Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pvliesdonk/markdown-vault-mcp --skill code-reviewgit clone --depth 1 https://github.com/pvliesdonk/markdown-vault-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pvliesdonk/markdown-vault-mcp/code-review)<a href="https://agentmods.dev/skills/pvliesdonk/markdown-vault-mcp/code-review"><img src="https://agentmods.dev/badge/skills/pvliesdonk/markdown-vault-mcp/code-review.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.02704 |
| Opus 5 | $0.00034 | $0.01352 |
| Sonnet 5 | $0.00014 | $0.00541 |
| Haiku 4.5 | $0.00007 | $0.00270 |
Grade A, and why
code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 236 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code review
This skill is the local self-review a change gets before its diff becomes someone else's problem: before a reviewer reads it, before a hosted bot spends the maintainer's tokens on it, before a fix costs a public push. It produces a findings report — it is not a gate. It never grants or withholds permission to push, and no ruleset requires it; deterministic CI remains the only merge gate. What it asks instead is honest convergence: every finding you report gets fixed or explicitly justified, in writing, before the push.
The review confirms preparation; it rarely discovers. Every criterion below is derived from files already open to you — the rules files, the diff, the code's own comments, the git history — so a clean first pass over a diff you wrote carefully is the normal outcome, not a lucky one.
When to run
- Before
gh pr create(or your agent's equivalent) on a fresh branch. - Before flipping a draft PR to ready.
- Before any push that updates a branch with an open PR.
- On request, against any named PR, branch, or range.
Small diffs are cheap to review; "docs-only" and "obvious" diffs are where contradicted comments and rule violations hide. Run it anyway.
Select the range
Review the cumulative diff — the same one every post-push reviewer sees — never "since my last push".
- Resolve the base ref, in this order of authority:
- the base the invoker explicitly named — an explicit instruction beats recorded metadata (a stacked PR may need a comparison GitHub's recorded base does not give);
- otherwise the PR's actual base branch, when a PR exists
(
gh pr view --json baseRefName); - only as fallback, derive it: the nearest of
origin/<default>andorigin/release/*by ancestry (the same derivationscripts/structural_gate.shuses). Never assumemain: a PR targetingrelease/X.Yor a stacked PR reviewed against the default branch sweeps in the base branch's whole divergence or misses the backport's scope.
- Compute and check the endpoints before reviewing:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 236 lines · 68 tokens per session scan A 6ee2bca8fb4f
code-review is a skill published in the GitHub repository pvliesdonk/markdown-vault-mcp (32 stars, last pushed yesterday), licensed MIT. It adds 68 tokens to every session and 2,704 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
mnemonic
Search local indexed markdown knowledge bases. Use when the user asks to find notes, dig up a concept from personal docs, cross-reference ideas across wikis, or answer from indexed local files. Triggers on "look up in notes", "search my docs", "what did I write about", "find in my vault", "check my index", "retrieve…
crit-story
Author a crit story only when the user explicitly invokes crit-story or directly asks you to generate a crit story. Do not infer this skill from generic review, PR, or diff-review requests.
mindos
MindOS: local knowledge assistant & shared KB. Keeps decisions, notes, SOPs, debugging lessons, research findings, preferences across sessions/agents. Core: save notes, search KB, organize files, run workflows, review, append CSV, hand off context, distill lessons. NOT for app source or paths outside KB. Triggers…
youtube-fetcher
Retrieve YouTube transcripts and subtitles, summarize or analyze what was said, or save an Obsidian-ready Markdown knowledge-base note with captions, creator metadata, chapters, language, and source provenance. Use for a YouTube URL or video ID when the request needs spoken content or an archival note. A bare YouTube…
code-review
Review the changed lines of a single file in a pull request for bugs, correctness, error handling, security, and maintainability, and return structured findings.
conventions-check
Review a pull request's title, description, and scope against the repository's PR conventions.