Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add neuromechanist/research-skills --skill pr-review-toolkitgit clone --depth 1 https://github.com/neuromechanist/research-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/neuromechanist/research-skills/pr-review-toolkit)<a href="https://agentmods.dev/skills/neuromechanist/research-skills/pr-review-toolkit"><img src="https://agentmods.dev/badge/skills/neuromechanist/research-skills/pr-review-toolkit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/neuromechanist/research-skills/pr-review-toolkit"><img src="https://agentmods.dev/badge/skills/neuromechanist/research-skills/pr-review-toolkit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.01337 |
| Opus 5.5 | $0.00036 | $0.00535 |
| Sonnet 5.5 | $0.00018 | $0.00267 |
| Haiku 4.5 | $0.00009 | $0.00134 |
Grade A, and why
pr-review-toolkit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PR Review Toolkit
Portable PR review skill adapted for the project plugin. The upstream Anthropic
pr-review-toolkit inspired the review lenses; this implementation keeps the
procedure and rubrics in references/ so Codex, Claude Code, and Copilot can use
the same source of truth.
Review Lenses
code: project rules, bugs, contracts, maintainability, security, and performance.tests: behavioral coverage, edge cases, negative paths, and brittle tests.errors: silent failures, broad catches, hidden fallbacks, and unhelpful user-facing errors.comments: comment accuracy, stale documentation, redundant comments, and missing rationale.types: invariants, validation boundaries, encapsulation, and illegal states.simplify: clarity and refactoring opportunities while preserving behavior.all: all applicable lenses. This is the default.
Dispatch
Prefer a fresh-context reviewer when the current tool supports subagents. The
reviewer must read references/review-procedure.md and
references/review-rubrics.md before producing findings.
For Codex, use references/review-panel-protocol.md to select the bounded
native-subagent panel before falling back. The default panel is three Luna/max
reviewers grouped by risk; it is not a six-agent lens swarm.
- Claude Code: run
Agent(subagent_type: "project:pr-review-toolkit", ...)if the bundled agent is available; otherwise follow the fallback branch. - Codex CLI: invoke the
project-preflightskill's bundled<project-plugin-root>/bin/project-preflight --format jsonexecutable by absolute path first; do not assume the plugin'sbin/directory is onPATH. When the scope isall(default) or the caller requests a pre-merge review,native_agent_status=available, and nosingle/inlineopt-out is present, dispatch the bounded panel inreferences/review-panel-protocol.mdthrough the current native subagent surface. Usegpt-5.6-lunaatmaxeffort by default, cap the panel at three reviewers, require structured accounting, synthesize and verify findings, and close completed agents. If native subagents are unavailable, or the caller selects a single/inline review, use the existing inline procedure. The copiedagents/templates/pr-review-toolkit.tomlremains an opt-in configured-agent path when the current Codex surface lacks direct native dispatch. - Copilot CLI: plugin installation exposes this skill and, through
.github/plugin/plugin.json, the.agent.mdreviewer inagents/templates/. Invoke that configured agent when the current Copilot surface supports custom agents. If running outside a plugin install, copyagents/templates/pr-review-toolkit.agent.mdto.github/agents/or~/.copilot/agents/. If no custom agent is available, use the fallback branch. - Fallback: run the review inline in the current context after reading both reference files. This is the portable default path when preflight reports no native subagents or the caller opts out.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed · +2 lines 4317e3dbc15a
- 1mo ago Changed · +7 lines 93e9ea5e98fa
- 1mo ago Changed 8458b70d3584
- 1mo ago First seen · 76 lines · 89 tokens per session scan A 3482d0b40507
pr-review-toolkit is a skill published in the GitHub repository neuromechanist/research-skills (50 stars, last pushed 4d ago), licensed BSD-3-Clause. It adds 89 tokens to every session and 1,337 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
godot-code-review
Use when reviewing GDScript or C# Godot code — checklist of best practices, common anti-patterns, and Godot-specific pitfalls. Triggers on "review this script", "check my code", "any issues with this", "what's wrong with this code", including a short pasted snippet.
powershell-refactor
Refactor existing PowerShell scripts to simplify flow, reduce duplication, standardize naming and structure, and tighten behavior without changing the intended outcome.
issue-creation
Trigger: issue creation, bug reports, feature requests, or issue approval. Create and triage GitHub issues from repository evidence.
skill-audit
Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review.
skill-review-response
Use when a reviewer, CI bot, or another AI leaves feedback to address.
skill-improver
Trigger: improve skills, audit skills, refactor skills, skill quality. Audit and upgrade existing LLM-first skills.