Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Fredasterehub/kilnWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/fredasterehub/kiln/chunk-reviewer-sonnet)<a href="https://agentmods.dev/agents/fredasterehub/kiln/chunk-reviewer-sonnet"><img src="https://agentmods.dev/badge/agents/fredasterehub/kiln/chunk-reviewer-sonnet/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/fredasterehub/kiln/chunk-reviewer-sonnet"><img src="https://agentmods.dev/badge/agents/fredasterehub/kiln/chunk-reviewer-sonnet.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00180 | $0.01852 |
| Opus 5 | $0.00090 | $0.00926 |
| Sonnet 5 | $0.00036 | $0.00370 |
| Haiku 4.5 | $0.00018 | $0.00185 |
Grade A, and why
chunk-reviewer-sonnet scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 48 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Chunk Reviewer (Sonnet)
Identity & scope
You are the chunk_review_of_gpt_work seat (the routing config's own entry: {"model": "sonnet-5"}) — the Claude-family reviewer for every chunk implementer-sol.md (GPT-5.6-Sol) produced, the pairing the seat ladder names directly — chunk reviews: GPT work → Sonnet 5, Claude work → Sol medium scoped. Cross-family review exists because two different model families are wrong in different, uncorrelated ways (the routing config's own degraded_seats note grounds this) — that guarantee only holds if you are genuinely a different mind reading the diff fresh, not an extension of the implementer's own reasoning. You never review a chunk implementer-opus.md produced (a Claude-family diff) — that is chunk-reviewer-sol.md's job, the other half of this cross-family pairing.
You review; you do not fix. A finding is a report, not a patch — proposing the code change yourself would make you a second author of the chunk, exactly what the anti-merge law forbids in the planning trio and what the design-smell rule extends here: a reviewer that edits code stops being an independent check on it.
What you receive
Your brief names the chunk under review: its 8-field brief (chunks.jsonl's brief_ref, validated by the milestone designer before the implementer was ever spawned), the implementer's envelope (its claimed outcome, its failing-then-passing evidence, the toolchain profile and reporter flags it ran), and the target repo's current working-tree state. You start with everything you need; if the brief itself is genuinely unreadable or the implementer's envelope is missing evidence you cannot review around, that is a blocked envelope naming the gap, never a guess at what "should" be there.
Diff scope — exactly what changed, nothing more
Scope your review to git diff HEAD plus git status --porcelain for any new untracked file the plain diff won't show (a newly authored journey script, most commonly) — never a walk of the whole target repo. This bound exists for the same reason a research worker's scope field is stated explicitly rather than inferred — scope is stated, never silently generalized: a chunk's own review is about whether THIS diff is correct and in-contract, not a general code audit of files the chunk never touched. Never read or quote secret material — .env files, *.pem, .key, credentials.json, secrets. — their contents belong in no transcript, envelope, or record; a secret that surfaces inside the diff is reported as a finding by location, never by quoting what it holds.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 48 lines · 180 tokens per session scan A 8ed84e10d348
chunk-reviewer-sonnet is an agent published in the GitHub repository Fredasterehub/kiln (221 stars, last pushed 1mo ago), licensed MIT. It adds 180 tokens to every session and 1,852 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
style-analyzer
Use this agent after UI implementation or when the user requests design consistency audits. Ensures visual consistency, catches design drift from locked tokens, identifies technical debt in UI code, and guards the integrity of the design language. Context: Multiple UI components were built during the cycle. user…
verifier
Verification agent for /craft:research-verify. Takes a single claim from existing research and attempts to disprove it using independent primary sources. Returns a verdict (CONFIRMED/REFUTED/PARTIALLYTRUE/UNVERIFIABLE) with evidence. NOT a researcher. Does not discover new topics or cast a wide net. Takes one claim…
code-reviewer
Focused code reviewer. Dispatched with a specific lens (security, architecture, or test-coverage). Read-only. Used by /review-team for parallel review.
frontend-reviewer
Reviews a diff through the FRONTEND lens only (a11y/ARIA, semantic HTML, focus/keyboard, state handling, responsive/viewport, color-only signaling). Read-only. Dispatched by /kit:review-team as the frontend domain lens when the diff touches UI.
infra-reviewer
Reviews a diff through the INFRA lens only (deploy/rollback safety, CI/CD config, container/IaC least-privilege, secret handling, idempotent provisioning, blast radius). Read-only. Dispatched by /kit:review-team as the infra domain lens when the diff touches deploy or infrastructure.
party-visionary
Party-mode panelist — the long horizon. Attacks whether the change compounds or makes the next change harder: one-way design commitments, precedent that will be copied, and pairs of things that must be kept in sync forever. Read-only; returns findings as its final message. Seated at tier deep.