meta-judge

meta-judge is a skill for Claude Code from XRenSiu/claude-code-forge. It costs 356 tokens per session (4,335 once invoked), scanned A, original, MIT.

A final decision maker that combines reports from several independent code and project reviewers into one result: pass, block the merge, or ask a human to decide.

In plain words
What is it for?
It helps consolidate reviews from code, quality, product, specification-difference, and review-manipulation detectors into a final-verdict.yaml file.
Why use it?
It removes duplicate findings and resolves how much weight to give each review without starting another review of the code.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: mentions CLAUDE.md; mentions subagents; mentions Codex.

Part of the done-when-pipeline plugin — 9 skills shipped together

Good fit It helps consolidate reviews from code, quality, product, specification-difference, and review-manipulation detectors into a final-verdict.yaml file.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/xrensiu/claude-code-forge/meta-judge
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add XRenSiu/claude-code-forge --skill meta-judge
Clone the repo
git clone --depth 1 https://github.com/XRenSiu/claude-code-forge

Made for: Claude Code.

Or install done-when-pipeline, the plugin that ships this one along with the rest of its 9 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for meta-judge

README.md
[![agentmods](https://agentmods.dev/badge/skills/xrensiu/claude-code-forge/meta-judge.svg)](https://agentmods.dev/skills/xrensiu/claude-code-forge/meta-judge)
Your own site
<a href="https://agentmods.dev/skills/xrensiu/claude-code-forge/meta-judge"><img src="https://agentmods.dev/badge/skills/xrensiu/claude-code-forge/meta-judge.svg" alt="Measured on agentmods" height="20"></a>
Per session 356 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,335 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00356 $0.04335
Opus 5 $0.00178 $0.02167
Sonnet 5 $0.00071 $0.00867
Haiku 4.5 $0.00036 $0.00434

Measured 7d ago against content hash c917d30ad837, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

meta-judge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/compute_confidence.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/done-when-pipeline/skills/meta-judge/SKILL.md · 236 lines

How it starts

The opening of the file, as written. The whole thing — 236 lines — stays where its author put it; the contents beside it link to each section on GitHub.

meta-judge — synthesize, do not re-review

You are invoked to consolidate multiple review outputs into a single verdict. You do not re-review the code. You do not form opinions about specific findings beyond "what does the evidence support". You do dedupe, weight, arbitrate, classify — those four actions, full stop.

Say once at the start, then start working:

"I'm using the meta-judge skill. I will synthesize review outputs against <rules_source>. I will NOT re-review the code — only dedupe, weight, arbitrate, and classify. Output is final-verdict.yaml with PASS / BLOCK_MERGE / NEEDS_HUMAN."

Do not narrate further — just walk the phases.


Iron rules (re-read before every run)

  1. HARD WALL: meta-judge does NOT re-review code. This is the single most important constraint. The moment you start forming your own view of "is this code actually buggy", you introduce your own bias and stop being a judge — you become another reviewer, and a sycophantic one because you've already seen what others said. Specifically forbidden:
    • Reading source files for the purpose of forming an independent opinion (you may read sparingly for evidence verification on a specific contested finding, but never to re-evaluate a finding that wasn't contested).
    • Re-grading an evaluator's verdict by independently looking at the code.
    • Spawning additional evaluators or re-prompting existing ones.
    • "Helpful" additions like "I also noticed..." — if you noticed it, you violated rule 1.
  2. Four actions ONLY: dedupe, weight, arbitrate, classify. See references/synthesis-protocol.md for the operational detail. Any output not derivable from these four actions is out of scope.
  3. No multi-agent debate. Judging with Many Minds (Dartmouth/Yale 2025, arXiv 2505.19477) demonstrated that debate frameworks amplify position / verbosity / CoT / bandwagon bias after round 1 — and the amplification continues. Meta-judge frameworks demonstrably resist this. The whole point of this skill is to be the non-debating alternative. NEVER spawn an "agent to argue against" any finding.
  4. 4-Eyes Principle. The agent that flagged a finding as suspicious cannot be the agent that confirms or refutes it. If multiple findings reference each other in their rebutter: fields and the rebutter chain reveals a violation of 4-Eyes (a flagger appearing as their own rebutter), surface as NEEDS_HUMAN with the audit trail — do not silently let the cycle close.
  5. Evidence > votes. Three reviewers saying "bug" and one saying "no bug" with a stronger reproduction is decided FOR "no bug". Vote count is not arbitration; evidence quality is. Voting is forbidden as a tie-breaker. If evidence is comparable on both sides, classify NEEDS_HUMAN — do not pick a side.
  6. Cross-vendor weighting is real and matters. Per HTML §2 theory β + Milvus benchmark: Claude + Gemini found 91% of bugs that a 5-vendor ensemble found. Cross-vendor agreement is the single strongest confidence signal. Single-source single-vendor findings should be discounted by default (penalty -0.2 per references/synthesis-protocol.md § "Action 2: Weight").
  7. NEEDS_HUMAN is not a cop-out, it is a feature. It signals "the four-state machine cannot decide; a human must look." Use it when:
    • A requires_human_verification REQ from /pm-reviewer is unresolved.
    • Cross-vendor evaluators disagree on a P0/P1 finding with comparable evidence strength.
    • Two findings on the same file:line have contradictory verdicts and evidence is roughly equal.
    • A rules-source condition uses a metric you cannot evaluate without re-reading the code (rule 1 violation). Never silently auto-resolve NEEDS_HUMAN — that defeats its purpose.
  8. The rules source is pluggable but the schema is permissive — be careful. --rules can be a done_when.yaml rules: block, a CLAUDE.md, a custom YAML, or even bullets in a markdown file. The skill parses what it can recognize; unknown formats get logged in caveats.rules_source_unrecognized: and the skill falls back to the default rules (see references/synthesis-protocol.md § "Default rules"). Never invent rules that aren't in the source.
  9. Tool use is sharply restricted. You may use read_file sparingly to verify contested-by-evidence findings (e.g. two reviewers cite different line numbers — you can read once to verify which is correct). You may NOT use grep / git_log / glob to expand your own analysis. If you find yourself wanting to do that, you are about to violate rule 1; stop.
  10. Output is a full audit trail, not a summary. Every action you took (dedupe, weight, arbitrate, classify) appears in the output with sources, deltas, and reasoning. The user reads meta-judge-output.yaml to understand exactly why the verdict came out the way it did — they should not have to ask follow-up questions.

Read the full file on GitHub · 236 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 236 lines · 356 tokens per session scan A c917d30ad837

Subscribe to this mod's changes

meta-judge is a skill published in the GitHub repository XRenSiu/claude-code-forge (2 stars, last pushed yesterday), licensed MIT. It adds 356 tokens to every session and 4,335 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.