roborev-review

roborev-review is a skill for Claude Code from kenn-io/roborev. It costs 17 tokens per session (1,451 once invoked), scanned A, a copy of roborev-design-review-branch, MIT.

A command that sends a specific commit to RoboRev for an automated code review, optionally focused on security or design.

In plain words
What is it for?
Use it only when explicitly invoking `/roborev-review`, then provide a commit and optional review type or panel to receive the completed findings.
Why use it?
It prevents the review process from being started accidentally when someone is only discussing existing findings.

Skill for Claude Code

Written for Claude Code: disable-model-invocation in frontmatter. Also seen: mentions CLAUDE.md; mentions Claude Code.

Part of the roborev plugin — 10 skills shipped together

Good fit Use it only when explicitly invoking /roborev-review, then provide a commit and optional review type or panel to receive the completed findings.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/kenn-io/roborev/roborev-review
About the project

roborev is a background code-review system for AI coding agents that checks each Git commit and records findings in a review database. It helps developers catch issues in generated code while they work. Catalogue add-ons connect its findings to agent workflows and can support iterative review and fixing.

kenn-io/roborev · 1,693 stars · on GitHub · roborev.io

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add kenn-io/roborev --skill roborev-review
Clone the repo
git clone --depth 1 https://github.com/kenn-io/roborev

Made for: Claude Code.

Or install roborev, the plugin that ships this one along with the rest of its 10 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for roborev-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/kenn-io/roborev/roborev-review/github.svg)](https://agentmods.dev/skills/kenn-io/roborev/roborev-review)
Your own site
<a href="https://agentmods.dev/skills/kenn-io/roborev/roborev-review"><img src="https://agentmods.dev/badge/skills/kenn-io/roborev/roborev-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for roborev-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/kenn-io/roborev/roborev-review"><img src="https://agentmods.dev/badge/skills/kenn-io/roborev/roborev-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 17 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,451 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 83% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00017 $0.01451
Opus 5 $0.00009 $0.00726
Sonnet 5 $0.00003 $0.00290
Haiku 4.5 $0.00002 $0.00145

Measured 9d ago against content hash 7ceef9bd2ba1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

roborev-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

83% identical to roborev-design-review-branch — 90 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

internal/skills/claude/roborev-review/SKILL.md · 164 lines

How it starts

The opening of the file, as written. The whole thing — 164 lines — stays where its author put it; the contents beside it link to each section on GitHub.

roborev-review

Request a code review for a commit and present the results.

Usage

/roborev-review [commit] [--type security|design] [--panel <name>|none]

Explicit invocation only

Invocation must be explicit: literal personal /roborev-review, or structured Claude Code skill selection. Requests such as “review this commit” without one of these explicit mechanisms must use native behavior and must not run roborev.

Sandbox access

roborev uses a local daemon. If a command fails with permission denied, the sandbox may be blocking access to its loopback port or Unix socket. Retry the same Bash command with dangerouslyDisableSandbox: true. Do not start or restart the daemon because a sandboxed status probe cannot reach it.

When NOT to invoke this skill

Do NOT invoke this skill when the user is presenting or pasting existing review results. Messages that contain review findings, verdicts, or summaries are outputs — not requests to start a new review.

IMPORTANT

This skill requires you to execute bash commands to validate the commit and launch the review. The task is not complete until the background review finishes and you present the results to the user.

These instructions are guidelines, not a rigid script. Use the conversation context. Skip steps that are already satisfied. Defer to project-level CLAUDE.md instructions when they conflict with these steps.

Instructions

When the user invokes /roborev-review [commit] [--type security|design] [--panel <name>|none]:

1. Validate inputs

If a commit ref is provided, use the commit-provided command snippet below; it stores and validates the ref before invoking roborev review.

If validation fails, inform the user the ref is invalid. Do not proceed.

2. Build the command

Construct the review command:

If no commit is specified:

roborev review --wait [--type <type>] [--panel <name>|none]

If a commit is specified:

read -r commit <<'ROBOREV_REF'
<commit>
ROBOREV_REF
git rev-parse --verify -- "$commit^{commit}" || exit 1
roborev review "$commit" --wait [--type <type>] [--panel <name>|none]

Read the full file on GitHub · 164 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 164 lines · 17 tokens per session scan A 7ceef9bd2ba1

Subscribe to this mod's changes

roborev-review is a skill published in the GitHub repository kenn-io/roborev (1,693 stars, last pushed yesterday), licensed MIT. It adds 17 tokens to every session and 1,451 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 83% identical to roborev-design-review-branch, differing in 90 lines, and is treated as a copy.