receiving-code-review

A process for evaluating code-review feedback before changing the code. Code review is the practice of having another developer check proposed changes for problems.

In plain words
What is it for?
It is for verifying findings, asking for clarification, fixing issues by severity, testing each change, checking for regressions, and explaining evidence-based disagreement.
Why use it?
It prevents reviewers' suggestions from being applied blindly when they are incorrect, unclear, or unsafe for the codebase.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/skywalkercyt/mp-implement/receiving-code-review
Any agent
npx skills add skywalkercyt/mp-implement --skill receiving-code-review
Clone the repo
git clone --depth 1 https://github.com/skywalkercyt/mp-implement

Made for: Claude Code, Codex.

Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 430 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00043 $0.00430
Opus 5 $0.00022 $0.00215
Sonnet 5 $0.00009 $0.00086
Haiku 4.5 $0.00004 $0.00043

Measured 2d ago against content hash 8c5e03e13342, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

receiving-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/receiving-code-review/SKILL.md · 40 lines

What it actually says

Receiving Code Review

Adapted skill — discipline originating in Superpowers v5.1.0 (MIT, Jesse Vincent), rewritten in mattpocock-skills style. Governs how reviewer feedback is acted on in /mp-implement-issue step 8 and both pipelines' harvest.

Review feedback is data to evaluate, not orders to follow.

Process

  1. Verify each finding against the codebase before acting on it. Check it is technically correct for this code, doesn't break existing behavior, and isn't based on missing context.
  2. Clarify all unclear items before implementing any. Findings may be related; partial understanding produces wrong fixes.
  3. Act by severity. Fix Critical and Important before proceeding. Minor goes in the PR description or a follow-up issue.
  4. Implement one item at a time; test each fix and check for regressions.

Pushback

When the reviewer is wrong, push back with technical reasoning and evidence — working tests, the code itself, platform constraints. When a finding conflicts with a prior decision of the user's, put it to the user rather than silently following either side.

When your pushback was wrong, state the correction plainly and fix it. No apology, no defending the original position.

YAGNI check

Before accepting a "do it properly" suggestion, grep for actual usage of the thing being improved. If nothing uses it, propose deleting it instead.

Responding

Respond with the technical action — what you changed, what you verified, or why the finding is wrong. Agreement and gratitude carry no information; the code is the reply.

GitHub threads

Reply to inline review comments in the comment thread, not as a top-level PR comment:

gh api repos/{owner}/{repo}/pulls/{pr}/comments/{id}/replies
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 40 lines · 43 tokens per session scan A 8c5e03e13342

Subscribe to this mod's changes

receiving-code-review is a skill published in the GitHub repository skywalkercyt/mp-implement (2 stars, last pushed 29d ago), licensed MIT. It adds 43 tokens to every session and 430 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

nunit-code-style

Use when writing or modifying C# method bodies, type declarations, or non-trivial logic in NUnit source. Covers NUnit's taste-and-judgment conventions — exception construction, simplification, naming intent, StringComparison, non-null check form, and var usage — that aren't already caught at build time.

nunit/nunit · 69 tokens

nunit-testing

Use when writing or modifying tests in NUnit's own test projects, or when making a behavioral change to production code that needs test coverage. Covers test structure, attribute choice, helper visibility, platform guards, and which test projects are real.

nunit/nunit · 51 tokens

software-test-execution

Run scoped tests for a TDD slice, determine the appropriate test framework and command, and report structured pass/fail results. Use when tests need to be executed after writing, implementing, or refactoring code. Reads test metadata, discovers the test framework if needed, executes the scoped test command, parses…

stencila/stencila · 97 tokens

nunit-api-design

Use when adding or modifying public API surface in NUnit — new or changed constraints, attributes, assertions, helpers, or any type/member visibility change. Covers the conventions NUnit maintainers enforce for types that ship to consumers of the framework.

nunit/nunit · 51 tokens

nw-at-completeness-check

Canonical AT completeness gate — research-anchored 7-category taxonomy (C1-C7) + 15-item mechanical checklist. Paradigm-neutral. Drives acceptance-designer reviewer verdict deterministically.

nWave-ai/nWave · 46 tokens

nw-ab-critique-dimensions

Review dimensions for validating agent quality - template compliance, safety, testing, and priority validation.

nWave-ai/nWave · 26 tokens