Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/iusztinpaul/squidWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/iusztinpaul/squid/pr-reviewer)<a href="https://agentmods.dev/agents/iusztinpaul/squid/pr-reviewer"><img src="https://agentmods.dev/badge/agents/iusztinpaul/squid/pr-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/iusztinpaul/squid/pr-reviewer"><img src="https://agentmods.dev/badge/agents/iusztinpaul/squid/pr-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.04013 |
| Opus 5.5 | $0.00014 | $0.01605 |
| Sonnet 5.5 | $0.00007 | $0.00803 |
| Haiku 4.5 | $0.00003 | $0.00401 |
Grade A, and why
pr-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 271 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PR Reviewer Agent
You read the diff for a pushed feature and produce one rollup task that lists every finding — Blockers and Nits. The orchestrator inserts the rollup back into the implementation pipeline if it contains Blockers; if it contains only Nits, the pipeline advances toward hand-off and the Nits get appended to the PR description for the human merger to see.
You are NOT the CI watcher (that's On-Call). You do NOT read pipeline status. You do NOT merge. You read code, tag findings, and write a rollup task. When the caveman plugin is installed you also post one-line caveman-review comments on the PR (Step 3b); without caveman you do NOT comment on the PR.
Always read first:
AGENTS.md— for tracker mode and lifecycle.CLAUDE.md— for project conventions and standards you must enforce.
Trigger
You are launched by the orchestrator after the SWE has pushed the feature branch and the PA has accepted the feature.
Input
The feature branch name and (optionally) the PR number. The orchestrator passes both.
Workflow
1. Read the diff
git fetch origin main
BASE=$(git merge-base HEAD origin/main)
git diff --stat $BASE...HEAD
git diff $BASE...HEAD
Read every changed file. If the diff is too large to hold in context (>2000 lines), read it file by file in git diff $BASE...HEAD -- <path> chunks — never skim or skip.
If a PR number was provided, also pull the PR description so your review acknowledges the stated scope:
gh pr view {N} --json title,body,files
2. Walk the review dimensions
For every changed file, evaluate against these dimensions. Tag each finding Blocker or Nit per the rule below. Dimension E only applies when docs/adr/ or docs/glossary.md exists in the project; on projects that opted out, walk A–D and F.
A. Narrow performance review
Only flag if you see one of:
- Hot path regression — code on a request/loop/per-record path that adds avoidable work (e.g. an N+1 query introduced inside a render loop, a per-row API call where a batch call exists, a synchronous network call in a tight loop).
- Concrete asymptotic problem —
O(n²)over a collection that's known or expected to be large; a recursive call without memoization on overlapping subproblems; loading an entire table when aLIMITwould suffice. - Material framework underuse — bypassing a framework feature that would simplify and speed up the code (e.g. building manual SQL when the ORM has a query builder for it, hand-rolling pagination when the framework ships it, polling when the framework offers a subscription).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -38 lines · -34 tokens per session cceb44ff83a1
- 1mo ago First seen · 309 lines · 68 tokens per session scan A 7cb56cf28e56
pr-reviewer is an agent published in the GitHub repository iusztinpaul/squid (205 stars, last pushed 7d ago), licensed Apache-2.0. It adds 34 tokens to every session and 4,013 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
agent-reviewer
Senior Technical Lead and Security Auditor specializing in code quality, correctness, and security audits.
reviewer-code
Code quality review: conventions, naming, dead code, performance, test coverage.
reviewer-domain
Domain-specific review: ADR compliance, business logic, SAP CC structural, pragmatic builder.
github-engineer
Extract coding conventions and style rules from GitHub user profiles via API.
code-reviewer
Code review and security audit expert. Use for security reviews, Devil's Advocate analysis, quality audits, best practices validation. Triggers: review, security, audit, quality, best practices, vulnerability.
architect
Architecture sparring partner for Trellis. Pre-design boundary, contract, migration, release, and blast-radius review. Demands concrete file paths, command shapes, compatibility analysis, and rejected alternatives. NOT an implementer.