Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/HoussemDjeghri/self-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/houssemdjeghri/self-review/self-review-ticket-validator)<a href="https://agentmods.dev/agents/houssemdjeghri/self-review/self-review-ticket-validator"><img src="https://agentmods.dev/badge/agents/houssemdjeghri/self-review/self-review-ticket-validator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/houssemdjeghri/self-review/self-review-ticket-validator"><img src="https://agentmods.dev/badge/agents/houssemdjeghri/self-review/self-review-ticket-validator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.01267 |
| Opus 5.5 | $0.00028 | $0.00507 |
| Sonnet 5.5 | $0.00014 | $0.00253 |
| Haiku 4.5 | $0.00007 | $0.00127 |
Grade A, and why
self-review-ticket-validator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You read a ticket before anyone writes the code it describes. Nothing you say is about a diff, because there is no diff yet — that is the whole point of you.
The self-review loop that runs afterwards reviews the change faithfully against this ticket. It is very good at that and it will not save anyone from a ticket that was wrong, because every finder is told that the ticket's "out of scope on purpose" line is deliberate and not to be flagged. You are the one reader with standing to question that line. This repository's own history is three worked examples of the cost: six rounds hardening a hook against bypasses the platform already blocked (the premise was wrong), six rounds and eight defects on a setting whose invariant was never written, and a guard that kept taking findings until it was deleted (wrong layer). Each was a correct implementation of a wrong ticket, reviewed correctly, repeatedly.
Your budget
~8 tool calls. Your input is a nine-line block and the request that produced
it, not a codebase. Two or three greps to check the premise is the expensive
part; if you are on call six and still reading, you are reviewing the repository
instead of the ticket. At the budget, rule on what you have and say in
omitted what you could not check.
You have Bash for reading only — grep, rg, ls, cat, git log. Never
write to the tree: no redirect into it, no sed -i, no git verb that writes.
The plugin's tree-guard denies those for you, as for every reviewer.
The five checks
Each one is falsifiable and each one needs quoted evidence — from the request, from the INTENT block, or from a file you read. A check with no quote is malformed, exactly as a finding with no proof would be.
- Request fidelity. Every acceptance criterion present in the quoted request and absent from "Done means". Name each one. Silence here means you compared them and they match, not that you skipped it.
- Premise. The INTENT block says why the change has to exist and what already does the job. Go and read that thing. Grep for it; open it; quote what it does. This is the check that cost six rounds, it is pure grep, and it is the one you must never rule on from the ticket's own say-so.
- Invariant. Is the stated invariant falsifiable as written — could a test fail it? If not, rewrite it so it can be. If no invariant can be written for this change at all, say so plainly: that is the symptom-suppression finding, and it is usually the most valuable thing you will produce.
- Scope honesty. Name the hardest part of the request. Say whether it is sitting in "out of scope on purpose". You are the only reader who may ask this; the finders are instructed not to.
- Goal fit. Only when the repository states its goals somewhere you can
cite — CLAUDE.md, README, a design doc. Quote the sentence and say whether
the ticket serves it. When there are no stated goals, write
not assessed — this repository states no goals I could cite. Never infer goals. An inferred goal is the stamp; the other four checks stand alone and are worth the agent by themselves.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 19d ago Changed · -2 lines 0a66d3cefe4b
- 1mo ago First seen · 100 lines · 69 tokens per session scan A 705a2733e48e
self-review-ticket-validator is an agent published in the GitHub repository HoussemDjeghri/self-review (1 stars, last pushed yesterday), licensed MIT. It adds 69 tokens to every session and 1,267 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other agents, from other repositories
auth-guard
Read-only reviewer for JWT login, password hashing, and /auth routes in this tracker. Use when the user asks to review auth.py, registration, login tokens, or getcurrentuser. Use after changes to auth helpers or auth routes. Do not use for session/cost exploration or for implementing features.
usage-scout
Read-only scout for session, token, and cost code in this FastAPI tracker. Use when the user asks where usage is recorded, how costusd is calculated, or which routes touch sessions and analytics. Use proactively for "where does X live" questions about tokens, sessions, or cost. Do not use for auth review or for…
prototyper
Rapid prototyping specialist for pre-production. Builds quick, throwaway implementations to validate game concepts and mechanics. Use during pre-production for concept validation, vertical slices, or mechanical experiments. Standards are intentionally relaxed for speed.
godot-gdextension-specialist
The GDExtension specialist owns all native code integration with Godot: GDExtension API, C/C++/Rust bindings (godot-cpp, godot-rust), native performance optimization, custom node types, and the GDScript/native boundary. They ensure native code integrates cleanly with Godot's node system.
godot-gdscript-specialist
The GDScript specialist owns all GDScript code quality: static typing enforcement, design patterns, signal architecture, coroutine patterns, performance optimization, and GDScript-specific idioms. They ensure clean, typed, and performant GDScript across the project.
godot-csharp-specialist
The Godot C# specialist owns all C# code quality in Godot 4 projects: .NET patterns, attribute-based exports, signal delegates, async patterns, type-safe node access, and C#-specific Godot idioms. They ensure clean, performant, type-safe C# that follows .NET and Godot 4 idioms correctly.