team-design-review

team-design-review is a skill for Claude Code from ketor/cto-fleet. It costs 118 tokens per session (7,685 once invoked), scanned B, original, Apache-2.0.

A coordinated review process for technical designs and RFCs, which are documents proposing how a system should work. It uses independent readers, a deliberate challenger, scoring, and a final decision.

In plain words
What is it for?
Reviewing architecture proposals, technical plans, and design documents, then producing a structured report marked approved, conditionally approved, or rejected.
Why use it?
It exposes weaknesses and disagreements before a design is implemented.

Skill for Claude Code

Written for Claude Code: argument-hint in frontmatter. Also seen: reads .claude/ paths; names the AskUserQuestion tool.

Good fit Reviewing architecture proposals, technical plans, and design documents, then producing a structured report marked approved, conditionally approved, or rejected.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ketor/cto-fleet/team-design-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ketor/cto-fleet --skill team-design-review
Clone the repo
git clone --depth 1 https://github.com/ketor/cto-fleet

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for team-design-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/ketor/cto-fleet/team-design-review/github.svg)](https://agentmods.dev/skills/ketor/cto-fleet/team-design-review)
Your own site
<a href="https://agentmods.dev/skills/ketor/cto-fleet/team-design-review"><img src="https://agentmods.dev/badge/skills/ketor/cto-fleet/team-design-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for team-design-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/ketor/cto-fleet/team-design-review"><img src="https://agentmods.dev/badge/skills/ketor/cto-fleet/team-design-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 118 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,685 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00118 $0.07685
Opus 5 $0.00059 $0.03843
Sonnet 5 $0.00024 $0.01537
Haiku 4.5 $0.00012 $0.00768

Measured 11d ago against content hash 87cd8f1be631, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade B, and why

team-design-review scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- 目录路径:`/tmp/{team-name}/`(team lead 在 TeamCreate 后执行 `mkdir -p /tmp/{team-name} && chmod 700 /tmp/{team-name}`)
team-design-review/SKILL.md · 570 lines

How it starts

The opening of the file, as written. The whole thing — 570 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Preamble (run first)

_UPD=$(~/.claude/skills/cto-fleet/bin/cto-fleet-update-check 2>/dev/null || true)
[ -n "$_UPD" ] && echo "$_UPD" || true

If output shows UPGRADE_AVAILABLE <old> <new>: read ~/.claude/skills/cto-fleet/cto-fleet-upgrade/SKILL.md and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with 4 options, write snooze state if declined). If JUST_UPGRADED <from> <to>: tell user "Running cto-fleet v{to} (just updated!)" and continue.

参数解析:从 $ARGUMENTS 中检测以下标志:

  • --auto:完全自主模式(不询问用户任何问题,全程自动决策)
  • --once:单轮确认模式(将所有需要确认的问题合并为一轮提问,确认后全程自动执行)
  • --lang=zh|en:输出语言(默认 zh 中文)
  • 剩余部分为设计文档路径或 URL(支持本地文件、Git 仓库路径、HTTP/HTTPS URL)

解析后将标志从文档路径/URL 中移除。

模式 用户确认范围 条件节点处理
标准模式(默认) 确认评审范围 + 确认最终报告 正常询问用户
单轮确认模式--once 仅确认最终报告 自动决策 + 收尾确认
完全自主模式--auto 不询问用户 全部自动决策,收尾汇总所有决策

单轮确认模式下自动决策规则:

  • 评审维度不确定 → team lead 自行判断,报告中说明
  • 两位 reader 评分差距 > 2.5 分不可跳过,必须暂停问用户(熔断机制)
  • challenger 发现致命缺陷(可能导致方案完全不可行)不可跳过,必须暂停问用户(熔断机制)
  • reader 意见与 challenger 挑战存在矛盾 → analyst 自行综合判断,报告中说明理由

完全自主模式下:所有节点均自动决策,不询问用户。仅熔断机制(两位 reader 评分差距 > 2.5 分、challenger 发现致命缺陷)仍然生效,触发时必须暂停。

使用 TeamCreate 创建 team(名称格式 team-design-review-{YYYYMMDD-HHmmss},如 team-design-review-20260311-143022,避免多次调用冲突),你作为 team lead 按以下流程协调。

文件交接规范(File-Based Handoff)

所有 agent 间传递详细报告时,必须采用文件交接模式(防止上下文溢出触发 20MB 限制):

  1. 写入文件:将完整报告写入团队工作目录:
    • 目录路径:/tmp/{team-name}/(team lead 在 TeamCreate 后执行 mkdir -p /tmp/{team-name} && chmod 700 /tmp/{team-name}
    • 单个文件 ≤ 2000 行;超大报告拆分为 summary + details 文件
  2. 发送引用:通过 SendMessage 仅发送(≤500 字符):
    • 文件路径(1 行)
    • 关键摘要(含核心指标/发现/评分)
  3. 按需读取:接收方使用 Read 按需读取文件,发送方不内联完整内容
  4. 路径转发:team lead 转发报告时只转发文件路径 + 摘要,不 Read 后再 SendMessage
  5. 遵从校验:team lead 收到超 1000 字符且不含 /tmp/team- 路径前缀的消息时,要求 agent 以文件交接模式重发

Read the full file on GitHub · 570 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 570 lines · 0 tokens per session scan B 87cd8f1be631

Subscribe to this mod's changes

team-design-review is a skill published in the GitHub repository ketor/cto-fleet (5 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 118 tokens to every session and 7,685 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

insight-error-page

Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…

vercel/next.js · 83 tokens

next-cache-components-optimizer

Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…

vercel/next.js · 170 tokens

next-partial-prefetching-adoption

Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…

vercel/next.js · 103 tokens