Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/saolalab/clawforce/code-qualitynpx skills add saolalab/clawforce --skill code-qualitygit clone --depth 1 https://github.com/saolalab/clawforceWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00016 | $0.01412 |
| Opus 5 | $0.00008 | $0.00706 |
| Sonnet 5 | $0.00003 | $0.00282 |
| Haiku 4.5 | $0.00002 | $0.00141 |
Grade A, and why
Code Quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 204 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code Quality Skill
Code Review Checklist
Logic & Correctness
- Does the code solve the stated problem?
- Are edge cases handled (null, empty, overflow, underflow)?
- Are error conditions handled gracefully?
- Is the logic clear and easy to follow?
- Are there any obvious bugs or race conditions?
Code Quality
- Is the code readable? Can a teammate understand it without explanation?
- Are functions/classes small and focused (single responsibility)?
- Is there unnecessary duplication? Can it be extracted?
- Are variable/function names descriptive and consistent?
- Is the code properly formatted and linted?
Testing
- Are there tests for new functionality?
- Do tests cover happy paths, edge cases, and error conditions?
- Are tests readable and maintainable?
- Is test coverage adequate?
- Do tests run reliably (no flakiness)?
Security
- Are user inputs validated and sanitized?
- Are sensitive operations properly authenticated/authorized?
- Are secrets/configs properly managed (not hardcoded)?
- Are SQL queries parameterized (no injection risks)?
- Are API endpoints rate-limited if needed?
Performance
- Are there obvious performance issues (N+1 queries, unnecessary loops)?
- Is caching used appropriately?
- Are database queries optimized?
- Is memory usage reasonable?
Documentation
- Are public APIs documented?
- Are complex algorithms/logic explained?
- Is the PR description clear (what, why, how)?
- Are breaking changes documented?
PR Template
## What
Brief description of what this PR does.
## Why
Why this change is needed (problem it solves, feature it adds).
## How
How the change was implemented (high-level approach, key decisions).
## Testing
- [ ] Unit tests added/updated
- [ ] Integration tests added/updated
- [ ] Manual testing performed
- [ ] Edge cases tested
## Screenshots (if applicable)
[Add screenshots for UI changes]
## Checklist
- [ ] Code follows style guidelines
- [ ] Self-review completed
- [ ] Comments added for complex logic
- [ ] Documentation updated
- [ ] No new warnings generated
- [ ] Tests pass locally
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 204 lines · 16 tokens per session scan A fcdb1cef75b4
Code Quality is a skill published in the GitHub repository saolalab/clawforce (38 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 16 tokens to every session and 1,412 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
code-review
代码审查和质量分析技能。用于审查代码、发现潜在问题、提供改进建议。当用户请求代码审查、代码质量分析或最佳实践建议时使用。.
refactoring
Safe, test-backed code restructuring in small steps.
agenticmail
🎀 AgenticMail — Full email, SMS, storage & multi-agent coordination for AI agents. 63 tools.
agentic-paper-digest-skill
Fetches and summarizes recent arXiv and Hugging Face papers with Agentic Paper Digest. Use when the user wants a paper digest, a JSON feed of recent papers, or to run the arXiv/HF pipeline.
ai-meeting-scheduling
Booking links fail for groups. SkipUp schedules meetings with 2-50 participants via email — one API call coordinates across timezones automatically. Also: check status, pause, resume, or cancel requests. Async only — does not instant-book, access calendars, or do free/busy lookups.
arxiv-summarizer-orchestrator
End-to-end orchestration skill for periodic arXiv collection and reporting using three sub-skills: arxiv-search-collector, arxiv-paper-processor, and arxiv-batch-reporter. Supports manual language control across all markdown outputs and Stage-B processing strategy (subagentparallel default max 5, or serial).