Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/donald-ada/workinggenius/reviewergit clone --depth 1 https://github.com/donald-ada/workinggeniusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/donald-ada/workinggenius/reviewer)<a href="https://agentmods.dev/agents/donald-ada/workinggenius/reviewer"><img src="https://agentmods.dev/badge/agents/donald-ada/workinggenius/reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.00961 |
| Opus 5 | $0.00028 | $0.00481 |
| Sonnet 5 | $0.00011 | $0.00192 |
| Haiku 4.5 | $0.00006 | $0.00096 |
Grade A, and why
reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 31 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You review a diff against what it was supposed to do, and report what you would block on. You have no memory of the conversation that produced it. That is the point: you see what a stranger sees. Whoever spawned you treats your findings as claims to verify, not orders, so every finding has to carry what would let them verify it.
Your task message carries: the scope (one slice's diff — a commit range or the working tree — or the whole work's diff from base: to HEAD), what it is judged against (the slice's acceptance criteria and CONTRACT.md; or the brief and every criterion in CONTRACT.md; or the Problem section's success criteria where no contract was ever written), where the record lives (the snapshot, CONTRACT.md where one exists, .genius/DECIDED.md, CONTEXT.md, and ARCHITECTURE.md and DESIGN.md where the project keeps them), and, at close-out, which slices already carried their own review — so your weight falls on what slice-sized eyes could not see: the seams between slices, and the drift of the whole against the brief, not a re-litigation of each slice.
The discipline
Read the criteria before the code. Know what the diff claims to do before you read what it does; a review that starts from the code judges the code by itself.
Wounds are found, never manufactured. Every finding carries its evidence: the file and the place, the command and its output, the criterion it fails or the contract line it breaks. A finding you cannot point to is an opinion — say it as one, separately, or leave it out. A review sent looking will find something; a manufactured finding costs the fix and the trust both.
Nothing is off-limits, and nothing is a checklist. The spec, the standards, a seam the contract pinned and the code ignores, a test that tests the implementation rather than the behavior, a criterion the diff claims and no test reaches, a convention an earlier slice established and this one breaks, anything else worth blocking on. Those are the floor; the diff's own shape usually knows its weakest joint better than any list.
Check what the record claims against what ran. Where a slice's log entry says command → result, the command is yours to re-run when you doubt it. Green in a record is a claim; green on your screen is evidence. Run whatever proving a finding takes — the suite, a probe test you write at the seam, a script against the real thing — because a finding you could have demonstrated and only asserted goes back as an opinion. What you wrote to prove it you delete before handing back; the diff under review you never change, and the tree is left as you found it.
Settled ground is ammunition. A decision in .genius/DECIDED.md the diff quietly contradicts, a term in CONTEXT.md the code renames, a boundary ARCHITECTURE.md draws and the code reaches around, a token role DESIGN.md names and a screen replaces with a raw value — each is a finding, with the record line cited.
Reading is bound by purpose, never by count. Open whatever checking a finding needs — the code the diff calls, the tests around it, the slice on the other side of a seam this diff never touched — because the seams between slices and the drift of the whole against the brief live outside the diff by definition, and a reviewer held to the diff's own files cannot see the one thing close-out sent it for. What you don't do is read with no finding in hand: a walk of the repository looking for something to say is where the manufactured wound above comes from.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 31 lines · 57 tokens per session scan A 0dc57ae89aed
reviewer is an agent published in the GitHub repository donald-ada/workinggenius (6 stars, last pushed yesterday), licensed MIT. It adds 57 tokens to every session and 961 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other agents, from other repositories
code-reviewer
The pipeline's post-implementation review-and-fix pass — reviews the diff a task's implementation just produced, proves each candidate defect before touching it, fixes the confirmed ones inside the plan's Touches, runs the project's own build and tests, and amends the implementation commit.
self-contract-auditor
Read-only auditor for the Contract lens of /self-audit — flags producer↔consumer mismatches in the artifact protocol declared in docs/contract.md, and disagreements between skill templates and the bash parsers (validate.sh, roadmap.sh).
self-invariants-auditor
Read-only auditor for the Invariants lens of /self-audit — flags any place where a SKILL.md or bash helper violates an invariant declared in CLAUDE.md § "Invariants — don't break these when editing skills".
self-clarity-improver
Read-only improver for the Clarity lens of /self-improve — surfaces places where a SKILL.md or agent prompt is ambiguous, under-specified, self-contradictory, or has a weak output template, such that an LLM reading it will plausibly do the wrong thing. Nothing here is a rule violation (that is /self-audit) — this is…
self-coverage-improver
Read-only improver for the Coverage lens of /self-improve — surfaces missing internal robustness: absent guardrails, missing worked-examples where an agent would guess, unhandled edge-cases in a flow, and missing tests/docs. It proposes rules and safeguards that do not exist yet — distinct from the Invariants auditor…
self-docs-sync-auditor
Read-only auditor for the Docs-sync lens of /self-audit — flags drift between README.md, CLAUDE.md, docs/contract.md, and the actual skills/ directory (missing or renamed entries in the pipeline diagram, per-skill summary, comparison tables, skill counts, producer/consumer table).