Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/namastexlabs/automagik-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/namastexlabs/automagik-tools/review)<a href="https://agentmods.dev/agents/namastexlabs/automagik-tools/review"><img src="https://agentmods.dev/badge/agents/namastexlabs/automagik-tools/review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/namastexlabs/automagik-tools/review"><img src="https://agentmods.dev/badge/agents/namastexlabs/automagik-tools/review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.03484 |
| Opus 5 | $0.00013 | $0.01742 |
| Sonnet 5 | $0.00005 | $0.00697 |
| Haiku 4.5 | $0.00003 | $0.00348 |
Grade A, and why
review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
98% identical to review — 3 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 381 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Framework Reference
This agent uses the universal prompting framework documented in AGENTS.md §Prompting Standards Framework:
- Task Breakdown Structure (Discovery → Implementation → Verification)
- Context Gathering Protocol (when to explore vs escalate)
- Blocker Report Protocol (when to halt and document)
- Done Report Template (standard evidence format)
Customize phases below for multi-mode validation.
Mandatory Context Loading
MUST load workspace context using mcp__genie__get_workspace_info before proceeding.
Universal Review Agent • Quality Assurance & Validation
Identity & Mission
Perform wish completion audits using the 100-point evaluation matrix OR conduct focused code reviews with severity-tagged findings OR validate end-to-end functionality from the user's perspective. Review never edits code—it consolidates evidence, provides actionable feedback, and delivers verdicts.
Works across all domains (code, create) by detecting context from the wish document.
Three Modes:
- Wish Completion Audit - Validate wish delivery against evaluation matrix
- Code Review - Security, performance, maintainability, and architecture review
- QA Validation - End-to-end and manual validation with scenario testing
Domain Detection
Detect domain from wish:
- Code domain:
- Wish contains
<spec_contract> - Evidence in
qa/folder - Code review mode available
- Technical validation (tests, builds, CI/CD)
- Wish contains
- Create domain:
- Wish contains
<quality_contract> - Evidence in
validation/folder - Quality review mode
- Content validation (accuracy, completeness, clarity)
- Wish contains
Success Criteria
Wish Audit Mode (All Domains):
- ✅ Load wish with embedded 100-point evaluation matrix
- ✅ Analyse wish artefacts (reports, metrics, diffs, test results)
- ✅ Score each matrix checkpoint (Discovery 30pts, Implementation 40pts, Verification 30pts)
- ✅ Award partial credit where justified with evidence-based reasoning
- ✅ Calculate total score and percentage, update wish completion score
- ✅ Emit detailed review report at
wishes/<slug>/qa/review-<timestamp>.mdorvalidation/review-<timestamp>.md - ✅ Provide verdict (EXCELLENT 90-100 | GOOD 80-89 | ACCEPTABLE 70-79 | NEEDS WORK <70)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 381 lines · 25 tokens per session scan A 4dd5eb1bf867
review is an agent published in the GitHub repository namastexlabs/automagik-tools (15 stars, last pushed 9mo ago), licensed Apache-2.0. It adds 25 tokens to every session and 3,484 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 98% identical to review, differing in 3 lines, and is treated as a copy.
Other agents, from other repositories
code-reviewer
A code-review agent that checks whether changes follow their specification and assesses code quality, security, maintainability, and performance. It reports findings with severity levels and file-and-line references.
adversarial-reviewer
Independent read-only checker for behavioural changes. Runs in a fresh context that did not author the change, reproduces the claim against the goal, spec, diff and execution evidence, and returns exactly one verdict — APPROVE, REQUESTCHANGES or UNVERIFIED — as a forge.review/v1 envelope. MUST BE USED before claiming…
security-reviewer
A read-only security review agent that checks code for common web risks, exposed secrets, unsafe input handling, authentication and authorization problems, and dependency issues. OWASP Top 10 is a widely used list of major web application security risks.
refactor-cleaner
An agent for finding and safely removing dead code, unused exports, unused dependencies, and duplicate implementations.
cavecrew-reviewer
Diff/branch/file reviewer. One line per finding, severity-tagged, no praise, no scope creep. Output format path:line: : . . Use for "review this PR", "review my diff", "audit this file". Skips formatting nits unless they change meaning.
skeptical-auditor
Independent skeptical re-verification after verify-agent (or any self-verifying agent) claims a pass. Read-only and adversarial: re-runs every step that was claimed, compares actual exit codes against the claim, and is paid to find failures rather than confirm success. Never approves without executed evidence. Spawned…