skill-review

skill-review is a skill for Claude Code from mindbox-cloud/agent-skills. It costs 141 tokens per session (4,931 once invoked), scanned A, original, MIT.

A plain-language checker for Agent Skills, which are instruction packages that guide coding agents. It reviews their structure, workflow, supporting files, and links, then produces a report.

In plain words
What is it for?
Use it to review a skill before sharing it, explain its quality to a product owner, or get a basic check of its files and instructions.
Why use it?
It helps non-specialists spot missing pieces, confusing instructions, and broken references without having to understand skill-writing conventions.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions subagents; names the TodoWrite tool.

Part of the skill-review plugin — 1 skill shipped together

Good fit Use it to review a skill before sharing it, explain its quality…

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/mindbox-cloud/agent-skills/skill-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add mindbox-cloud/agent-skills --skill skill-review
Clone the repo
git clone --depth 1 https://github.com/mindbox-cloud/agent-skills

Made for: Claude Code.

Or install skill-review, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skill-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/mindbox-cloud/agent-skills/skill-review.svg)](https://agentmods.dev/skills/mindbox-cloud/agent-skills/skill-review)
Your own site
<a href="https://agentmods.dev/skills/mindbox-cloud/agent-skills/skill-review"><img src="https://agentmods.dev/badge/skills/mindbox-cloud/agent-skills/skill-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 141 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,931 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00141 $0.04931
Opus 5 $0.00071 $0.02465
Sonnet 5 $0.00028 $0.00986
Haiku 4.5 $0.00014 $0.00493

Measured 6d ago against content hash 3de9292cf76a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

skill-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/skill-review/skills/skill-review/SKILL.md · 363 lines

How it starts

The opening of the file, as written. The whole thing — 363 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill Review Novice — Autonomous Instruction for the Chat Agent

Purpose: You are an AI reviewer of Agent Skills for non-specialists. The user gives you an isolated skill folder (SKILL.md + optional references/, scripts/, assets/). Your task is to run an autonomous Standard Review and produce a structured report with issues, overall statistics, recommendations, and an "Antipattern Bingo" section.

Mode: Standard Review. Clear report without jargon. The set of sub-agents depends on the selected scope.


Preconditions

  1. Before Step 0, check Task, TodoWrite, and file access for the skill. If anything is missing — stop and report what is lacking.
  2. If the user selects logging ON in Step 0, verify file write capability. If write is unavailable — stop and suggest disabling logging.

CRITICAL — Mandatory Rules

  • Questions to the user — only in Step 0. Mandatory question: context of use + logging. Ask for log path confirmation only if the user enabled logging.
  • A TODO plan is MANDATORY from the very start of the review.
  • The TODO plan must cover the full review scope. For every 3–4 check items there should be a separate TODO item. Do not create one giant TODO for the entire review.
  • Update statuses as the review progresses: pendingin_progresscompleted.
  • If the folder is not a valid skill directory (no SKILL.md) or contains more than one skill — see ## Troubleshooting, problem 1. Do not abort the check silently.
  • On read problems, coverage gaps, or sub-agent failure — capture limitations and perform a residual review. On write problems with logs=on — notify the user and stop the review.
  • In sub-agent mode (>= 500 lines), the orchestrator must delegate checklist checks to sub-agents via Task. Running a full review in the main context instead of launching sub-agents is a workflow violation. Self-performed checklist analysis by the orchestrator is only acceptable as a local fallback after a specific sub-agent fails.
  • Review goal: understand whether the skill works in the context being reviewed (for the author, for a colleague, in a repository).
  • Novice does not compute a maturity stage. Scope is determined by the user's choice. The report shows findings by stage, overall statistics, and recommendations — without a "this is stage N" label.
  • Language: conduct the entire review (report, logs, TODO, sub-agent briefs) in the language the user started the conversation in.
  • Report tone: language must be understandable to a product owner or manager. Avoid technical checklist jargon. In PASS and N/A sections — list checks without IDs, only human-readable descriptions. In FAIL and WARNING sections — IDs are acceptable for traceability, but must be accompanied by a plain-language description.

Read the full file on GitHub · 363 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 363 lines · 141 tokens per session scan A 3de9292cf76a

Subscribe to this mod's changes

skill-review is a skill published in the GitHub repository mindbox-cloud/agent-skills (3 stars, last pushed 3mo ago), licensed MIT. It adds 141 tokens to every session and 4,931 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

release

Cut and publish a new GitHub release for the ClaudeCodeNotify macOS app. Use this whenever the user wants to release, ship, publish, cut, or tag a new version — phrases like "create a release", "ship the release", "publish v1.0.x", "tag and release the app", "cut a new version", or "make a release". It builds the…

narlei/claudecodenotify · 147 tokens

implementation-notes

Maintain an IMPLEMENTATIONNOTES.md decision log during any multi-step implementation session. Use this in EVERY session that involves writing or modifying code across more than one file, or any session expected to run longer than a few tool calls. Records decisions, deviations from plan, and open questions so nothing…

orenluxy/fable-method · 66 tokens

fable-method

The routing logic of the Fable Method - decides which unknowns-discovery technique (blindspot-pass, interview-me, prototype-first, implementation-notes, merge-quiz) applies to the current task, and which to skip. Consult this at the START of any non-trivial task, or when the user says "fable", "the method", "how…

orenluxy/fable-method · 92 tokens

blindspot-pass

Run a blindspot scan to surface the user's unknown unknowns BEFORE implementing a task. Use this whenever the user starts a non-trivial task in a domain they say (or appear) to be unfamiliar with, whenever they say "blindspot", "unknowns", "what am I missing", "before we start", or when a request is vague enough that…

orenluxy/fable-method · 95 tokens

convergence-guard

Stop-loss discipline for implementation sessions - detect fix-loops and runaway token burn, and stop to replan instead of patching. Consult during any debugging or implementation session, especially when tests keep failing, the same file keeps being edited, or the user mentions stoploss, token budget, fix loops, or…

orenluxy/fable-method · 74 tokens

interview-me

Interview the user one question at a time to resolve ambiguities before or during implementation. Use whenever the user says "interview me", "ask me questions", "make sure you understand", or before starting any task where multiple ambiguous decisions would otherwise be guessed silently. Also invocable as…

orenluxy/fable-method · 69 tokens