Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add s977043/river-review --skill agent-skill-bridgegit clone --depth 1 https://github.com/s977043/river-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/s977043/river-review/agent-skill-bridge)<a href="https://agentmods.dev/skills/s977043/river-review/agent-skill-bridge"><img src="https://agentmods.dev/badge/skills/s977043/river-review/agent-skill-bridge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/s977043/river-review/agent-skill-bridge"><img src="https://agentmods.dev/badge/skills/s977043/river-review/agent-skill-bridge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.00631 |
| Opus 5 | $0.00013 | $0.00316 |
| Sonnet 5 | $0.00005 | $0.00126 |
| Haiku 4.5 | $0.00003 | $0.00063 |
Grade A, and why
Agent Skill Bridge Review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Pattern declaration
Primary pattern: Reviewer Secondary patterns: Inversion Why: ブリッジモジュールのパス安全性・往復忠実性・バリデーション正当性をチェックリスト型で評価するが、対象ファイル外の変更では実行不要
Guidance
- Path traversal:
assertSafePathmust reject ids containing..,/, or NUL bytes. Any new file-write path must route through this function orsanitizeSkillId. - Round-trip fidelity: export followed by re-import must preserve
name,description, and body content. Verify that new fields added to conversion logic do not break this property. - Auto-fill correctness:
convertAgentSkillToRRmust not overwrite explicitly provided values (id, category, phase, applyTo). Defaults apply only when the field is absent. - Validation gate: both strict and loose validation paths must be exercised. The
errorsarray must capture invalid skills without aborting the entire import batch. - Test coverage: every newly exported function from the module must have at least one
node:testcase.
Non-goals
- Do not critique the RR skill schema itself; focus on bridge logic only.
- Do not flag auto-fill behaviour as missing validation when the converted metadata passes the strict RR schema.
Pre-execution Gate / 実行前ゲート
このスキルは以下の条件がすべて満たされない限りNO_REVIEWを返す。
- 差分にAgent Skillブリッジ関連ファイル（
agent-skill-bridge.mjs,validate-agent-skills.mjs,agent-skill-loose.schema.json等）の変更が含まれている - 差分がコメント・JSDoc・空白のみの変更ではない
- inputContextにdiffが含まれている
ゲート不成立時の出力: NO_REVIEW: agent-skill-bridge — Agent Skillブリッジ関連の実質的なコード変更が検出されない
False-positive guards
- If test fixtures are added without corresponding logic changes, that is expected (test-only commits).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 58 lines · 26 tokens per session scan A 8c1fd78d4fde
Agent Skill Bridge Review is a skill published in the GitHub repository s977043/river-review (3 stars, last pushed today), licensed MIT. It adds 26 tokens to every session and 631 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
best-practices
Industry best practices conformance audit with mandatory adversarial debate. Produces audit artifact: verdict (OK/WARN/FAIL) + gap roadmap + debate proof. Use when: auditing current implementation against industry standards, checking compliance with best practices, benchmarking implementation quality, verifying a…
refactor
Multi-target refactoring orchestrator. Use when: cleaning up messy code/docs, simplifying code, restructuring documents, batch cleanup. Not for: new features (use feature-dev), bug fixes (use bug-fix), code understanding (use code-explore). Output: refactored code/docs + review gate.
pre-pr-audit
Pre-PR confidence audit with 5-dimension scoring. Use when: final check before commit/push/PR, evaluating PR readiness, assessing test quality + risk + coverage holistically. Triggers: pre-pr, readiness check, confidence audit, final verification, ready to PR, how confident. Not for: code review (use…
review-spec
Review technical spec documents from completeness, feasibility, risk, and code consistency perspectives.
codex-cli-review
Code review via Codex CLI with full disk access. Use when: deep review needing full codebase read, uncommitted change review. Not for: quick diff review (use codex-code-review), doc review (use doc-review). Output: severity-grouped findings + merge gate.
pr-review
PR self-review — review changes, produce checklist, update rules.