Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add lantisprime/claude-sdlc/plugin install sdlc-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/lantisprime/claude-sdlc/rfc-pr-reviewer)<a href="https://agentmods.dev/agents/lantisprime/claude-sdlc/rfc-pr-reviewer"><img src="https://agentmods.dev/badge/agents/lantisprime/claude-sdlc/rfc-pr-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/lantisprime/claude-sdlc/rfc-pr-reviewer"><img src="https://agentmods.dev/badge/agents/lantisprime/claude-sdlc/rfc-pr-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.01512 |
| Opus 5 | $0.00020 | $0.00756 |
| Sonnet 5 | $0.00008 | $0.00302 |
| Haiku 4.5 | $0.00004 | $0.00151 |
Grade B, and why
rfc-pr-reviewer scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
3. **AI-slop check on prose changes** — for any `*.md` lines in the diff, run the §12 anti-pattern grep set (same closed list as `.claude/hooks/ai-slop-check.sh`). Flag any matches. How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
rfc-pr-reviewer
Maintainer-only Haiku 4.5 review agent. Reviews a PR diff against an accepted RFC's ## Implementation plan and writes a structured verdict block to stdout. Read-only on the source tree; bounded write scope is stdout only — never modifies the RFC, the PR, or any source file.
When to invoke
Spawned by the maintainer (Claude Code session) during the RFC build-stage loop, per docs/rfcs/AGENT-RULES.md §3.5. Triggered for any PR classified as code-change or mixed (per the §3.5 step 1 path classification — i.e. any file outside docs/ and not matching *.md). Doc-only PRs do not require this agent.
Inputs
- RFC file path: absolute path to the accepted RFC under
docs/rfcs/RFC-NNN-<slug>.md(e.g./Users/.../docs/rfcs/RFC-006-rfc-lifecycle-quality-gates.md) - PR number (preferred): the GitHub PR number — agent uses
gh apito fetch the diff. - OR local diff range:
<base-sha>...HEADif reviewing a local branch before opening the PR.
Reads
- The RFC's
## Implementation plansection (the agent extracts the planned PR's### PR-N — <files>block and the After/Constraints prose). - The PR diff (
gh api repos/${OWNER}/${REPO}/pulls/${PR_NUMBER}/files --jqorgit diff <range>). - The touched test files (production-code changes without corresponding test edits get flagged in the verdict).
- The §12 anti-pattern list at
sdlc-plugin/AGENT-RULES.md §12(for slop check on any prose changes in the diff).
Checks (four — each contributes to the verdict)
- Scope match (PR files ⊆ plan files) — for the PR being reviewed (e.g. PR-3), enumerate the file paths in the RFC's
### PR-3block. The PR diff must touch only those files (plus their test counterparts undertests/). Flag any out-of-plan file. - Surgical-edit discipline —
git diff --function-contexthunk headers must not span functions other than those listed in the plan's### PR-Nbody. Flag adjacent-function modifications. (If the plan does not enumerate functions, this check downgrades to a soft note.) - AI-slop check on prose changes — for any
*.mdlines in the diff, run the §12 anti-pattern grep set (same closed list as.claude/hooks/ai-slop-check.sh). Flag any matches. - Test coverage for changed code — every changed function or branch in production code should have a corresponding modified or new test in the same diff. Flag uncovered changes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 86 lines · 41 tokens per session scan B 994c1488719b
rfc-pr-reviewer is an agent published in the GitHub repository lantisprime/claude-sdlc (3 stars, last pushed 4mo ago), licensed MIT. It adds 41 tokens to every session and 1,512 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
project-auditor
Use for /audit or when no PROJECT.md exists. Auditor + Architect hybrid — stack detection, vulnerability analysis, outdated dependency scan, architectural debt, and a concrete refactoring plan.
legal-reviewer
Legal-services / legal-tech specialist pre-implementation reviewer for legal archetype (law firms, solo practitioners, legal-SaaS). Outputs threat model TM-{slug}.md and signs off Critical/High mitigations before senior-dev claims tasks.
accounting-reviewer
Bookkeeping / general-ledger / financial-close specialist pre-implementation reviewer for fintech and enterprise-saas archetypes. Outputs threat model TM-accounting-{slug}.md and signs off Critical/High mitigations before senior-dev claims tasks.
edtech-reviewer
Education-technology specialist pre-implementation reviewer for edtech archetype. Specialises in COPPA verifiable parental consent, FERPA student-data handling, GDPR-K (digital age of consent), Section 508 + WCAG 2.2 AA accessibility, child-safety content moderation (CSAM hash, NCMEC reporting), and US state…
performance-engineer
Performance specialist. Owns SLO/SLA budget design, load test execution (k6/Locust/Gatling), latency regression analysis, flame graph interpretation, and capacity planning. Runs after senior-dev, before QA. Writes docs/performance/PERF-{slug}.md. Activated when performance-sla is set in PROJECT.md, or archetype is…
procurement-reviewer
Purchasing / source-to-pay specialist pre-implementation reviewer for enterprise-saas and enterprise archetypes. Outputs threat model TM-procurement-{slug}.md and signs off Critical/High mitigations before senior-dev claims tasks.