nobrainer-review

nobrainer-review is a skill for Claude Code from nobrainer-tech/nobrainer-tech-skills. It costs 67 tokens per session (1,490 once invoked), scanned A, original, MIT.

A structured review of a specific code change, module, or release. It checks current code for real, reachable defects and removes findings based only on guesses.

In plain words
What is it for?
Use it for a normal implementation closeout, an adversarial bug hunt, or a release check covering acceptance, security, builds, migrations, and rollback evidence.
Why use it?
It helps teams distinguish actionable bugs from speculative review noise before merging or releasing code. It also keeps the review focused on the requested scope.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the nobrainer-tech-skills plugin — 15 skills shipped together

Good fit Use it for a normal implementation closeout, an adversarial bug hunt, or a release check covering acceptance, security, builds, migrations, and rollback evidence.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add nobrainer-tech/nobrainer-tech-skills --skill nobrainer-review
Clone the repo
git clone --depth 1 https://github.com/nobrainer-tech/nobrainer-tech-skills

Made for: Claude Code.

Or install nobrainer-tech-skills, the plugin that ships this one along with the rest of its 15 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for nobrainer-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review/github.svg)](https://agentmods.dev/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review)
Your own site
<a href="https://agentmods.dev/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review"><img src="https://agentmods.dev/badge/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for nobrainer-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review"><img src="https://agentmods.dev/badge/skills/nobrainer-tech/nobrainer-tech-skills/nobrainer-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 67 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,490 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00067 $0.01490
Opus 5 $0.00034 $0.00745
Sonnet 5 $0.00013 $0.00298
Haiku 4.5 $0.00007 $0.00149

Measured 11d ago against content hash ed7d3016fc6b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

nobrainer-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/nobrainer-review/SKILL.md · 161 lines

How it starts

The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.

NoBrainer Review

Review the exact requested change, prove real defects against current code, and filter out speculative AI noise. This skill owns the final NoBrainer evidence gate. Ordinary implementation and correction work belongs to nobrainer-build and the project's maintained engineering capabilities. This skill does not silently implement fixes or expand the product scope.

Choose one mode

  • CLOSEOUT: default for an implementation diff before handoff or merge.
  • BUG_HUNT: adversarial search for reachable defects in an exact module, diff or commit.
  • RELEASE_GATE: acceptance, migration, security, build/runtime and rollback evidence for a consequential release.

Do not turn a small diff into a release ceremony. Escalate the mode only when the changed boundary, risk or owner request justifies it.

Start gate

Before reviewing:

  1. Resolve repository root, current checkout/commit, dirty state and nearest instructions.
  2. Freeze the scope as exact files, diff, commit, branch/PR base or component. Do not review unrelated existing changes.
  3. Read the goal/spec/acceptance and relevant tests. If none exists, derive only the observable behavior implied by the request and code.
  4. Identify high-risk boundaries: authentication, authorization, money, data loss, migrations, concurrency, external contracts, user-visible state, secrets and irreversible operations.
  5. Default to read-only. A review request does not authorize fixes, commits, pushes, merges or deployments.

If the base, scope or required runtime is inaccessible, state the exact gap. A partial review cannot return CLEAN for the unavailable surface.

Pre-read predictions and name/path audit

Before reading implementation details, record two or three falsifiable defect hypotheses from the acceptance, changed boundary and risk. Include the trigger and expected impact, but do not report a hypothesis as a finding. At the end, mark each HIT, MISS or UNTESTED with its evidence. This counters confirmation bias without inventing bugs.

Read the full file on GitHub · 161 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 161 lines · 67 tokens per session scan A ed7d3016fc6b

Subscribe to this mod's changes

nobrainer-review is a skill published in the GitHub repository nobrainer-tech/nobrainer-tech-skills (5 stars, last pushed 6d ago), licensed MIT. It adds 67 tokens to every session and 1,490 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

goal-lock

Agent Discipline Engine — lock the goal, run PLAN→DO→VERIFY→FINALIZE→OUTPUT loop, detect success masquerading. Triggers: '/goal-lock', '/goal-lock quick', 'goal lock', 'task harness'.

AlexZio00/sovereign-skills · 49 tokens

collab-audit

This skill should be used when the user types /collab-audit or requests AI collaboration diagnosis. Analyzes conversation history, artifacts, and work patterns to generate a 14-section AI Collaboration Audit. Behavioral analysis and feedback are bundled by design — separating them causes users to skip one, defeating…

AlexZio00/sovereign-skills · 179 tokens

code-autopsy

🔬 CODE AUTOPSY v7.2 "12 Questions + Quantified + Deployment Verdict + diff mode + CRITICAL hard cap + Factuality Gate".

AlexZio00/sovereign-skills · 3 tokens

doc-drift

Use this skill when the user wants to audit the memory and documents Claude Code loads into context — CLAUDE.md (user global + project + nested), MEMORY.md, @imports, .claude/skills, .claude/agents, .claude/commands, installed plugins — and detect four kinds of issues: outdated claims, mutually contradictory…

AlexZio00/sovereign-skills · 240 tokens

project-check

Existing project health scan — audits Infrastructure, Security, Quality, and Harness setup. Read-only. Use when: '/project-check', 'project health check', 'project audit', 'what\'s missing', 'analyze my project', 'check setup'. Ends with /project-init and /setup recommendations. NOT for new projects (use…

AlexZio00/sovereign-skills · 81 tokens

project-init

Interview-based project setup — generates CLAUDE.md, ROADMAP, .gitignore, .env.example from scratch. Use when: user says '/project-init', 'new project', 'project creation', 'project setup', 'project setup', 'new project', 'create project'. NOT for AI agent/harness configuration (use setup for that). Conversational…

AlexZio00/sovereign-skills · 82 tokens