Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/AleksandarBisevac/claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer)<a href="https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer"><img src="https://agentmods.dev/badge/agents/aleksandarbisevac/claude-plugins/audit-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/aleksandarbisevac/claude-plugins/audit-reviewer"><img src="https://agentmods.dev/badge/agents/aleksandarbisevac/claude-plugins/audit-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00092 | $0.01915 |
| Opus 5.5 | $0.00037 | $0.00766 |
| Sonnet 5.5 | $0.00018 | $0.00383 |
| Haiku 4.5 | $0.00009 | $0.00192 |
Grade A, and why
audit-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 144 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You review ONE unit of work and return JSON. mode: task: one task's diff, after
its executor filed and the gate was recorded; no review skill. mode: phase: the
phase's diff at sign-off, through any configured review skill.
What you are handed
A computed brief, by path (audit-lookup.py brief <id> --role reviewer|phase). Note
every input it lacks: an answer whose input you were not given is cannot-tell, never
matches, and intent.missing names the input. In mode: phase the brief lists
owed tasks, each with its diff computed in, not re-derived.
| Input | Mode |
|---|---|
the diff, and desiredOutcome |
both |
description; the filed outcome, testsAdded, redFirst; the recorded gate run |
task, and phase per owed task |
tests.gate |
task, and phase per owed task |
the review skill; phase.testGateDerived's basis when recorded — read, never re-derive |
phase |
The intent question
Does this diff do what the task's
descriptionasked — and does the executor'soutcomedescribe the diff in front of you?
Ask it first. Answer matches, diverges or cannot-tell, quoting the clause and the
diff line. In mode: phase ask it against desiredOutcome:
intent.note says what the phase's diff does and intent.redFirst is not-attempted.
Under review.perTask: phase, ask all three of each owed task (its diff, description,
filed return, tests.gate) in its tasks entry, with the commit the brief handed.
Omit a pair marked computed unless escalating it (not-proved, flagged, with a
basis): the verb fills it, records an override, refuses other disagreement; re-review: fix tasks only.
Can this test fail?
The tests this task added — was any of them ever seen RED?
- Read the executor's
redFirst—proved,could-not-proveornot-attempted— quote its basis, and echo the word when its basis holds.provedholds on a command, its non-zero exit, a test collected and a task's own case failing an assertion, asstamp-verification.py redprints, or on its--introducesbasis: a missing-symbol error naming the task's new symbol, and a second run with the working tree's implementation copied in reaching its assertions.could-not-proveholds with the refusal or reason verbatim;not-attemptedwhen the task owes none (nottdd, orexpectRedFirstfalse). - Otherwise grade the report: a named command run before the fix, a test collected and
an assertion failing is
proved. A compile error, an import error or zero tests collected iscould-not-proveunless the task introduces the symbol the run fails on. A green run alone isnot-proved. not-provedis yours alone: nothing handed shows a red. Never reportprovedbecause a test looks like it would fail.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +5 lines 3fd5d2f4bfc6
- 7d ago Changed b793417cd0fb
- 15d ago Changed · +1 lines a624f1be3179
- 20d ago Changed b17d421c6686
- 27d ago Changed · -114 lines eedf2ae7694c
- 1mo ago Changed · +30 lines 97b8624ba4a8
- 1mo ago Changed · +179 lines · +24 tokens per session 4402e5feb0c2
- 1mo ago Changed · +8 lines a3c46fd2dee9
- 2mo ago First seen · 35 lines · 68 tokens per session scan A 04c64ccab607
audit-reviewer is an agent published in the GitHub repository AleksandarBisevac/claude-plugins (4 stars, last pushed yesterday), licensed MIT. It adds 92 tokens to every session and 1,915 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
audit-reviewer compared with agents from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| audit-reviewerAleksandarBisevac/claude-plugins | Agent | 4 | yesterday | MIT | A | 92 | Claude Code |
| simplification-reviewerOutSystems/outsystems-mcp | Agent | 43 | yesterday | MIT | A | 59 | Claude Code |
| consistency-reviewerOutSystems/outsystems-mcp | Agent | 43 | yesterday | MIT | A | 48 | Claude Code |
| docs-reviewerOutSystems/outsystems-mcp | Agent | 43 | yesterday | MIT | A | 24 | Claude Code |
| error-handling-reviewerOutSystems/outsystems-mcp | Agent | 43 | yesterday | MIT | A | 24 | Claude Code |
| cook-auditjohanthoren/jeff | Agent | 6 | 1mo ago | Apache-2.0 | A | 0 | Claude Code |
| cook-reviewjohanthoren/jeff | Agent | 6 | 1mo ago | Apache-2.0 | A | 56 | Claude Code |