review-agent

name	review-agent
description	Review an existing agent against best practices and report findings — a read-only audit of CLAUDE.md, skills, composition integrity, and Trinity readiness. Produces a prioritized findings report and hands off to /adjust-agent or /adjust-playbook to apply fixes. Makes no changes itself.
argument-hint	[path to agent] [focus area]
disable-model-invocation	false
user-invocable	true
allowed-tools	Read, Glob, Grep, Bash, Skill
metadata	{"version":"1.6","created":"2026-06-14T00:00:00.000Z","updated":"2026-08-18T00:00:00.000Z","author":"Ability.ai","changelog":["1.6: Audit checklist adds the .mcp.json.template URL rule from Trinity v0.9.0 — an http/sse server url must resolve to a public address (loopback/private/link-local/CGNAT 100.64/10 refused, trinity-enterprise#394)","1.5: Playbook-call checks — schedule messages must be one-line `/skill [args]` calls (no prose briefs), and inter-agent hand-offs in CLAUDE.md/skills must be playbook calls, not prose delegation (fleet convention protocols/playbook-call.md, operator direction 2026-08-16)","1.4: Audit checklist matches the current platform contract — schedule entries key on `name` (there is no `id` field), template.yaml must declare credentials: + credential_setup: (gate T-015, ent#128), .mcp.json.template must keep ${VAR} inside env blocks with an allowlisted command and no hand-written trinity entry, and .gitignore must exclude .claude/settings.json (trinity#2036) and .trinity/*","1.3: Trinity-readiness check (2h) now audits repository deployability — remote present, tree clean, branch pushed, plus the instance GitHub token note for private repos — because Trinity deploys an agent by cloning its repo; a repo-less agent is reported as deploy-by-upload-only (no reproducible source) with the one-command fix","1.2: Audit Request Dispatch (new check 2k) — CLAUDE.md carries the SOP routing table: request-phrased rows, every user-invocable skill covered or deliberately internal, routes resolve, playbook-gap fallback with operator-queue escalation and /agent-dev:create-playbook pointer; scorecard + checklist rows added","1.1: Audit Documentation Coherence — README/ARCHITECTURE/TARGET-ARCHITECTURE present, current/target split intact, docs match skills and subagents","1.0: Initial version — read-only agent audit that hands off to /adjust-agent"]}

Review Agent

ℹ️ First, set expectations: before anything else, print one short line with this skill's version and its most recent change — the top entry of metadata.changelog above — e.g. review-agent vX.Y — recent: <summary>. Then proceed.

Audit an existing agent against best practices and produce a findings report. Read-only by construction — this skill has no Write/Edit tools and changes nothing. It is the detect-and-report half of the pair; /adjust-agent (agent-level) and /agent-dev:adjust-playbook (skill-level) are the apply half.

This skill is the single source of truth for the agent audit rubric. /adjust-agent invokes this skill to get its findings rather than duplicating the checks.

When to Use

• "review this agent", "audit my agent", "check best practices"
• Periodic health check on an established agent
• Before deploying or hardening an agent
• To apply fixes after reviewing → run /adjust-agent or /agent-dev:adjust-playbook

---

Step 1: Locate and Read the Agent

If $0 (path) provided, use it. Otherwise assume the current working directory.

Verify it's an agent:

ls CLAUDE.md 2>/dev/null && ls -d .claude/skills 2>/dev/null

If CLAUDE.md doesn't exist, ask for the correct path.

Read all agent artifacts (a missing one is itself a finding):

1. CLAUDE.md
2. README.md, ARCHITECTURE.md, TARGET-ARCHITECTURE.md (a missing one is a Documentation Coherence finding)
3. template.yaml
4. .env.example
5. .gitignore
6. .mcp.json.template or .mcp.json
7. All SKILL.md files: find .claude/skills -name "SKILL.md" 2>/dev/null
8. Any subagents: ls .claude/agents/*.md 2>/dev/null
9. Top-level listing: ls -la