Agent skill · Audited from source
Brooks Review
skill · hyhmrright/brooks-lintMIT licenceAudited 23 Oct 2026 · source e1648da16880
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit e1648da16880 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 5 findings, 0 critical or high. What it does: PR code review that surfaces decay risks, design smells, and maintainability issues with concrete Symptom → Source → Consequence → Remedy findings, drawing on twelve classic engineering books. Triggers when: user asks…
Cite
Cite this page
ModelsAtlas. “Brooks Review (hyhmrright/brooks-lint)”. Retrieved 23 Oct 2026. https://modelsatlas.com/skills/hyhmrright/brooks-review
Trust audit
Audit 0.4.1 · source read 23 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (5)
MEDIUMInventory / provenanceinv.symlink · .agents/skills/_shared
.agents/skills/_shared
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .agents/skills/brooks-audit
.agents/skills/brooks-audit
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .agents/skills/brooks-debt
.agents/skills/brooks-debt
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .agents/skills/brooks-health
.agents/skills/brooks-health
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .agents/skills/brooks-review
.agents/skills/brooks-review
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha e1648da16880 · 23 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherhyhmrright GitHub userOwner of the repository this skill is read from
- Source folderhyhmrright/brooks-lint/skills/brooks-reviewThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdicte1648da16880A new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: PR code review that surfaces decay risks, design smells, and maintainability issues with concrete Symptom → Source → Consequence → Remedy findings, drawing on twelve classic engineering books. Triggers when: user asks…
--- name: brooks-review description: > PR code review that surfaces decay risks, design smells, and maintainability issues with concrete Symptom → Source → Consequence → Remedy findings, drawing on twelve classic engineering books. Triggers when: user asks to review code, check a PR, shares a diff or pastes code asking "does this look right?" / "any issues here?" / "ready to merge?", or asks for feedback on a function, class, or file. Also triggers when user mentions: code smells / refactoring / clean architecture / DDD / SOLID principles / Hyrum's Law / deep modules / tactical programming / conceptual integrity / Brooks's Law / Mythical Man-Month / second system effect. Do NOT trigger for: questions about how to write code from scratch, language syntax questions, or framework/tool questions where no existing code is shared. metadata: opencode/slash: "true" --- # Brooks-Lint — PR Review ## Setup Read in order: 1. `../_shared/common.md` — Iron Law, Project Config, Report Template, Health Score 2. `../_shared/source-coverage.md` — book coverage, exceptions, tradeoffs 3. `../_shared/decay-risks.md` — symptom definitions and source attributions 4. `pr-review-guide.md` (this directory) — the analysis process ## Process **Scope:** if the user did not specify files or paste code, apply Auto Scope Detection (`../_shared/common.md`) first. 1. Understand the review scope, then scan for each decay risk in the order specified (Steps 1–6 of the guide) 2. Run the Quick Test Check (Step 7 of the guide) — skip for docs-only or non-production changes 3. Apply the Iron Law to every finding 4. Output using the Report Template from common.md **Mode line in report:** `PR Review`
Excerpt, first 1,718 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit e1648da
git clone https://github.com/hyhmrright/brooks-lint git -C brooks-lint checkout e1648da16880
The author documents no install command, so this uses the repository directly. Our verdict covers commit e1648da16880 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
e1648da16880
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/hyhmrright/brooks-review/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →hyhmrright/brooks-lint
Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic engineering books. Triggers when: user asks to audit architecture,…
hyhmrright/brooks-lint
Tech debt assessment that identifies, classifies, and prioritizes maintainability problems — helping teams build a refactoring roadmap — drawing on twelve classic engineering books. Triggers when: user asks about tech…
hyhmrright/brooks-lint
Combined codebase health dashboard that scores a project across all four quality dimensions — PR quality, architecture, tech debt, and test quality — in a single pass, drawing on twelve classic engineering books.…
hyhmrright/brooks-lint
Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic engineering books. Triggers when: user asks to audit architecture,…
hyhmrright/brooks-lint
Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes…
hyhmrright/brooks-lint
Test quality review drawing on twelve classic engineering books — with primary focus on xUnit Test Patterns, The Art of Unit Testing, How Google Tests Software, and Working Effectively with Legacy Code — that diagnoses…
Add this badge to your README
[](https://modelsatlas.com/skills/hyhmrright/brooks-review/)
<a href="https://modelsatlas.com/skills/hyhmrright/brooks-review/"><img src="https://modelsatlas.com/skills/hyhmrright/brooks-review/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about Brooks Review
What does the Brooks Review skill do?
Is Brooks Review safe to install?
What can Brooks Review access on my machine?
How current is this page?
Sources
- github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-review — the audited source at commit e1648da16880 and every finding aboveObserved · 23 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Brooks Review skill do?
- Is Brooks Review safe to install?
- What can Brooks Review access on my machine?