Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add muratsilahtaroglu/claude-code-starter-kit --skill keel-phase-reviewgit clone --depth 1 https://github.com/muratsilahtaroglu/claude-code-starter-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/muratsilahtaroglu/claude-code-starter-kit/keel-phase-review)<a href="https://agentmods.dev/skills/muratsilahtaroglu/claude-code-starter-kit/keel-phase-review"><img src="https://agentmods.dev/badge/skills/muratsilahtaroglu/claude-code-starter-kit/keel-phase-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/muratsilahtaroglu/claude-code-starter-kit/keel-phase-review"><img src="https://agentmods.dev/badge/skills/muratsilahtaroglu/claude-code-starter-kit/keel-phase-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.01078 |
| Opus 5.5 | $0.00012 | $0.00431 |
| Sonnet 5.5 | $0.00006 | $0.00216 |
| Haiku 4.5 | $0.00003 | $0.00108 |
Grade A, and why
keel-phase-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/keel-phase-review — end-of-phase checkpoint
Run at the end of a phase (rules.md §2). Report the checklist with pass/fail; fix gaps before proposing a commit.
Checklist:
- Working product — the phase's feature runs; include a one-line "how to test this" for the user. What only a human can verify (browser/UX, prod host, real creds) is handed off as a recipe and tracked in HANDOVER (d) — never silently assumed passed.
- Tests — relevant unit/integration (e2e if needed) written and run via
make test(auto-log →reports/tests/<date>/); the phase's committed summary written toreports/tests/<date>-phase<N>.md(suites, counts, what was verified, and measured durations: suite runtime + the gate's key step timings — WHAT to time is project-specific (E2E latency, first token, query ms, batch throughput, …) — side-by-side with the previous phase's numbers so slowdowns surface at the gate, not in production); new test/fixture files one-lined in their folder README; repeatedly-run corpora (golden / regression / pilot question sets) exist as DATA files with stable ids —tests/fixtures/or a corpus dir indexed fromtests/README.md, never only inline in test code (§10.39 feeds them: every point-fixed failing case joins one); one-line summary in HANDOVER.md (rules.md §2.8); bulk outputs passed the/keel-pilotgates where applicable. Ad-hoc reports (speed tests, golden proofs) complementreports/tests/<date>-phase<N>.md— never replace it. - Architecture — every structural change recorded in
docs/architecture.md: new/changed module rows AND the component overview resynced with them (the module table is the source of truth — a stale top diagram fails this item, same contract as PLAN.md's table → diagram; rules.md §1.6). - PLAN.md (do not skip — this is what marks the phase
done) — the finished phase's gate flipped todone(+ next phase setwip, Current focus updated, diagram regenerated from the table — see/keel-plan). The Stop hookplan-phase-nudgereminds you if you end a turn having cleared awipphase's## Nowwithout flipping it. - ADRs — any significant decision captured as an ADR in
docs/adr/(+ index row). - Docs — CLAUDE.md / docs/user_manual.md updated, or the review states why nothing user-facing
changed. A still-template
user_manual.mdwhile shipped phases have user-facing behavior = FAIL (the SessionStart hook warns on this too — silence is not a pass). - HANDOVER.md — session block added (run
/keel-handover); caps respected (else/keel-distill). - TASKS.md — done items deleted (one-liners in HANDOVER (a));
## Discoveredtriaged. - LESSONS.md — this phase's agreed rules/tests/gotchas written (rules §9.31).
- Audit —
/keel-auditrun over this phase's range via the skill — it writes.claude/last-audit; an inline audit that skips the marker leaves the audit-due nudge firing forever (or consciously skipped with a reason); its approved fixes applied (rules.md §4.11). - Code review —
/code-review(or the project's review flow) run over this phase's diff; each finding triaged through theverifiersubagent (adversarial "try to refute") before any fix is applied: CONFIRMED → fix now · REFUTED → record with its counter-evidence · UNCERTAIN → ask the user (default: don't fix). Reviewer output is a claim, not a verdict (rules.md §4.11); deferred items get one line each inTASKS.md ## Discovered. The phase gate is the review boundary — cheaper than reviewing every session, earlier than reviewing at release. - Secrets —
git diff --cachedreviewed; no.env/secrets staged (rules.md §6.18). - Deps — if dependencies changed: lock refreshed +
pip-auditclean (rules.md §7.23).
Then propose an approved commit + push (rules.md §6.15). Never push without user approval.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 53 lines · 29 tokens per session scan A 21634f9b27d6
keel-phase-review is a skill published in the GitHub repository muratsilahtaroglu/claude-code-starter-kit (9 stars, last pushed 1mo ago), licensed MIT. It adds 29 tokens to every session and 1,078 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
duckduckgo-search
Free keyless web, news, and image search via ddgs.
mcporter
List, auth, and call MCP servers/tools from the terminal.
article-writing
Write articles, guides, blog posts, tutorials, newsletter issues, and other long-form content in a distinctive voice derived from supplied examples or brand guidance. Use when the user wants polished written content longer than a paragraph, especially when voice consistency, structure, and credibility matter.
mem0-oss-to-platform
Plan, then execute, a migration of a project from the mem0 open-source / self-hosted SDK (local Memory class) to the mem0 Platform / hosted SDK (MemoryClient). TRIGGER when: the developer wants to move, switch, or migrate mem0 off OSS/self-hosted to the hosted API, e.g. "migrate my mem0 setup to the platform", "switch…
safe-refactor
Restructure code while preserving behavior. Use for extraction, consolidation, ownership moves, or cleanup where verification must bracket structural edits.
create-tech-design
Only use when the user explicitly invokes this skill by name.