work-review

work-review is a skill for Claude Code from wsauret/flywheel. It costs 46 tokens per session (4,089 once invoked), scanned A, original, MIT.

A workflow for reviewing code changes using several specialised analyses and combining the results into a saved report. It can review a pull request, branch, or the changes on the current branch.

In plain words
What is it for?
Use it to review pull requests, branches, or current uncommitted changes and write the results into the active work session.
Why use it?
It reduces the chance that important problems are missed by relying on one review pass. It also groups duplicate findings into a clearer report.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions CLAUDE.md; names the AskUserQuestion tool.

Part of the flywheel plugin — 15 skills, 15 agents shipped together

Good fit Use it to review pull requests, branches, or current uncommitted changes and…

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/wsauret/flywheel/work-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add wsauret/flywheel --skill work-review
Clone the repo
git clone --depth 1 https://github.com/wsauret/flywheel

Made for: Claude Code.

Or install flywheel, the plugin that ships this one along with the rest of its 15 skills, 15 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for work-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/wsauret/flywheel/work-review.svg)](https://agentmods.dev/skills/wsauret/flywheel/work-review)
Your own site
<a href="https://agentmods.dev/skills/wsauret/flywheel/work-review"><img src="https://agentmods.dev/badge/skills/wsauret/flywheel/work-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 46 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,089 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00046 $0.04089
Opus 5 $0.00023 $0.02044
Sonnet 5 $0.00009 $0.00818
Haiku 4.5 $0.00005 $0.00409

Measured 6d ago against content hash 453b1cc17a8f, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

work-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

flywheel/skills/work-review/SKILL.md · 355 lines

How it starts

The opening of the file, as written. The whole thing — 355 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Work Reviewing Skill

Perform exhaustive code reviews using multi-agent analysis. Collect each reviewer's prose findings, structure them into the schema, dedup semantically, and write a merged review.findings.json into the active session directory.

Architecture: Reviewers return natural-language prose; the synthesizer (this skill) is the single schema enforcer. Reviewers focus on finding issues; structuring is the synthesizer's job.

Input

The review target is provided via $ARGUMENTS. Can be:

  • PR number (numeric): 123
  • GitHub URL: https://github.com/org/repo/pull/123
  • Branch name: feature/my-branch
  • Empty: review current branch changes

The active session is resolved via .flywheel/plugin/active.json. If that file is missing, error with:

No active session. Run /plan first.

Phase 0: Setup

Determine review target

git branch --show-current
# If PR number:
gh pr view <PR_NUM> --json title,body,files

Setup environment

  • If already on target branch: proceed with analysis.
  • If different branch: offer to check out the target branch or create a worktree with git worktree add.

Ensure the code is ready for analysis before dispatching reviewers.

Discover project context

Use Glob to find architectural docs once at the orchestrator level — reviewers consume the resulting paths instead of doing parallel discoveries:

  • CLAUDE.md
  • agents.md
  • docs/architecture.md
  • docs/adrs/**/*.md
  • docs/coding-guidelines*.md

Collect the matching paths into PROJECT_CONTEXT_PATHS. Inline them in every reviewer dispatch under "PROJECT CONTEXT PATHS." If no docs match, pass none — reviewers skip discovery and apply universal principles only.


Phase 1: Dispatch Reviewer Agents

Launch Task for every reviewer in a SINGLE message. Each Task prompt MUST include:

  1. The diff / PR content inline (or a reference the reviewer can read)
  2. Code-scope location format: <repo-relative-path> or <repo-relative-path>:<line>
  3. The no-file-write constraint (reviewers return prose; synthesizer handles all file writes)
  4. The active session's spec rationale (inlined from spec.context) — reviewers must distinguish implementer error from plan-prescribed shape

Read the full file on GitHub · 355 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 355 lines · 46 tokens per session scan A 453b1cc17a8f

Subscribe to this mod's changes

work-review is a skill published in the GitHub repository wsauret/flywheel (14 stars, last pushed 3d ago), licensed MIT. It adds 46 tokens to every session and 4,089 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.