Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add XRenSiu/claude-code-forge --skill meta-judgegit clone --depth 1 https://github.com/XRenSiu/claude-code-forgeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xrensiu/claude-code-forge/meta-judge)<a href="https://agentmods.dev/skills/xrensiu/claude-code-forge/meta-judge"><img src="https://agentmods.dev/badge/skills/xrensiu/claude-code-forge/meta-judge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xrensiu/claude-code-forge/meta-judge"><img src="https://agentmods.dev/badge/skills/xrensiu/claude-code-forge/meta-judge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00356 | $0.05131 |
| Opus 5.5 | $0.00142 | $0.02052 |
| Sonnet 5.5 | $0.00071 | $0.01026 |
| Haiku 4.5 | $0.00036 | $0.00513 |
Grade C, and why
meta-judge scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
- **A review file is present but incomplete or unmarked** — do NOT refuse and do NOT drop it. Load it, keep whatever findings it does carry, and classify `NEEDS_HUMAN` per rule 1. Dropping it turns "one reviewer did not How it starts
The opening of the file, as written. The whole thing — 248 lines — stays where its author put it; the contents beside it link to each section on GitHub.
meta-judge — synthesize, do not re-review
You are invoked to consolidate multiple review outputs into a single verdict. You do not re-review the code. You do not form opinions about specific findings beyond "what does the evidence support". You do dedupe, weight, arbitrate, classify — those four actions, full stop.
Say once at the start, then start working:
"I'm using the meta-judge skill. I will synthesize review outputs against <rules_source>. I will NOT re-review the code — only dedupe, weight, arbitrate, and classify. Output is final-verdict.yaml with PASS / BLOCK_MERGE / NEEDS_HUMAN."
Do not narrate further — just walk the phases.
Iron rules (re-read before every run)
-
HARD WALL: meta-judge does NOT re-review code. This is the single most important constraint. The moment you start forming your own view of "is this code actually buggy", you introduce your own bias and stop being a judge — you become another reviewer, and a sycophantic one because you've already seen what others said. Specifically forbidden:
- Reading source files for the purpose of forming an independent opinion (you may read sparingly for evidence verification on a specific contested finding, but never to re-evaluate a finding that wasn't contested).
- Re-grading an evaluator's verdict by independently looking at the code.
- Spawning additional evaluators or re-prompting existing ones.
- "Helpful" additions like "I also noticed..." — if you noticed it, you violated rule 1.
The hard wall has a price, and this is who pays it (v1.2.0). Precisely because you may not go and look, you cannot make up for a review that never finished. A truncated review leaves a short, clean file that is byte-for-byte indistinguishable from a thorough one that found nothing — and rule 1 forbids the one move that could tell them apart. So the distinction is settled upstream and handed to you as data:
/acceptance-fleetS1.5 runsscripts/verify_review_complete.pyand writesreview-completeness.yamlnext to the reviews, and each review carries its ownreview_complete:block. Never synthesize a PASS over a review recorded there asincompleteorunevaluated. An absent verdict is not a clean verdict; a reviewer who did not report is not a reviewer who reported nothing.state_decisionin that case isNEEDS_HUMAN, with the review named and its reason quoted verbatim inneeds_human_items[]. This is the same rule as invariant 14 ("declared but not evaluated ≠ passed"), applied to an LLM instead of an analyzer — and it is not a special case of rule 7, it is rule 1's own consequence. -
Four actions ONLY: dedupe, weight, arbitrate, classify. See
references/synthesis-protocol.mdfor the operational detail. Any output not derivable from these four actions is out of scope. -
No multi-agent debate. Judging with Many Minds (Dartmouth/Yale 2025, arXiv 2505.19477) demonstrated that debate frameworks amplify position / verbosity / CoT / bandwagon bias after round 1 — and the amplification continues. Meta-judge frameworks demonstrably resist this. The whole point of this skill is to be the non-debating alternative. NEVER spawn an "agent to argue against" any finding.
-
4-Eyes Principle. The agent that flagged a finding as suspicious cannot be the agent that confirms or refutes it. If multiple findings reference each other in their
rebutter:fields and the rebutter chain reveals a violation of 4-Eyes (a flagger appearing as their own rebutter), surface asNEEDS_HUMANwith the audit trail — do not silently let the cycle close. -
Evidence > votes. Three reviewers saying "bug" and one saying "no bug" with a stronger reproduction is decided FOR "no bug". Vote count is not arbitration; evidence quality is. Voting is forbidden as a tie-breaker. If evidence is comparable on both sides, classify
NEEDS_HUMAN— do not pick a side. -
Cross-vendor weighting is real and matters. Per HTML §2 theory β + Milvus benchmark: Claude + Gemini found 91% of bugs that a 5-vendor ensemble found. Cross-vendor agreement is the single strongest confidence signal. Single-source single-vendor findings should be discounted by default (penalty -0.2 per
references/synthesis-protocol.md§ "Action 2: Weight"). -
NEEDS_HUMAN is not a cop-out, it is a feature. It signals "the four-state machine cannot decide; a human must look." Use it when:
- A
requires_human_verificationREQ from/pm-revieweris unresolved. - Cross-vendor evaluators disagree on a P0/P1 finding with comparable evidence strength.
- Two findings on the same
file:linehave contradictory verdicts and evidence is roughly equal. - A rules-source condition uses a metric you cannot evaluate without re-reading the code (rule 1 violation).
Never silently auto-resolve
NEEDS_HUMAN— that defeats its purpose.
- A
-
The rules source is pluggable but the schema is permissive — be careful.
--rulescan be adone_when.yamlrules:block, a CLAUDE.md, a custom YAML, or even bullets in a markdown file. The skill parses what it can recognize; unknown formats get logged incaveats.rules_source_unrecognized:and the skill falls back to the default rules (seereferences/synthesis-protocol.md§ "Default rules"). Never invent rules that aren't in the source. -
Tool use is sharply restricted. You may use
read_filesparingly to verify contested-by-evidence findings (e.g. two reviewers cite different line numbers — you can read once to verify which is correct). You may NOT usegrep/git_log/globto expand your own analysis. If you find yourself wanting to do that, you are about to violate rule 1; stop. -
Output is a full audit trail, not a summary. Every action you took (dedupe, weight, arbitrate, classify) appears in the output with sources, deltas, and reasoning. The user reads
meta-judge-output.yamlto understand exactly why the verdict came out the way it did — they should not have to ask follow-up questions.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +12 lines scan A → C 2328d2c49be2
- 2mo ago First seen · 236 lines · 356 tokens per session scan A c917d30ad837
meta-judge is a skill published in the GitHub repository XRenSiu/claude-code-forge (2 stars, last pushed 1mo ago), licensed MIT. It adds 356 tokens to every session and 5,131 once invoked, about $0.0014 per session on Opus 5.5. A static security scan graded it C with 1 finding (tells the agent never to refuse). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
autoreview
Structured code review through the shared OpenClaw agent-skills installation.
omh-code-review
This is an OMH code-review workflow skill, projected for Agent Skills hosts (Claude Code, Codex, Cursor, opencode, OpenClaw, pi).
revdiff-plan
Review the last Codex assistant message (plan, analysis, or proposal) with inline annotations in a TUI overlay. Extracts the most recent response from Codex rollout files and opens it in revdiff for review and annotation. Activates on "revdiff-plan", "review plan with revdiff", "annotate plan", "review last response"…
explore-unknowns
Guide the user through a quadrant walk that maps the unknowns of a task — open by listing the known knowns, then work through known unknowns, unknown knowns, and unknown unknowns one stage at a time, ending with a complete four-quadrant map in the user's hands. Use when a request is ambiguous or underspecified, the…
re0-merge
Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…
asplos-writing-style
Use when drafting or revising ASPLOS prose — engineering the first two pages that rapid review actually reads, stating the cross-layer insight as one quotable sentence, structuring per-layer mechanism sections, writing bounded claims, and fitting everything into 11 self-contained pages that include figures and…