codereviewer

codereviewer is a skill for Claude Code, Codex from mmadfox/swag2mcp. It costs 60 tokens per session (1,597 once invoked), scanned A, original, Apache-2.0.

A strict code-review guide for a specific Go project called swag2mcp. It checks changes against that project’s own developer rules, including naming, formatting, errors, concurrency, and tests.

In plain words
What is it for?
Reviewing swag2mcp Go code for compilation and security issues, naming and formatting, error handling, concurrency, testing patterns, and required conventions.
Why use it?
It gives reviews a consistent standard and catches project-specific problems that a general Go review might miss.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/mmadfox/swag2mcp/codereviewer
Any agent
npx skills add mmadfox/swag2mcp --skill codereviewer
Clone the repo
git clone --depth 1 https://github.com/mmadfox/swag2mcp

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for codereviewer

README.md
[![agentmods](https://agentmods.dev/badge/skills/mmadfox/swag2mcp/codereviewer.svg)](https://agentmods.dev/skills/mmadfox/swag2mcp/codereviewer)
Your own site
<a href="https://agentmods.dev/skills/mmadfox/swag2mcp/codereviewer"><img src="https://agentmods.dev/badge/skills/mmadfox/swag2mcp/codereviewer.svg" alt="Measured on agentmods" height="20"></a>
Per session 60 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,597 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00060 $0.01597
Opus 5 $0.00030 $0.00798
Sonnet 5 $0.00012 $0.00319
Haiku 4.5 $0.00006 $0.00160

Measured 5d ago against content hash bbe02b36326c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

codereviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/codereviewer/SKILL.md · 102 lines

How it starts

The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Go Code Reviewer Skill — swag2mcp

🎯 ROLE & CORE PRINCIPLE

You are a Principal Go Developer and a strict Code Reviewer for the swag2mcp project. Your absolute Source of Truth is the set of rules defined in the godeveloper skill.

  • If a rule in godeveloper contradicts general Go best practices, the godeveloper rule has absolute priority.
  • You must not suggest changes that violate godeveloper.
  • If the code is perfect and fully complies with the rules, you must explicitly state this.

🧠 REVIEW ALGORITHM (CHAIN OF THOUGHT)

Before generating your response, you are required to mentally evaluate the code against the following categories:

  1. Compilation & Security: Are there obvious compilation errors? Are there security vulnerabilities (e.g., Zip Slip without filepath.Rel)?
  2. Naming & Formatting: MixedCase usage, correct acronyms (ServeHTTP), file names (snake_case.go), import grouping, early returns (guard clauses), and mutex granularity.
  3. Error Handling: Errors are never ignored (_) and are wrapped using %w. For LLM responses, LLMError is strictly used (correct code, <=80 chars per line, ASCII only, explains the problem + next steps).
  4. Architecture & Patterns: Context is always the first parameter and is NEVER stored in structs. Interfaces belong to the consumer package. Request/Response structs have validate and jsonschema tags.
  5. Testing (if applicable): Presence of t.Parallel(), use of require instead of assert, table-driven tests, use of newTestService()/seedTestData(), and absence of time.Sleep.

✅ REVIEW CHECKLIST (FROM godeveloper)

1. Naming & Files

  • Variables/Functions: MixedCase, no underscores. Short names for local variables, descriptive for exported ones.
  • Acronyms: ID, HTTP, URL (not Id, Http, Url).
  • Files: lowercase with underscores (oauth2_cc.go, parse_v3.go).
  • Receivers: 1-2 characters reflecting the type (s *Service, h *handler), consistent across the type.
  • Interfaces: -er suffix for single-method interfaces (Authenticator), belong to the consumer package.

Read the full file on GitHub · 102 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 102 lines · 60 tokens per session scan A bbe02b36326c

Subscribe to this mod's changes

codereviewer is a skill published in the GitHub repository mmadfox/swag2mcp (0 stars, last pushed 24d ago), licensed Apache-2.0. It adds 60 tokens to every session and 1,597 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

goai

GoAI is a Go SDK for AI applications. One unified API across 25+ LLM providers. Inspired by the Vercel AI SDK, adapted to Go idioms (generics, interfaces, channels).

zendev-sh/goai · 0 tokens

wasm

WebAssembly (WASM) integration, WASI, component model, Rust/Go to WASM compilation. Use when implementing WASM modules, browser/edge compute, or polyglot runtime.

TheBeardedBearSAS/claude-craft · 43 tokens

go-source-documentation

Add idiomatic, godoc-compliant documentation to Go source and test files. Use when user asks to document Go files, add doc comments, improve Go documentation, or mentions /document-go. Covers file headers, package comments, types, functions, interfaces, constants, variables, tests (with detailed explanations)…

jmrplens/gitlab-mcp-server · 75 tokens

increase-test-coverage

Increase Go test coverage to 90%+ using a Research → Plan → Implement pipeline. Analyzes coverage gaps, generates table-driven tests with httptest mocks, and validates results with go test -coverprofile. Designed for Go MCP server projects using the official go-sdk and gitlab.com/gitlab-org/api/client-go/v2.

jmrplens/gitlab-mcp-server · 72 tokens

upstream-contribution

Contribute bug fixes or features to upstream projects (gitlab.com/gitlab-org/api/client-go). Use when: API gap found, client-go bug, missing endpoint wrapper.

jmrplens/gitlab-mcp-server · 40 tokens

building-glamorous-tuis

Build terminal UIs with Charmbracelet (Bubble Tea, Lip Gloss, Gum). Use when: Go TUI, shell prompts/spinners, "make CLI prettier", adaptive layouts, async rendering, focus state machines, sparklines, heatmaps, kanban boards, SSH apps.

nikships/skills-registry · 65 tokens