Official agent skill

Reviewing Agent Definitions

by bitwarden in bitwarden/ai-plugins

Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity.

OfficialCustom licenceAuto-check passedAI & LLM Engineering

Install Reviewing Agent Definitions

skills CLI
$ npx skills add bitwarden/ai-plugins --skill reviewing-agent-definitions -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install bitwarden/ai-plugins reviewing-agent-definitions --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/bitwarden/ai-plugins.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/claude-config-validator/skills/reviewing-agent-definitions .claude/skills/reviewing-agent-definitions && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
reviewing-agent-definitions
GitHub stars
155
Token cost
~2.4k tokens
SKILL.md length
1,097 words
Files
1
Skills in repo
35
Repo updated
First seen
Licence
Custom licence

At a glance

Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity.

  • Reviewing changes to agents/<name.md
  • SKILL.md covers Division of labor with…, Pass 1: Tool access, Pass 2: Frontmatter and Pass 3: Description and…, plus 3 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Agents/<name/AGENT.md

What it does

Reviewing Agent Definitions is an agent skill from bitwarden/ai-plugins, published by the product's own GitHub organization. Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity. Use when reviewing changes to agents/<name.md or agents/<name/AGENT.md, whether under .claude/agents/ or inside a plugin. Flags over-privileged tool grants, unjustified Bash access, descriptions with no activation triggers, and system prompts too vague to act on. Also use when asked to audit a subagent's tool access or check whether an agent will trigger. Normally reached through…

Its SKILL.md is about 2.4k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in AI & LLM Engineering, covering Prompt engineering and Subagents. It works with Bash. The repository describes itself as: AI plugin marketplace.

When your agent uses it

  • Reviewing changes to agents/<name.md
  • Agents/<name/AGENT.md
  • Whether under .claude/agents/
  • Inside a plugin

Example prompts

  • “Use the reviewing-agent-definitions skill to review Claude Code agent definition files for tool-access security, triggering quality, and system…”
  • “/reviewing-agent-definitions”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Glob

What it can do on your machine

Read from SKILL.md and the folder at commit 0e684b9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are yaml).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Reviewing Agent Definitions loads about 2.4k tokens when it runs. Until then it costs about 155 tokens; SKILL.md has 1,097 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~155
When it runs · the whole SKILL.md, loaded when a task matches
~2.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,097 words (~2,442 tokens).

“Agents run with a tool grant a contributor chose. The grant is the review's centre of gravity: everything else is quality, but an over-broad grant is a security weakening that ships silently.”

— opening of SKILL.md by bitwarden, Custom licence
name
reviewing-agent-definitions
allowed-tools
Read, Grep, Glob

Read the full SKILL.md on GitHub

Files

Just SKILL.md in plugins/claude-config-validator/skills/reviewing-agent-definitions of bitwarden/ai-plugins.

Open the folder on GitHubat commit 0e684b9

Compare with similar skills

Reviewing Agent Definitions next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Reviewing Agent Definitions compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Reviewing Agent Definitions this skillbitwarden/ai-plugins155—~2.4kAutomated safety check: PassCustom licence
Prompt Template Authoringnicobailon/pi-prompt-template-model321—~1.3kAutomated safety check: PassMIT
Wjs Evaling Voicedrop Promptsjianshuo/claude-skills131—~475Automated safety check: PassMIT
Prompt EngineAgriciDaniel/claude-prompts111—~1.2kAutomated safety check: PassMIT
Pi AgentK-Dense-AI/scientific-agent-skills48k1 repos~2.1kAutomated safety check: PassMIT
Claude Code Agent Developmentanthropics/claude-plugins-official38k7 repos~2.8kAutomated safety check: PassApache-2.0

Similar skills

  • Prompt Template Authoring

    nicobailon/pi-prompt-template-model

    Write and run custom Pi prompt templates (slash commands) for this extension.

    321 GitHub stars~1.3k tokensUpdated 18 days ago
    AI & LLM EngineeringAuto-check passed
  • Wjs Evaling Voicedrop Prompts

    jianshuo/claude-skills

    A skill your agent uses when 王建硕 wants to evaluate whether a change to VoiceDrop's 挖矿 system prompt is actually better than the live version — runs the local eval harness (golden fixtures ×…

    131 GitHub stars~475 tokensUpdated 1 mo ago
    AI & LLM EngineeringAuto-check passed
  • Prompt Engine

    AgriciDaniel/claude-prompts

    Ultimate AI prompt database and builder with 2,500+ curated prompts across 19 categories and 17 AI models (Midjourney, Flux, Leonardo AI, DALL-E, Sora, Imagen, Mystic, Stable Diffusion, Ideogram…

    111 GitHub stars~1.2k tokensUpdated 6 mo ago
    AI & LLM EngineeringAuto-check passed
  • Pi Agent

    K-Dense-AI/scientific-agent-skills

    Builds with and operates Pi, the minimal terminal coding harness.

    48k GitHub starsUsed in 1 repo~2.1k tokens
    AI & LLM EngineeringAuto-check passed
  • Claude Code Agent Development

    anthropics/claude-plugins-official

    Official

    Explains how to write agents for Claude Code plugins: the markdown file with YAML frontmatter, trigger descriptions, model and color settings, and system prompt design.

    38k GitHub starsUsed in 7 repos~2.8k tokens
    Agent WorkflowsAuto-check passed
  • Subagent Creator

    greatSumini/cc-system

    Create specialized Claude Code sub-agents with custom system prompts and tool configurations.

    438 GitHub stars~958 tokensUpdated 4 mo ago
    Agent WorkflowsAuto-check passed

More from bitwarden/ai-plugins

All 35 skills in this repo
  • Reading Mailcatcher API

    bitwarden/ai-plugins

    Official

    Retrieves a link from Mailcatcher. An agent skill from bitwarden/ai-plugins.

    155 GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • Using Stripe CLI

    bitwarden/ai-plugins

    Official

    Query read-only Stripe test-mode data and advance an already-attached test clock.

    155 GitHub stars~3.7k tokensUpdated today
    Auto-check passed
  • Reviewing Claude Config

    bitwarden/ai-plugins

    Official

    Reviews Claude configuration files for security, structure, and prompt engineering quality.

    155 GitHub stars~4.2k tokensUpdated today
    Auto-check passed
  • Managing Workflow Secrets

    bitwarden/ai-plugins

    Official

    Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions…

    155 GitHub stars~4k tokensUpdated today
    Auto-check passed
  • Official

    This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review encryption implementation", "assess…

    155 GitHub stars~2.2k tokensUpdated today
    Auto-check passed
  • Official

    Audits an external (third-party) Claude Code plugin pinned in this marketplace for security risk before it is vendored, and writes the report to a file for downstream posting.

    155 GitHub stars~1.8k tokensUpdated today
    Auto-check passed

Works with

Questions about Reviewing Agent Definitions

What does Reviewing Agent Definitions do?

Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity. Reviewing Agent Definitions is an agent skill from bitwarden/ai-plugins, published by the product's own GitHub organization. Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity.

When should I use Reviewing Agent Definitions?

Reviewing Agent Definitions fits situations like: reviewing changes to agents/<name.md; agents/<name/AGENT.md; whether under .claude/agents/; inside a plugin.

How do I install Reviewing Agent Definitions in Claude Code?

Run `npx skills add bitwarden/ai-plugins --skill reviewing-agent-definitions -a claude-code`. Or copy the skill folder (plugins/claude-config-validator/skills/reviewing-agent-definitions in bitwarden/ai-plugins) into .claude/skills/reviewing-agent-definitions in your project. Claude Code loads it when a task matches its description.

How do I install Reviewing Agent Definitions in Codex?

Run `npx skills add bitwarden/ai-plugins --skill reviewing-agent-definitions -a codex`. Or copy the skill folder (plugins/claude-config-validator/skills/reviewing-agent-definitions in bitwarden/ai-plugins) into .agents/skills/reviewing-agent-definitions in your project. Codex loads it when a task matches its description.

Can I use Reviewing Agent Definitions in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add bitwarden/ai-plugins --skill reviewing-agent-definitions -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/reviewing-agent-definitions, .gemini/skills/reviewing-agent-definitions, .github/skills/reviewing-agent-definitions and .opencode/skills/reviewing-agent-definitions in your project.

What does Reviewing Agent Definitions need to run?

SKILL.md names no scripts, command-line tools or credentials: Reviewing Agent Definitions is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Glob.

Does Reviewing Agent Definitions access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Reviewing Agent Definitions safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Reviewing Agent Definitions use?

Reviewing Agent Definitions has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Reviewing Agent Definitions use?

About 2.4k tokens (SKILL.md is roughly 9.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Reviewing Agent Definitions?

Skills that share tags, products or a category with Reviewing Agent Definitions: Prompt Template Authoring (nicobailon/pi-prompt-template-model, 321 stars), Wjs Evaling Voicedrop Prompts (jianshuo/claude-skills, 131 stars), Prompt Engine (AgriciDaniel/claude-prompts, 111 stars) and Pi Agent (K-Dense-AI/scientific-agent-skills, 48k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Reviewing Agent Definitions?

bitwarden (a GitHub organization, an official publisher) maintains it in bitwarden/ai-plugins, which has 155 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on October 9, 2026.

Source: bitwarden/ai-plugins on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.