code-quality

code-quality is a skill for Claude Code from notque/vexjoy-agent. It costs 16 tokens per session (1,553 once invoked), scanned A, original, MIT.

A set of workflows for cleaning up code, running linters and formatters, and applying quality checks. A linter is a tool that finds likely mistakes or style problems without running the program.

In plain words
What is it for?
Use it to remove stale TODOs and unused imports, find dead or duplicated code, format Python, JavaScript, or TypeScript, and run checks such as tests, type checks, and security checks for Python.
Why use it?
It provides separate checks for technical debt, Python projects, and mixed-language projects, while excluding generated and dependency files. This makes quality work more focused and helps identify issues such as dead code, duplicate code, and missing type hints.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: agent in frontmatter; reads .claude/ paths; mentions CLAUDE.md.

Good fit Use it to remove stale TODOs and unused imports, find dead or duplicated code, format Python, JavaScript, or TypeScript, and run checks such as tests, type checks, and security checks for Python.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/notque/vexjoy-agent/code-quality
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add notque/vexjoy-agent --skill code-quality
Clone the repo
git clone --depth 1 https://github.com/notque/vexjoy-agent

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-quality

README.md
[![agentmods](https://agentmods.dev/badge/skills/notque/vexjoy-agent/code-quality/github.svg)](https://agentmods.dev/skills/notque/vexjoy-agent/code-quality)
Your own site
<a href="https://agentmods.dev/skills/notque/vexjoy-agent/code-quality"><img src="https://agentmods.dev/badge/skills/notque/vexjoy-agent/code-quality/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for code-quality

Your own site · 80×15
<a href="https://agentmods.dev/skills/notque/vexjoy-agent/code-quality"><img src="https://agentmods.dev/badge/skills/notque/vexjoy-agent/code-quality.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 16 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,553 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00016 $0.01553
Opus 5.5 $0.00006 $0.00621
Sonnet 5.5 $0.00003 $0.00311
Haiku 4.5 $0.00002 $0.00155

Measured 25d ago against content hash 13a3e620eb37, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

code-quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 25d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/run_quality_gate.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/code-quality/code-quality/SKILL.md · 160 lines

How it starts

The opening of the file, as written. The whole thing — 160 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Code Quality

Four modes. Select by request signal:

Signal Mode
Dead code, stale TODOs, unused imports, technical debt Cleanup
Lint Python/JS/TS, run ruff, run biome, format code Linting
Python quality checks, ruff+pytest+mypy+bandit Python Quality Gate
Multi-language quality gate, general "quality check" Universal Quality Gate

Default: Python-specific requests run Python Quality Gate. General requests run Universal Quality Gate.


Mode A: Cleanup

Scan for 9 categories of technical debt: stale TODOs, unused imports, dead code, missing type hints, deprecated functions, naming inconsistencies, high complexity, duplicate code, missing docstrings. Follow references/code-cleanup.md for the full 3-phase workflow (SCOPE, SCAN, REPORT).

Key principles:

  • Read CLAUDE.md first for project conventions
  • Scan only what was requested; ask for a target rather than scanning everything
  • Exclude vendor/, node_modules/, .venv/, build/, dist/, generated/, .git/
  • Prioritize findings by impact/effort: Quick Wins (auto-fixable, <5 min) > Important (bugs, security) > Polish (style)
  • Apply auto-fixes only with explicit user permission; check first, fix, review diff, rerun checks

Mode B: Linting

Check or fix Python with Ruff and JavaScript/TypeScript with Biome. Read project instructions, pyproject.toml, and biome.json first; preserve configured rules.

Task Python JavaScript/TypeScript
Check ruff check . npx @biomejs/biome check src/
Format check ruff format --check . Included in Biome check
Fix lint ruff check --fix . npx @biomejs/biome check --write src/
Format ruff format . npx @biomejs/biome format --write src/

Use project environment (./venv/bin/ruff). If configured, use make lint or make lint-fix. Check first; apply fixes only within requested scope. Review git diff, undo incorrect fixes, rerun checks. Do not change rules or install new tooling to get a pass.

Read the full file on GitHub · 160 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 26d ago Changed · -126 lines · +19 tokens per session 3f2ff401c4ba
  2. 27d ago First seen · 160 lines · 16 tokens per session scan A 13a3e620eb37

Subscribe to this mod's changes

code-quality is a skill published in the GitHub repository notque/vexjoy-agent (442 stars, last pushed today), licensed MIT. It adds 16 tokens to every session and 1,553 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-20.

Related

Other skills, from other repositories

godot-code-review

Use when reviewing GDScript or C# Godot code — checklist of best practices, common anti-patterns, and Godot-specific pitfalls. Triggers on "review this script", "check my code", "any issues with this", "what's wrong with this code", including a short pasted snippet.

jame581/GodotPrompter · 67 tokens

refactoring-patterns

Apply named refactoring transformations to improve code structure without changing behavior. Use when the user mentions "refactor this", "code smells", "extract method", "replace conditional", "technical debt", "move method", "inline variable", "decompose conditional", or "clean up this messy code". Also trigger when…

wondelai/skills · 125 tokens

squid-architecture-review

Periodic architectural sweep — reads existing ADRs, maps modules/dependencies/layering, and reports up to 10 prioritised findings shaped as refactor proposals /squid-refactor can consume directly.

iusztinpaul/squid · 47 tokens

squid-implement-night

Run the full agent-team pipeline end-to-end for one feature whose Tasks Plan is already approved by /squid-plan, handing the human a validated, ready-to-squash-merge PR. Trigger after /squid-plan.

iusztinpaul/squid · 52 tokens

pr-review

AUTHOR SKILL (internal to microsoft/aspire-skills). Reviews pull requests into this repo for problems only — bugs, regressions, missing eval coverage, frontmatter or routing damage, plugin-manifest drift, hook safety, and other concrete issues. Drives a six-step workflow: identify the PR, ensure the branch is…

microsoft/aspire-skills · 248 tokens

clean-code

Code quality: meaningful names, SRP, DRY, small functions, guard clauses, refactoring. Triggers: clean code, naming, code smell, SRP, DRY, long function, god class, dead code.

softspark/ai-toolkit · 50 tokens