Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/lyonzin/knowledge-rag/rag-code-reviewnpx skills add lyonzin/knowledge-rag --skill rag-code-reviewgit clone --depth 1 https://github.com/lyonzin/knowledge-ragWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00083 | $0.01766 |
| Opus 5 | $0.00042 | $0.00883 |
| Sonnet 5 | $0.00017 | $0.00353 |
| Haiku 4.5 | $0.00008 | $0.00177 |
Grade A, and why
rag-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 172 lines — stays where its author put it; the contents beside it link to each section on GitHub.
rag-code-review — review against team standards, not the internet
When to use this skill
Trigger when the user asks:
- "Review this PR / code / diff"
- "Any issues with this?"
- "Does this look right?"
- "Is this idiomatic?"
- "Should I merge this?"
- Any critique-style prompt on a code artifact
What this skill commits to
Before offering ANY review comment, the agent consults the corpus for:
- ADRs governing the area (auth, retries, error handling, naming, dependencies…)
- Existing patterns — similar files that show the "how we do this" convention
- Prior incidents touching the code being changed
Review comments then read as "per ADR-XXXX we do Y here" rather than "generally you should Z".
Steps
-
Identify the "area" of the change. From the diff / snippet, extract:
- The file path or module name (e.g.
services/payment/,mcp_server/security.py) - The concern touched (auth, retries, logging, config, ingestion, search, storage…)
- Any new dependencies, endpoints, or public API changes
- The file path or module name (e.g.
-
Search for governing ADRs / standards:
search_knowledge(query="<concern> ADR standard", max_results=5)Example:
search_knowledge(query="retry policy ADR") -
Find similar existing files (patterns to follow):
search_similar(filepath="<the file being changed>", max_results=5)If the file is new, use
search_knowledgewith the file's purpose instead. -
Look for prior incidents / postmortems on adjacent code:
search_knowledge(query="<component> incident postmortem", max_results=3) -
Structure the review comments:
### Findings 1. **[required]** Per ADR-0031 [docs/adr/0031-retries.md] the retry policy is "3 attempts, exponential backoff". This PR uses 5 attempts — either match the ADR or open a follow-up ADR to document the exception. 2. **[suggestion]** The error-handling shape here differs from what `services/payment/refund_service.py` does [search_similar hit]. Consider aligning for consistency. 3. **[nit]** Missing docstring on `_new_helper()`. Team standard is ≥80% docstring coverage (interrogate gate, per CONTRIBUTING.md). ### Not commented on Style / naming / whitespace — those are ruff's job. Reviewed only what ruff cannot catch.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 172 lines · 83 tokens per session scan A b1b43b276f31
rag-code-review is a skill published in the GitHub repository lyonzin/knowledge-rag (262 stars, last pushed 5d ago), licensed MIT. It adds 83 tokens to every session and 1,766 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
rag-perf
Performance benchmarking for a deployed NVIDIA RAG Blueprint server: profiling pass + aiperf load test driven by a single YAML config. Not for accuracy / RAGAS scoring (use rag-eval) or for deploying / repairing services (use rag-blueprint).
rag-blueprint
NVIDIA RAG Blueprint — deploy, configure, troubleshoot, and manage. Handles any RAG action: deploy, install, start, enable, disable, toggle, change, configure, troubleshoot, debug, fix, shutdown, stop, or tear down any RAG feature or service (Agentic RAG, VLM, guardrails, query rewriting, models, search, ingestion…
rag-eval
Filesystem RAG benchmarks: corpus/, train.json, evaluaterag.py (RAGAS quality). Not for prod monitoring, latency/throughput benchmarking (use rag-perf), or evals outside this repo layout.
faiss
Fast vector similarity search at billion scale.
assessing-vector-and-embedding-weaknesses
Test vector stores for embedding inversion, cross-tenant leakage, and poisoning.
pinecone:n8n
Build n8n workflows using the Pinecone Assistant node or Pinecone Vector Store node. Use when building RAG pipelines, chat-with-docs workflows, configuring Pinecone nodes in n8n, troubleshooting Pinecone n8n nodes, or asking about best practices for Pinecone in n8n.