Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Tenon-Net/TenonAdmin --skill code-reviewgit clone --depth 1 https://github.com/Tenon-Net/TenonAdminWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tenon-net/tenonadmin/code-review)<a href="https://agentmods.dev/skills/tenon-net/tenonadmin/code-review"><img src="https://agentmods.dev/badge/skills/tenon-net/tenonadmin/code-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tenon-net/tenonadmin/code-review"><img src="https://agentmods.dev/badge/skills/tenon-net/tenonadmin/code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00593 |
| Opus 5.5 | $0.00016 | $0.00237 |
| Sonnet 5.5 | $0.00008 | $0.00119 |
| Haiku 4.5 | $0.00004 | $0.00059 |
Grade A, and why
code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Code Review Task Card
用于有明确范围的代码审查。通用执行与权限规则见 AGENTS.md。
When to use
- The user asks for a code review or quality/security assessment.
- 用户明确要求合并就绪审查，或已授权的活动流程要求独立审查门禁。
- Do not activate this card for implementation, broad planning, or automatic cleanup.
Inputs
- Scope: the requested files, commit, PR, or whole diff.
- Requirements/specification, acceptance criteria, and relevant test/CI evidence.
- Existing review artifacts and known risks, if any.
- If the user says
continue, advance the current verified review step rather than restarting discovery.
先按用户范围采集证据。“当前未提交修改”包括 staged、unstaged 和未跟踪文件：
git status --short
git diff HEAD --stat -- <scope>
git diff HEAD -- <scope>
git ls-files --others --exclude-standard -- <scope>
单独读取范围内未跟踪文件的相关内容。无初始提交时分别使用 git diff --cached 与 git diff；用户指定分支、提交或 PR 时改用相应基准，不能用工作树 diff 代替。审查期间范围内发生新改动时，更新受影响部分的证据。
选择审查深度
普通审查：检查用户指定的文件或 diff，按严重程度报告有依据的问题与验证缺口；只有独立视角能补充证据时才委派。缺少规格时先审查可判断的部分，说明覆盖限制。普通审查不输出合并就绪认证，也不因未启动双代理而判定代码有问题。
双代理执行、状态和合并门禁仅用于明确请求的合并就绪审查，或 Autopilot 等活动流程要求的审查阶段。单独调用 $code-review 默认普通审查；$code-review --merge-ready 明确选择双代理门禁。活动流程的必需门禁不能降级为普通审查。
完成条件
普通审查完成指定范围的检查后，报告有文件与行号依据的问题、严重程度、影响、建议和验证缺口；没有发现时如实说明。仅在选择合并就绪分支时读取上面的参考并满足双代理门禁。审查本身保持只读，修复交回已授权的实现流程。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 43 lines · 39 tokens per session scan A 71dc67dfa45d
code-review is a skill published in the GitHub repository Tenon-Net/TenonAdmin (41 stars, last pushed 14d ago), licensed Apache-2.0. It adds 39 tokens to every session and 593 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-07.
code-review compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| code-reviewTenon-Net/TenonAdmin | Skill | 41 | 14d ago | Apache-2.0 | A | 39 | Codex |
| analyzing-dotnet-performancedotnet/skills | Skill | 5.8k | yesterday | MIT | A | 64 | Claude Code |
| code-review-csharppnp/copilot-prompts | Skill | 902 | 3d ago | MIT | A | 66 | Claude Code, Codex |
| godot-code-reviewjame581/GodotPrompter | Skill | 929 | 5d ago | MIT | A | 67 | Claude Code |
| de-sloppifycodewithmukesh/dotnet-claude-kit | Skill | 805 | 2d ago | MIT | A | 115 | Claude Code |
| community-research-insightclawdotnet/openclaw.net | Skill | 532 | yesterday | MIT | A | 41 | Claude Code, Codex |
| antdant-design/ant-design-cli | Skill | 261 | 2d ago | MIT | A | 69 | Claude Code |