fw-review

fw-review is a skill for Claude Code, Codex from turbyho/fw-context-mcp. It costs 0 tokens per session (3,973 once invoked), scanned A, original, MIT.

A review workflow for changes to embedded C and C++ firmware. Firmware is software that runs directly on hardware, and the workflow checks code structure and embedded-system risks in the wider project.

In plain words
What is it for?
Reviewing firmware diffs, commits, or changed files by tracing callers and callees, checking types, and assessing embedded-specific logic and risks.
Why use it?
It helps find bugs and regressions that may be missed when reviewing only a small diff, including memory, concurrency, runtime, and platform problems. It also requires special project-context tools and a review plan.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Reviewing firmware diffs, commits, or changed files by tracing callers and callees, checking types, and assessing embedded-specific logic and risks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/turbyho/fw-context-mcp/fw-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add turbyho/fw-context-mcp --skill fw-review
Clone the repo
git clone --depth 1 https://github.com/turbyho/fw-context-mcp

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for fw-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/turbyho/fw-context-mcp/fw-review/github.svg)](https://agentmods.dev/skills/turbyho/fw-context-mcp/fw-review)
Your own site
<a href="https://agentmods.dev/skills/turbyho/fw-context-mcp/fw-review"><img src="https://agentmods.dev/badge/skills/turbyho/fw-context-mcp/fw-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for fw-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/turbyho/fw-context-mcp/fw-review"><img src="https://agentmods.dev/badge/skills/turbyho/fw-context-mcp/fw-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,973 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.03973
Opus 5.5 $0.00000 $0.01589
Sonnet 5.5 $0.00000 $0.00795
Haiku 4.5 $0.00000 $0.00397

Measured 17d ago against content hash a900358f5ab4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

fw-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/fw_context_mcp/data/skills/fw-review/SKILL.md · 256 lines

How it starts

The opening of the file, as written. The whole thing — 256 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Scope

  • Review of diffs, commits, or specific changed files in embedded C/C++ projects
  • Bugs, behavioral regressions, runtime risks, concurrency, memory, and platform rule violations
  • Changes outside firmware code (docs, CI, scripts, plans) — skip fw-context, review manually

CRITICAL — MANDATORY

For C/C++ source code, use ONLY fw-context tools for reading, searching, and browsing files. MUST NOT use any other tool to read or search C/C++ source. fw-context provides ifdef-filtered code — only what actually compiles for the build of the query. Other tools show unprocessed preprocessor noise including dead #ifdef branches.

MUST NOT skip Phase 0. Every review MUST begin by creating and writing out the plan.

Core principle — verify in full project context

Every code change MUST be verified recursively against the entire project, not just the local diff fragment. A change that looks correct in isolation can be wrong in the broader context. For every changed symbol (function, type, macro):

  • Callers — who calls this? Were they all updated? Use find_callers then find_all_callers_recursive for the full call tree.
  • Callees — what does this call? Is the new behavior still compatible with downstream dependencies? Use get_symbol_context or find_callees_recursive.
  • Users — who reads/writes this type or variable? Use find_references.
  • Duplicates — does a similar implementation exist elsewhere? Use search_bodies and scan ALL results.
  • Removals — is the removed symbol truly gone from every file? Use search_content to confirm zero results project-wide.
  • Dead code — did the removal leave orphaned functions? Use find_dead_code.

The diff shows SCOPE. fw-context verifies CORRECTNESS. Never conclude a review from the diff alone.

Read every page

A tool that gives a long list pages it. The answer holds a page notice with total, offset, shown and more (a dict answer holds it under the key page).

  • When more is true, call again with offset=<offset + shown>. The hint gives that call. read_file pages lines: call again with the start_line that its hint names.
  • Do NOT conclude "that is all of them" from one page. Read total.

Read the full file on GitHub · 256 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago Changed · +23 lines a900358f5ab4
  2. 1mo ago Changed · +2 lines 727296c66ead
  3. 2mo ago Changed 3b42f4398a1c
  4. 2mo ago First seen · 231 lines · 0 tokens per session scan A c9f742b54798

Subscribe to this mod's changes

fw-review is a skill published in the GitHub repository turbyho/fw-context-mcp (10 stars, last pushed 18d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,973 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

fw-review compared with skills from other repositories

fw-review next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
fw-reviewturbyho/fw-context-mcpSkill1018d agoMITA0Claude Code, Codex
connector-sdk-submitfivetran/connector_sdk_toolsSkill89yesterdayMITA45Claude Code
esp32-arch-reviewagodianel/esp32-claude-workbenchSkill824d agoMITA124Claude Code, Codex
kicad-pcb-reviewoaslananka/kicad-mcp-proSkill182yesterdayMITA31Claude Code
kicad-pcb-reviewoaslananka/kicad-mcp-proSkill182yesterdayMITA19Claude Code
vllm-rocm-pr-reviewshen-shanshan/vllm-dev-skillsSkill31yesterdayApache-2.0A0Claude Code, Codex
rtl-reviewvibeic/vibe-icSkill32todayApache-2.0A63Claude Code