# Cold Review

> >

- **Type:** Skill
- **Install:** `agentstack add skill-allemaar-open-skills-cold-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [allemaar](https://agentstack.voostack.com/s/allemaar)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [allemaar](https://github.com/allemaar)
- **Source:** https://github.com/allemaar/open-skills/tree/main/skills/cold-review
- **Website:** https://allemaar.com

## Install

```sh
agentstack add skill-allemaar-open-skills-cold-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# /cold-review

Run an independent review of actual work artifacts using fresh context. The goal is to surface issues the current agent misses because it has too much context, owns the work, or is biased toward its own implementation. This is a workflow, not a persistent mode.

> **Structured execution spec:** [`protocol.yon`](protocol.yon). Read it for the canonical rules and step sequence; this file is explanation. The two must stay in sync — if you edit one, update the other and refresh the `@STAMP` date.

> **Caller Options.** Before executing, run the Caller Options protocol (`caller-options/SKILL.md`): triage this invocation for material optionality across the venues and modes declared in front-matter; if one path clearly dominates, proceed silently; otherwise surface the options to the caller. cold-review's modes are the reviewer-count tiers (`narrow`/`medium`/`broad` → 1/2/3 reviewers); its venue is `inline` only (cold-review spawns its own reviewers — COP never wraps a self-orchestrating skill).

## Boundary

Use `cold-review` for completed or in-progress work artifacts: diffs, files, code, tests, screenshots, UI states, plans, specs, docs, command outputs, worker reports. Do not use it for raw ideas. Use `insight-adversarial` for multi-POV critique of plans/ideas/strategy, `verify` for a formal self-gate, and `double-check` when the current agent should re-read and challenge a specific target itself.

## Step 1 — Establish target and objectives

Identify: the **work assessed**; the **objectives** (infer and label as inferred if not given); the **constraints** (non-goals, compatibility, style, acceptance criteria, preferences); and the **available evidence** (tests, commands, screenshots, docs, diffs, source). If no concrete artifact exists, stop and ask for the target — do not review from vague memory.

## Step 2 — Classify the work

Classify the primary target type and choose lenses accordingly:

| Target type | Required review lenses |
| --- | --- |
| Backend / code | Correctness, architecture, security, tests, maintainability, performance |
| Frontend / UI | User flow, visual layout, responsiveness, accessibility, interaction states |
| Plan / spec | Ambiguity, scope, sequencing, assumptions, executability |
| Agent skill / workflow | Trigger clarity, runtime portability, step ordering, failure modes |
| Mixed work | Pick the top 2 target types and cover both |

## Step 3 — Choose reviewer count

Spawn fresh reviewer agents when the runtime supports subagents:

- **1** — narrow work: one file, one small fix, one artifact, low risk.
- **2** — medium or mixed work: multiple files, UI plus logic, plan plus implementation, moderate risk.
- **3** — broad or high-risk work: shared abstractions, security changes, multi-surface UI, migrations, agent workflows, release-blocking work.

Do not spawn more than 3 reviewers without explicit user confirmation. If fresh agents are unavailable, perform a degraded single-agent review and label the report: `Degraded review: no fresh reviewer agents were available, so this is a same-session review and may miss context-bias issues.`

## Step 4 — Brief reviewers

Each reviewer gets a narrow, evidence-based brief. Do not pass the lead agent's conclusions as ground truth. Assign one lens per reviewer.

**Supply pointers, not a curated evidence set.** The lead choosing *which artifacts exist* correlates every reviewer to one reading of the work — fresh context and distinct lenses do not undo that. Name where the sources are and require each reviewer to open them; a reachable source is what makes an independent check possible, and reviewers who cannot reach past your list can only audit your selection.

When source policy prohibits directory enumeration or discovery, every required source pointer must be an exact file path or an explicit resolver query. A directory alone is not a usable pointer under those constraints.

```text
You are a cold reviewer. You did not do this work. Start from the pointers below and open the primary sources yourself.

Work assessed:
Objectives:
Constraints:
Your review lens:
Primary-source pointers (a starting point, not the boundary — locate and open the sources yourself; add any the list omits):
If source policy forbids discovery, use only the exact file paths or explicit resolver queries supplied here; do not treat a directory as a sufficient pointer.
Do not modify files. Do not propose broad rewrites unless needed to fix a concrete issue.
When you check a claim, pose it as a question against the source ("Is X true, per the evidence?"), not a statement to confirm; re-open the source, do not rely on recall.

Return:
- Findings grouped by Critical, Major, Minor, Interesting
- Evidence for every finding, with file paths, commands, screenshots, or artifact references where possible
- Missing evidence or uncertainty
- Suggested score from 0-100 and rationale
```

Suggested lens groups:

- **Backend / code**: Correctness, Architecture, Security, Test Coverage, Performance reviewers.
- **Frontend / UI**: UX, Visual/Layout, Accessibility, Responsive States, Product Friction reviewers.
- **Plan / spec**: Scope, Pragmatist, Sequencing, Assumption, Executability reviewers.
- **Agent skill / workflow**: Trigger Auditor, Runtime Portability, Agent Runtime, Process Auditor, Failure-Mode reviewers.
- **Diagnosis brief (chained after `/handoff-execute`)**: Correctness, Scope/Architecture, Hypothesis Quality reviewers. The Correctness lens checks the fix matches the named problem with no new races; Scope/Architecture verifies brief out-of-scope guards held and architecture invariants (esp. coupled-constant SEE ALSO trails) are preserved; Hypothesis Quality challenges whether the diagnosis was sound or the agent band-aided over an unidentified root cause. This triplet repeatedly catches the "missed 4th call site" / "wrong file list" / "5/5 stress isn't 10/10" class of finding.

## Step 5 — Synthesize

The lead agent synthesizes reviewer reports into one final report. Do not paste raw reports unless asked.

**Self-verify the synthesis (before returning).** Re-open the evidence behind each load-bearing finding and confirm it against source; drop or downgrade any finding whose evidence doesn't survive a fresh read. A cold review must pass its own active re-check — a reviewer's confident finding is not exempt from the self-report unreliability it exists to catch.

```text
Cold Review Report

Work assessed:
Objectives:
Review type: full cold review | degraded same-session review
Reviewers/lenses used:

Findings
- Critical:
- Major:
- Minor:
- Interesting:

Score:
Verdict:
Recommended fixes:
Open uncertainties:
```

Scoring thresholds: **90-100** clean (minor notes only) · **75-89** acceptable with concerns (fix important issues before high-stakes use) · **60-74** risky (major issues need resolution) · **below 60** blocked (rework or redesign). Any Critical finding caps the verdict at risky or blocked regardless of numeric score.

## Rules

- MUST review concrete artifacts and evidence, not memory alone.
- MUST classify the work before choosing reviewer lenses.
- MUST use fresh reviewer agents when available and appropriate for the work size.
- MUST label degraded same-session reviews clearly.
- MUST require evidence for every finding, and MUST re-open (not recall) the evidence for each load-bearing finding at synthesis.
- MUST separate Critical, Major, Minor, and Interesting findings.
- MUST include a numeric score and threshold verdict.
- MUST NOT let reviewers modify files; this skill reviews only.
- MUST NOT confuse critique with verification: a high score does not replace tests, builds, or `verify` when those are required.

> **Human output.** This skill's handler-facing output obeys the human-output
> contract (`human-output/SKILL.md`).

> **Self-improvement.** On completion, run the Self-Improvement Protocol (`self-improve/SKILL.md`): if this run surfaced a concrete, blocking-or-recurring weakness in this skill, propose a specific fix for the handler to approve. Conservative — silent otherwise. Never auto-apply.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [allemaar](https://github.com/allemaar)
- **Source:** [allemaar/open-skills](https://github.com/allemaar/open-skills)
- **License:** Apache-2.0
- **Homepage:** https://allemaar.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** yes
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-allemaar-open-skills-cold-review
- Seller: https://agentstack.voostack.com/s/allemaar
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.