Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add kimon1230/claude_extensions --skill critical-reviewgit clone --depth 1 https://github.com/kimon1230/claude_extensionsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kimon1230/claude_extensions/critical-review)<a href="https://agentmods.dev/skills/kimon1230/claude_extensions/critical-review"><img src="https://agentmods.dev/badge/skills/kimon1230/claude_extensions/critical-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kimon1230/claude_extensions/critical-review"><img src="https://agentmods.dev/badge/skills/kimon1230/claude_extensions/critical-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.01314 |
| Opus 5 | $0.00009 | $0.00657 |
| Sonnet 5 | $0.00003 | $0.00263 |
| Haiku 4.5 | $0.00002 | $0.00131 |
Grade A, and why
critical-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Critical Review
This skill must only be invoked from the main session, never from a subagent.
-
Identify the target document: a. If the user specified a file path or plan name, use that. b. Else determine the project name: check
origingit remote (parse last path component, strip.git) → git root basename → working directory basename. If ambiguous, ask the user. c. List files in~/.claude/plans/<project-name>/, sorted by modification time (most recent first). If the directory does not exist or contains no.mdfiles, tell the user: "No plan files found in~/.claude/plans/<project-name>/. Please specify a file path to review." and stop. d. Confirm with the user: "I'll review<filename>. Correct?" -
Round 1 — Spawn 4 parallel subagents (all four on the latest, most capable model — omit the
modeloverride so each inherits the session model rather than pinning a version-specific name; plan adjudication is precision work where a weaker model's false positives cost more verification time than the savings, so don't downgrade to a cheaper tier;CLAUDE_CODE_SUBAGENT_MODELoverrides if set):- Agent 1 — Correctness & Logic: Logic errors, wrong assumptions, API misuse, spec violations, contradictions within the plan.
- Agent 2 — Edge Cases & Robustness: Boundary conditions, empty/malformed inputs, error handling gaps, crash scenarios, encoding/Unicode issues.
- Agent 3 — Feasibility & Performance: Over-engineering, unrealistic scope, dependency risks, library limitations, performance concerns, scaling issues.
- Agent 4 — Testing & Completeness: Coverage gaps, untested paths, missing integration tests, weak assertions, unaddressed requirements.
Each subagent's prompt MUST include these instructions verbatim:
Read the target plan document. Read at most 5 source files directly relevant to your review — prefer files explicitly named in the plan. Do NOT read the entire codebase.
Return findings as a numbered list, max 10 items, highest severity first. Each item must have exactly these fields:
- Severity: critical | major | minor
- Location: file path and section/function name
- Issue: one-sentence description
- Fix: one-sentence suggested fix
Return NO other text, except: if you encounter tool errors or cannot read required files, report that as your first finding with severity "critical" and location "tooling".
-
After all subagents complete, synthesize in the main session:
- Deduplicate overlapping findings
- Prioritize by severity
- If a subagent returned zero findings, note that to the user
- Present a consolidated list to the user
-
If the user approves incorporating feedback: the main session (not a subagent) updates the plan document with a new revision and notes what changed.
-
Decision logging (runs after every user response — approval, rejection, or deferral): Append each decision to
~/.claude/plans/<project-name>/decision-log.md. Create the file if it doesn't exist. Append-only — never overwrite existing entries. Format per entry:## YYYY-MM-DD — [Plan filename] - **Finding:** [1-sentence summary] - **Decision:** accepted / rejected / deferred - **Rationale:** [why — from the user's response or the discussion] - **Alternatives considered:** [if any were discussed] -
Iterate until clean. After applying fixes, automatically start the next round:
- Spawn 2 parallel subagents that review ONLY the sections changed in the latest revision, both on the latest, most capable model (omit the
modeloverride so they inherit the session model; fix verification is high-stakes — don't downgrade to a cheaper tier;CLAUDE_CODE_SUBAGENT_MODELoverrides if set):- Agent A — Correctness, Logic & Edge Cases
- Agent B — Feasibility, Testing & Completeness
- Each subagent's prompt MUST include the same verbatim format template from step 2, modified to say: "Review ONLY the following changed sections: [list sections]. Read at most 3 source files relevant to the changes. Max 5 items."
- Synthesize, present to user, apply approved fixes, increment revision.
- Stop condition: a round produces 0 critical and 0 major findings. Minor-only findings do not block — note them and declare the plan ready.
- Safety valve: max 7 total rounds (1 initial + 6 follow-ups). If critical/major issues persist after 7 rounds, STOP — report what keeps recurring and flag to the user that the plan may need structural rework rather than incremental fixes.
- Spawn 2 parallel subagents that review ONLY the sections changed in the latest revision, both on the latest, most capable model (omit the
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 76 lines · 17 tokens per session scan A 72afce89dd47
critical-review is a skill published in the GitHub repository kimon1230/claude_extensions (4 stars, last pushed 2mo ago), licensed MIT. It adds 17 tokens to every session and 1,314 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
prompt-sensei
Stage-aware prompt coaching, prompt improvement, lookback analysis, prompting habit feedback, and local reports about prompt quality for AI coding agents such as Claude Code or Codex.
nil
The inverse of /sfl. Where sfl saved each window for later, /nil says later is now: it reopens them. You choose which to bring back.
headsup-config
Unified settings hub for headsup (Claude Code's iTerm2 status hooks). One command with a section as the first word, then that section's args. Sections: newtabs (New Claude Tab / Cmd-Opt-C launch mode), colors (idle/processing/waiting tab colors), label (this tab's title + badge), notify (the 'Claude is waiting' macOS…
sfl
Save For Later: checkpoint this window so a fresh session (or /nil) can resume it later. Use when the user types /sfl, "save for later", or "checkpoint this window". Writes a live per-window entry under /.claude/sfl/ (plus an optional durable note in the user's own memory system), then shows the green Saved-for-Later…
headsup-label
Set or clear the current Codex window label in AI Power Term or iTerm2. Use when the user wants a custom Codex tab title, badge, or watermark.
headsup
Show the default headsup health/status snapshot for Claude Code tabs. Use when the user types /headsup, asks whether headsup is working, or wants the quick overview rather than a specific focused command. For focused actions, route to /headsup-label, /headsup-config, /headsup-status, /headsup-diagnose…