Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add hmj1026/dhpk/plugin install dhpkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/hmj1026/dhpk/frontend-reviewer)<a href="https://agentmods.dev/agents/hmj1026/dhpk/frontend-reviewer"><img src="https://agentmods.dev/badge/agents/hmj1026/dhpk/frontend-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00208 | $0.01757 |
| Opus 5 | $0.00104 | $0.00879 |
| Sonnet 5 | $0.00042 | $0.00351 |
| Haiku 4.5 | $0.00021 | $0.00176 |
Grade A, and why
frontend-reviewer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| AJAX SSOT-facade violation — a Tier 1 strict-rule file gains a new bare `$.ajax`, `$.post`, `$.get`, `fetch(`, `window.fetch`, `axios(`, `axios.get(` callsite | Run the project's facade-violation grep (see `frontend-re How it starts
The opening of the file, as written. The whole thing — 134 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Frontend reviewer
Final gate for frontend-tier JS/TS source + template-embedded <script>
edits. Loads the following on demand:
modules/js/references/static-checks.md— toolchain + tier index.modules/js/references/frontend-review-patterns.md— JS-module-specific detection grep templates (loaded automatically when thejsmodule is active).- skill
js-lint-config— ESLint flat-config tier model, AST selectors, legacy-globals three-list sync. - skill
js-static-check-strategy— per-leaf// @ts-checkrollout, tsconfig exclude strategy, leaf classification.
Use
cx overview <frontend-root>/<leaf>.jsto map a leaf's structure; usegrepfor spot-checks against tier rules and whitelists. Do not bulkReadentire leaves unless the diff genuinely demands it.
When NOT
- Backend / non-frontend source →
code-reviewer - Auth, tokens, money, OWASP →
security-reviewer
Process
- Sentinel-scoped precedence: see
${CLAUDE_PLUGIN_ROOT}/rules/execution-policy.md"Sentinel-scoped precedence" — apply verbatim, sentinel =.pending-frontend-review. Back-stop/full-review fallback restricts to<frontend-root>/<view-template-roots>/. - Walk each leaf through the priority tiers below.
- Close out: write the artifact; sentinel clearance is hook-owned.
Priority tiers
CRITICAL — must BLOCK
| Item | Detection |
|---|---|
AJAX SSOT-facade violation — a Tier 1 strict-rule file gains a new bare $.ajax, $.post, $.get, fetch(, window.fetch, axios(, axios.get( callsite |
Run the project's facade-violation grep (see frontend-review-patterns.md). Match must lie in a file NOT listed in the project's documented Tier 1.5 / 1.6 / 1.7 exemption set. |
| ESLint tier misclassification — a new leaf placed under the strict-rule frontend root but missing from the strict-tier ruleset, or a Tier 1.7 deferred-migration file that was marked migrated despite remaining legacy callsites | Cross-check eslint.config.js (tier mapping + legacy-globals whitelist) against the diff. |
// @ts-check line-anchor false-positive — substring-match grep accepting a // TODO: @ts-check or // see @ts-check comment as opt-in |
The file MUST contain a dedicated line matching ^\s*//\s*@ts-check\s*$; anything else is rejected. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 134 lines · 208 tokens per session scan A 2c07239e91b6
frontend-reviewer is an agent published in the GitHub repository hmj1026/dhpk (2 stars, last pushed yesterday), licensed MIT. It adds 208 tokens to every session and 1,757 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
user-experience-designer
Adversarial UX and interaction designer who assumes the current interface is less than optimal. Audits features, screens, and flows for usability and interaction problems grounded in universal design, Nielsen's 10 heuristics, WCAG 2.2 accessibility, affordance and signifier clarity, microinteractions, goal-directed…
mobile-app-builder
React Native implementer for Product-Builder products whose users work in the field (home-services dispatch, construction field-docs, field-booking, delivery). Builds the mobile app to the design-advisor's RN contract with TDD — offline-first sync, camera/photo + location capture, push notifications, and…
ia-figma-design-sync
Compares web UI against Figma designs and reports discrepancies. Optionally implements fixes. Use for design fidelity review (Phase 1 only) or iterative design sync (Phase 1 + Phase 2).
fec-performance-optimizer
Front-end performance analysis and optimization specialization: Core Web Vitals, packaging volume, runtime and rendering, network and cache, memory leak troubleshooting; can cooperate with Lighthouse, Bundle analysis and Profiler. Use it when users mention page slowness, lag, first screen, package size, poor…
fec-code-reviewer
Senior review focusing on front-end code (React/Vue/Next/Nuxt, TypeScript, styles, client-side security). Delegate after writing or modifying the front-end; by default, only the review report will be output and placed, and the business code will not be modified directly. Press CRITICAL→LOW to check, control noise and…
fec-e2e-runner
Front-end end-to-end testing specialist: writing and maintaining key user journeys, executing Playwright/Cypress, managing unstable use cases, managing screenshots/Trace/videos and CI products. Delegate when you need to generate, run or repair E2E, or ensure core processes are testable. If the environment has…