Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mahmoud20138/Tradecraft --skill code-reviewgit clone --depth 1 https://github.com/mahmoud20138/TradecraftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mahmoud20138/tradecraft/code-review)<a href="https://agentmods.dev/skills/mahmoud20138/tradecraft/code-review"><img src="https://agentmods.dev/badge/skills/mahmoud20138/tradecraft/code-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mahmoud20138/tradecraft/code-review"><img src="https://agentmods.dev/badge/skills/mahmoud20138/tradecraft/code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.00500 |
| Opus 5 | $0.00018 | $0.00250 |
| Sonnet 5 | $0.00007 | $0.00100 |
| Haiku 4.5 | $0.00004 | $0.00050 |
Grade B, and why
code-review scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codemediumSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://cli.coderabbit.ai/install.sh | sh Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://cli.coderabbit.ai/install.sh | sh What it actually says
CodeRabbit Code Review
AI-powered code review using CodeRabbit. Enables autonomous development workflows where you can implement features, review code, and fix issues without manual intervention.
When to Use
When user asks to:
- Review code changes / Review my code / Review this
- Check code quality / Code quality check
- Find bugs or security issues / Check for bugs / Find issues
- Security review / Security check
- Get feedback on their code / PR review / Pull request feedback
- Review staged/uncommitted changes
- What's wrong with my code / What's wrong with my changes
- Run coderabbit / Use coderabbit
- Implement a feature and review it
- Fix issues found in review
How to Review
1. Check Prerequisites
# Check CLI
coderabbit --version 2>/dev/null
# Check auth
coderabbit auth status 2>&1
If CLI not installed, tell user:
Please install CodeRabbit CLI first:
curl -fsSL https://cli.coderabbit.ai/install.sh | sh
If not authenticated, tell user:
Please authenticate first by running in your terminal:
coderabbit auth login
2. Run Review
coderabbit review --plain
Options:
-t all- All changes (default)-t committed- Committed changes only-t uncommitted- Uncommitted changes only--base main- Compare against specific branch
3. Present Results
Group findings by severity and create a task list for issues found.
4. Fix Issues (Autonomous Workflow)
When user requests implementation + review:
- Implement the requested feature
- Run
coderabbit review --plain - Create task list from findings
- Systematically fix each issue
- Re-run review if needed until critical issues resolved
Documentation
For more details: https://docs.coderabbit.ai/cli/claude-code-integration
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 85 lines · 36 tokens per session scan B 01111539cbe4
code-review is a skill published in the GitHub repository mahmoud20138/Tradecraft (15 stars, last pushed 4mo ago), licensed MIT. It adds 36 tokens to every session and 500 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
code-review
Automated code review with checklist and quality gates.
code-review
A code-review and quality-analysis skill written in Chinese. It is intended to inspect code, find potential problems, and suggest improvements.
dev-loop
Research → Execute → Dual-Review Loop (Code Quality + Issue Resolution) bis beide Reviews bestanden.
review-loop
Iterative code review — fix P1+P2 until clean, report P3 as an offer.
code-review
Code review for issues, style consistency, best practices—use for full code evaluation; not for debugging specific errors or fixing individual style violations.
code-review
Reviews code snippets and provides improvement suggestions.