shipped together

Good fit It helps review help and version flags, exit codes, argument validation, standard input and output, signal handling, color output, and dry-run behavior.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jamie-bitflight/claude_skills/code-review-cli
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Jamie-BitFlight/claude_skills --skill code-review-cli
Clone the repo
git clone --depth 1 https://github.com/Jamie-BitFlight/claude_skills

Made for: Claude Code.

Or install dh, the plugin that ships this one along with the rest of its 70 skills, 29 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-review-cli

README.md
[![agentmods](https://agentmods.dev/badge/skills/jamie-bitflight/claude_skills/code-review-cli/github.svg)](https://agentmods.dev/skills/jamie-bitflight/claude_skills/code-review-cli)
Your own site
<a href="https://agentmods.dev/skills/jamie-bitflight/claude_skills/code-review-cli"><img src="https://agentmods.dev/badge/skills/jamie-bitflight/claude_skills/code-review-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for code-review-cli

Your own site · 80×15
<a href="https://agentmods.dev/skills/jamie-bitflight/claude_skills/code-review-cli"><img src="https://agentmods.dev/badge/skills/jamie-bitflight/claude_skills/code-review-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,211 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00071 $0.01211
Opus 5.5 $0.00028 $0.00484
Sonnet 5.5 $0.00014 $0.00242
Haiku 4.5 $0.00007 $0.00121

Measured 7d ago against content hash 057c5ba18095, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

code-review-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/development-harness/skills/code-review-cli/SKILL.md · 120 lines

How it starts

The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLI Application Code Review Patterns

Stack-specific rules loaded by dh:code-reviewer when CLI entrypoints are detected (argparse, click, typer, commander.js, or similar argument parsing libraries).

Load /dh:review-principles before applying these checks. Establish the command's supported platforms and human/machine output contracts before prescribing an exact flag or exit code.

Exit Codes

  • Verify exit status distinguishes success from failure under the documented command contract, including partial-success or best-effort modes where supported.
  • Report success status after a required operation failed when callers cannot detect that failure; distinguish an overall failure from a documented recoverable warning.
  • Common conventions: 1 for general errors, 2 for usage/argument errors, 3+ for application-specific codes documented in --help
  • Verify fatal paths reach a non-zero exit through the framework or explicit exit handling; printing to stderr alone is not a failure signal for a caller that checks exit status.
# WRONG: exits 0 even on error
def main():
    try:
        run()
    except Exception as e:
        print(f"Error: {e}", file=sys.stderr)
    # implicit exit 0


# RIGHT: non-zero on error
def main():
    try:
        run()
    except Exception as e:
        print(f"Error: {e}", file=sys.stderr)
        sys.exit(1)

Help and Version Flags

  • Check that supported help/version interfaces are discoverable and usable by their intended callers; use --help and --version as conventions for new human-facing commands.
  • Verify help describes the actual options and examples, and version output agrees with the installed/distributed package's version source.
  • Help text must be consistent with actual behavior — stale help text is a blocking finding
  • Supported help and version requests must report success when they complete successfully.

stdin / stdout / stderr Separation

  • Progress indicators, status messages, and diagnostic output go to stderr
  • Data output (results to be piped or redirected) goes to stdout
  • Mixing diagnostic messages into stdout breaks pipe usage — this is a blocking finding for tools that produce structured output
  • Error messages go to stderr with a non-zero exit code

Read the full file on GitHub · 120 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago Changed · -1 lines 057c5ba18095
  2. 15d ago Changed · +5 lines 710a9f47da79
  3. 1mo ago First seen · 116 lines · 71 tokens per session scan A a3f0bc87daa5

Subscribe to this mod's changes

code-review-cli is a skill published in the GitHub repository Jamie-BitFlight/claude_skills (67 stars, last pushed 4d ago), licensed MIT. It adds 71 tokens to every session and 1,211 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

sync-bridge

Reviews and guides Chromium Sync Model API (DataTypeSyncBridge) implementations, including DataTypeStore persistence and forwards/backwards compatibility for sync specifics. Use when implementing or reviewing a DataTypeSyncBridge subclass, DataTypeStore usage, sync metadata persistence, conflict resolution, or…

chromium/chromium · 109 tokens

sync-model-processor

Reviews changes to Chromium Sync model internals in components/sync/model/, including ClientTagBasedDataTypeProcessor, ClientTagBasedRemoteUpdateHandler, ProcessorEntity, ProcessorEntityMetadata, and ProcessorEntityTracker. Use when modifying or reviewing processor state transitions, entity metadata tracking, conflict…

chromium/chromium · 98 tokens

adversarial-reviewer

Stress-test a code change for concrete correctness defects, unsafe assumptions, and failure modes. Use when the user explicitly asks for an adversarial review, a deep bug hunt, or to tear a change apart, or to check your own change before submitting it. Do not use for ordinary review, style feedback, or general…

emdash-cms/emdash · 72 tokens

gsd-ns-review

Invoke this Pi skill with /skill:gsd-ns-review.

open-gsd/gsd-core · 16 tokens

gitnexus

A code-graph analysis add-on for examining an existing codebase, including symbols, call paths, execution flows, and effects across repositories. It can query GitNexus through its command-line or MCP interfaces.

hashgraph-online/awesome-codex-plugins · 58 tokens

issue

Use when starting a chain from a GitHub issue — turning an issue URL or number into a triaged, planned, dispatched, and reviewed pull request. Classifies the thread (bug → root-cause discipline, feature → plan chain, question → drafted reply), synthesizes a spec from the issue's own acceptance criteria, then runs the…

jeremylongshore/tons-of-skills-marketplace · 115 tokens