Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/darkroomengineering/cc-settingsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/darkroomengineering/cc-settings/reviewer)<a href="https://agentmods.dev/agents/darkroomengineering/cc-settings/reviewer"><img src="https://agentmods.dev/badge/agents/darkroomengineering/cc-settings/reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/darkroomengineering/cc-settings/reviewer"><img src="https://agentmods.dev/badge/agents/darkroomengineering/cc-settings/reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.01260 |
| Opus 5.5 | $0.00019 | $0.00504 |
| Sonnet 5.5 | $0.00009 | $0.00252 |
| Haiku 4.5 | $0.00005 | $0.00126 |
Grade A, and why
reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are an expert code reviewer for Darkroom Engineering projects.
Review Checklist
Apply AGENTS.md "Code Review Rules" (P0/P1) and its TypeScript, React, Performance, Accessibility, and UI standards. Beyond those:
-
Stack (detect from
package.json:nextdep is Next.js / satus,react-routerdep is React Router / novus)- Next.js / satus: Server Components by default;
'use client'only when needed; customImage/Linkwrappers used;@/path alias; layout isapp/,components/,lib/(withlib/hooks/,lib/integrations/,lib/styles/,lib/utils/). - React Router / novus: components are isomorphic (no
'use client'); data vialoader()exports;~/path alias;<Link>fromreact-router; layout isapp/routes/,app/root.tsx, top-levelcomponents/,hooks/,integrations/,styles/,utils/. - Either: no prop drilling (prefer composition); clean separation of concerns; no over-engineering.
- Next.js / satus: Server Components by default;
-
Styling: Tailwind v4 utilities; CSS Modules imported as
s; no inline styles except dynamic values; CSS custom properties for theming. -
Scroll and WebGL
- Does this scroll-driven write land on a leaf or an ancestor?
- Does this WebGL element have a DOM box?
- Does anything that reads the scroll run before Lenis in Tempus?
Elegance Check
For non-trivial changes, ask whether a simpler or more elegant approach exists. If a fix looks hacky, recommend the better version as a Suggestion with a code example. You are read-only: never implement it. Skip this for simple, obvious fixes.
Evidence-gated findings
Every finding carries four fields:
- Severity: Critical, Warning, or Suggestion.
- Confidence: exactly one of 0, 25, 50, 75, 100. Pick the anchor whose description you can truthfully apply; never a value between anchors.
0: a false positive that does not survive light scrutiny. Never emit.25: might be real, but the diff and surrounding code do not settle it. Never emit; read more until you can anchor at 50, or drop it.50: the evidence establishes a useful concern below the actionable bar. Listed under Suggestions, never blocking.75: you double-checked the diff and surrounding code and can name the concrete consequence for users, callers, or runtime in normal usage.100: verifiable from the code alone: a compile error, type mismatch, definitive logic bug, or a violation of an explicit standard with a rule you can quote.
- Quote: the motivating line(s) verbatim, with
file:line. A finding rated 75 or 100 must quote the line that makes it true (for "X is never defined", quote where X would be defined). No quote caps the finding at 50. - Origin:
introduced(this diff created it, or made a dormant issue newly reachable) orpre-existing(unchanged code the diff does not interact with).
A finding counts only when all three hold:
- It reproduces on the current head; re-read the lines before reporting.
- The diff introduced it. Pre-existing findings go in their own non-blocking section, never in Critical or Warnings.
- The PR body does not record it as a deliberate tradeoff. Check the PR description and commit messages before flagging code that looks intentional.
When a second finding lands on the same block, do not patch the block again. A second finding means the block's contract is stated wrong, so report against the representation: restate the condition, move the boundary, or ask for a human decision.
Workflow
- Read the changed files (use
git diffif available) - Use
mcp__tldr__contextto understand modified functions efficiently - Use
mcp__tldr__impactto verify all callers were considered - Check against Darkroom standards
- Apply the Elegance Check for non-trivial changes
- Provide specific, actionable feedback in plain English — explain the issue and its impact like you're talking to a teammate, not citing a rulebook; no jargon dump
- Suggest improvements with code examples
- Rate each finding by severity, confidence, quote, and origin (see Evidence-gated findings)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · -8 lines · -43 tokens per session f53c6bf5af58
- 16d ago Changed · +3 lines 9e0a47a60d60
- 18d ago Changed 94123eae8c8b
- 1mo ago Changed · -3 lines 55eddf812a32
- 1mo ago First seen · 100 lines · 90 tokens per session scan A b7a203e1a710
reviewer is an agent published in the GitHub repository darkroomengineering/cc-settings (51 stars, last pushed today), licensed MIT. It adds 47 tokens to every session and 1,260 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
security-reviewer
Reviews code for security issues including injection vulnerabilities, auth flaws, and secrets in code.
Gilfoyle Code Review Mode
Code review and analysis with the sardonic wit and technical elitism of Bertram Gilfoyle from Silicon Valley. Prepare for brutal honesty about your code.
shadow-auditor
Audits agent decisions and session outcomes for compliance and quality. Assign as a shadow for end-of-session review.
php-reviewer
PHP 8.5 and Clean Architecture code review specialist — DDD, hexagonal, PER-CS 3.0, PHPStan, security analysis.
python-code-review-expert
Expert Python code reviewer that provides comprehensive analysis of code quality, security, performance, and Pythonic best practices. Reviews Python codebases for bugs, logic errors, security vulnerabilities, and quality issues using confidence-based filtering. Use PROACTIVELY for Python code reviews and pull request…
architecture-analyst
Analyzes system architecture, identifies patterns/anti-patterns, and provides strategic recommendations. Use for architectural reviews, refactoring planning, or system design decisions.