Pragmatic Code ReviewCAUTION
Overview
An agent skill published by paperclipai.
144776592aa6OBSERVED · 2026-10-13What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: pragmatic-code-review
description: >
Perform a 7-tier hierarchical code quality review covering Architecture, Functionality, Security, Maintainability, Testing, Performance, and Dependencies with triage levels (Critical/Blocker, Improvement, Nit)
metadata:
sources:
- kind: github-file
repo: OneRedOak/claude-code-workflows
path: code-review/pragmatic-code-review-subagent.md
commit: 6a653445125da828f31af473fcdd3cf29f99be82
attribution: Patrick Ellis
license: MIT
usage: referenced
---
Perform a structured code quality review using the Pragmatic Quality framework. Reviews code through a 7-tier hierarchy — Architecture, Functionality, Security, Maintainability, Testing, Performance, Dependencies — and triages every finding as Critical/Blocker, Improvement, or Nit. Use when reviewing pull requests, feature branches, or entire codebases for code quality.Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
.agents/skills/company-creator
.claude/skills/company-creator
Gates applied: no_behavioural_pass.
144776592aa6full audit observations/trust-audit/skill/paperclipai__pragmatic-code-review.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | 144776592aa6 | CAUTION | B | 89 | first audit |
Questions
Is Pragmatic Code Review safe to install?
With care. The audit graded it B (89/100) and found 2 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Pragmatic Code Review access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (144776592aa6), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.