audit-reviewer

audit-reviewer is an agent for Claude Code from AleksandarBisevac/claude-plugins. It costs 92 tokens per session (1,915 once invoked), scanned A, original, MIT.

A read-only reviewer that signs off one phase of an audit by examining the code changes in that phase. It reports findings but cannot edit files.

In plain words
What is it for?
Use it to check a phase diff for missed bugs, security regressions, incorrect outcomes, leftover debug code, and violations of the project's review checklist.
Why use it?
It gives a focused review of the requested change and separates finding problems from making the fixes.

Agent for Claude Code

Written for Claude Code: effort in frontmatter.

Part of the audit plugin — 2 skills, 21 commands, 4 agents, 5 hooks shipped together

Good fit Use it to check a phase diff for missed bugs, security regressions, incorrect outcomes, leftover debug code, and violations of the project's review checklist.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/aleksandarbisevac/claude-plugins/audit-reviewer
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/AleksandarBisevac/claude-plugins

Made for: Claude Code.

Or install audit, the plugin that ships this one along with the rest of its 2 skills, 21 commands, 4 agents, 5 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for audit-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/agents/aleksandarbisevac/claude-plugins/audit-reviewer/github.svg)](https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer)
Your own site
<a href="https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer"><img src="https://agentmods.dev/badge/agents/aleksandarbisevac/claude-plugins/audit-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for audit-reviewer

Your own site · 80×15
<a href="https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer"><img src="https://agentmods.dev/badge/agents/aleksandarbisevac/claude-plugins/audit-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 92 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,915 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00092 $0.01915
Opus 5.5 $0.00037 $0.00766
Sonnet 5.5 $0.00018 $0.00383
Haiku 4.5 $0.00009 $0.00192

Measured yesterday against content hash 3fd5d2f4bfc6, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

audit-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/audit/agents/audit-reviewer.md · 144 lines

How it starts

The opening of the file, as written. The whole thing — 144 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You review ONE unit of work and return JSON. mode: task: one task's diff, after its executor filed and the gate was recorded; no review skill. mode: phase: the phase's diff at sign-off, through any configured review skill.

What you are handed

A computed brief, by path (audit-lookup.py brief <id> --role reviewer|phase). Note every input it lacks: an answer whose input you were not given is cannot-tell, never matches, and intent.missing names the input. In mode: phase the brief lists owed tasks, each with its diff computed in, not re-derived.

Input Mode
the diff, and desiredOutcome both
description; the filed outcome, testsAdded, redFirst; the recorded gate run task, and phase per owed task
tests.gate task, and phase per owed task
the review skill; phase.testGateDerived's basis when recorded — read, never re-derive phase

The intent question

Does this diff do what the task's description asked — and does the executor's outcome describe the diff in front of you?

Ask it first. Answer matches, diverges or cannot-tell, quoting the clause and the diff line. In mode: phase ask it against desiredOutcome: intent.note says what the phase's diff does and intent.redFirst is not-attempted.

Under review.perTask: phase, ask all three of each owed task (its diff, description, filed return, tests.gate) in its tasks entry, with the commit the brief handed. Omit a pair marked computed unless escalating it (not-proved, flagged, with a basis): the verb fills it, records an override, refuses other disagreement; re-review: fix tasks only.

Can this test fail?

The tests this task added — was any of them ever seen RED?

  • Read the executor's redFirst — proved, could-not-prove or not-attempted — quote its basis, and echo the word when its basis holds. proved holds on a command, its non-zero exit, a test collected and a task's own case failing an assertion, as stamp-verification.py red prints, or on its --introduces basis: a missing-symbol error naming the task's new symbol, and a second run with the working tree's implementation copied in reaching its assertions. could-not-prove holds with the refusal or reason verbatim; not-attempted when the task owes none (not tdd, or expectRedFirst false).
  • Otherwise grade the report: a named command run before the fix, a test collected and an assertion failing is proved. A compile error, an import error or zero tests collected is could-not-prove unless the task introduces the symbol the run fails on. A green run alone is not-proved.
  • not-proved is yours alone: nothing handed shows a red. Never report proved because a test looks like it would fail.

Read the full file on GitHub · 144 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +5 lines 3fd5d2f4bfc6
  2. 7d ago Changed b793417cd0fb
  3. 15d ago Changed · +1 lines a624f1be3179
  4. 20d ago Changed b17d421c6686
  5. 27d ago Changed · -114 lines eedf2ae7694c
  6. 1mo ago Changed · +30 lines 97b8624ba4a8
  7. 1mo ago Changed · +179 lines · +24 tokens per session 4402e5feb0c2
  8. 1mo ago Changed · +8 lines a3c46fd2dee9
  9. 2mo ago First seen · 35 lines · 68 tokens per session scan A 04c64ccab607

Subscribe to this mod's changes

audit-reviewer is an agent published in the GitHub repository AleksandarBisevac/claude-plugins (4 stars, last pushed yesterday), licensed MIT. It adds 92 tokens to every session and 1,915 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

audit-reviewer compared with agents from other repositories

audit-reviewer next to 6 agents from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
audit-reviewerAleksandarBisevac/claude-pluginsAgent4yesterdayMITA92Claude Code
simplification-reviewerOutSystems/outsystems-mcpAgent43yesterdayMITA59Claude Code
consistency-reviewerOutSystems/outsystems-mcpAgent43yesterdayMITA48Claude Code
docs-reviewerOutSystems/outsystems-mcpAgent43yesterdayMITA24Claude Code
error-handling-reviewerOutSystems/outsystems-mcpAgent43yesterdayMITA24Claude Code
cook-auditjohanthoren/jeffAgent61mo agoApache-2.0A0Claude Code
cook-reviewjohanthoren/jeffAgent61mo agoApache-2.0A56Claude Code