Borrowing it
Nothing to install: this file belongs to Peiiii/nextclaw. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Peiiii/nextclaw/master/.agents/skills/development-review/SKILL.mdgit clone --depth 1 https://github.com/Peiiii/nextclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/peiiii/nextclaw/development-review)<a href="https://agentmods.dev/skills/peiiii/nextclaw/development-review"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/development-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/peiiii/nextclaw/development-review"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/development-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.01637 |
| Opus 5.5 | $0.00020 | $0.00655 |
| Sonnet 5.5 | $0.00010 | $0.00327 |
| Haiku 4.5 | $0.00005 | $0.00164 |
Grade A, and why
development-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Development Review
目标
先明确 mode=design 或 implementation,不因尚无代码跳过方案审查。两个 mode 都按证据输出 findings,由总流程决定下一步。
方案 Review(mode=design)
检查目标覆盖、现有能力复用证据、owner/主链路唯一性、重要反例、失败边界、可行性,以及验收是否会放过不完整结果;缺证据即 finding,方案自洽不等于成立。 新项目、技术栈替换及新增关键运行/部署依赖,核对 Design 的技术决策是否有需求/环境依据、真实替代项的取舍(有分叉时)及关键可行性证据;仅列技术名称、凭习惯选择或将必要选择留到编码时均返回 Design。沿用小改与用户指定选择按其适用边界检查,不强制凑候选或追加审批。 从原用户目标独立核对设计的交付与黄金验收使用链路,不仅检查方案自洽:逐步走查动作、系统反馈、继续操作和最终判定,检查交付前提能否落实、AI 自验与用户判断是否分清。只有入口/测试清单、需要审查者补步骤,或全部测试通过仍拿不到原用户结果时,返回 Design。豁免必须符合任务范围与用户行为不变的事实,不能仅因没有 UI、改动在底层或尚未发布而成立;纯内部和用户明确限定的产物交付不强加运行环境。 大型交付从日志的原始输入记录定位相关原件,核对用途、版本、有效修订与必要阶段边界;检查本部分书面方案的“来源 → 有效要求 → 设计 → 验证”对应关系,不能仅检查 AI 的提炼。功能/交互要求不能因原件是 HTML 就降为样式参考;明确只是参考的部分也不自动升级成硬约束。漏项、未解释偏差、缺当前部分书面设计或待决提案冒充有效约定均是 finding。实现 Review 从产物反查同一来源与已确认变更,不能靠实现、测试和后来改写的标准相互一致放过漂移。结论关联对象版本和证据,复用原日志,不另建验收表。
跨架构设计按合同的旧能力/用户目标/候选能力双向对账,独立核对原始来源和旧新真实入口。先确认方案覆盖当前有效目标;旧→新有未解释的用户可见变化,或目标→新有必需能力被列为未来、没有可触发入口或完整使用场景,都是 finding。其它分支的成功测试不能抵销。
性能或成本列为 Required 时,检查门槛是否在实现前按可复现条件固定,候选比较与验收是否覆盖真实用户等待、代表使用量和关键冷/热分支;只有理论推断或单次最佳值是 finding。不因当前任务没有性能取舍而要求例行压测。
核对本次拟实现部分是否已具体设计;整体设计允许后续细节待定,但不得遗留影响当前实现的未决选择。通过结论标明适用范围,不扩展到未审查的待细化部分。问题给出对应设计位置、影响和修正方向;未关闭 finding 返回 Design,通过返回 design-review: passed。后续补充或改变设计后审查受影响部分。不运行代码维护性脚本,不要求子代理,不复制完整方案。以下环节仅适用于 implementation。
进入
- 有实现产物时,在验证证据稳定后进入;
- 用户明确要求代码 review、PR review、风险扫描或拟议修复评审时可直接进入;
- 纯文档、措辞和普通元信息只做内容、结构和 diff review,不运行代码维护性脚本;
- 普通局部改动使用轻量 review,L3-L4、跨模块、结构大改或用户明确要求时执行完整 findings-first review。
自动检查
源码、脚本、测试或运行链路配置改动先运行一次项目已有的 diff-only maintainability 检查;项目没有该检查时直接按下面的 findings-first 方法审查,不为满足流程临时发明脚本。项目检查的预算、参数与阻塞级别由项目自身定义。不得为消除普通净增长扩大无关范围、压缩可读性或删除类型/协议保护。
Findings-first 审查
- 明确 diff、触达文件、相邻合同和受影响测试。
- 重建改动前后真实用户或调用方可观察行为。
- 优先检查正确性、边界、状态迁移、异步、数据流、API/UI 合同和运行失败模式。
- 判断测试是否保护稳定外部行为;只有真实回归路径缺保护时才把缺测试列为 finding。
- 检查改动是否把单次实例抬成全局机制、把局部经验固化为公共合同,或让抽象层级高于证据;同时检查重复真相、隐藏 fallback、无收益抽象,以及小 diff 保留的错误 owner、重复生命周期和确定迁移债。
- 双向比较删除无收益路径与继续压缩造成的欠设计,按全生命周期净复杂度选择修正,不预设抽象或最小改动为答案。
- 对重复 UI 骨架判断是否应采用共享骨架、类型化配置和薄壳组合。
- 输出按严重级别排序的 findings、证据、风险和可信修复方向。
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 364 B
- references/subjective-review.md 836 B
- scripts/check-maintainability.mjs 1.5 KB runs code
- scripts/maintainability-guard-core.mjs 15 KB runs code
- scripts/maintainability-guard-directory-budget.mjs 2.4 KB runs code
- scripts/maintainability-guard-directory-budget.test.mjs 2.6 KB runs code
- scripts/maintainability-guard-hotspots.mjs 5.1 KB runs code
- scripts/maintainability-guard-hotspots.test.mjs 1.4 KB runs code
- scripts/maintainability-guard-line-changes.mjs 3.7 KB runs code
- scripts/maintainability-guard-lint.mjs 1.6 KB runs code
- scripts/maintainability-guard-support.mjs 12 KB runs code
- scripts/maintainability-guard-support.test.mjs 2.7 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago Changed · +1 lines f07c16245af4
- 1mo ago Changed · +4 lines 7aeff2deba33
- 1mo ago Changed · +1 lines dc2d0c7e0a92
- 1mo ago Changed · -10 lines f13554ecc88d
- 1mo ago Changed c991ffb7abca
- 1mo ago Changed 9048f7288adf
- 1mo ago Changed · +1 lines d84b68139841
- 1mo ago Changed · +6 lines · -8 tokens per session 46caf44a416f
- 2mo ago Changed 56216a760059
- 2mo ago First seen · 73 lines · 58 tokens per session scan A ccafca3553ac
development-review is a skill published in the GitHub repository Peiiii/nextclaw (263 stars, last pushed yesterday), licensed MIT. It adds 50 tokens to every session and 1,637 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
development-review compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| development-reviewPeiiii/nextclaw | Skill | 263 | yesterday | MIT | A | 50 | Codex |
| ha-code-reviewshiwenwen/hope-agent | Skill | 1.9k | yesterday | MIT | A | 40 | Claude Code |
| openclaw-github-dedupevincentkoc/dotskills | Skill | 111 | yesterday | MIT | A | 68 | Claude Code, Codex |
| openclaw-pr-batch-sweepvincentkoc/dotskills | Skill | 111 | yesterday | MIT | A | 95 | Codex |
| semantic-slicingvincentkoc/dotskills | Skill | 111 | yesterday | MIT | A | 43 | Codex |
| code-reviewtianemon/EasyMint | Skill | 86 | yesterday | MIT | A | 103 | Claude Code, Codex |
| technical-deslopvincentkoc/dotskills | Skill | 111 | yesterday | MIT | A | 21 | Codex |