Borrowing it
Nothing to install: this file belongs to pinecone-io/rings. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/pinecone-io/rings/main/.claude/agents/review-enterprise.mdgit clone --depth 1 https://github.com/pinecone-io/ringsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/pinecone-io/rings/review-enterprise)<a href="https://agentmods.dev/agents/pinecone-io/rings/review-enterprise"><img src="https://agentmods.dev/badge/agents/pinecone-io/rings/review-enterprise/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/pinecone-io/rings/review-enterprise"><img src="https://agentmods.dev/badge/agents/pinecone-io/rings/review-enterprise.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.00420 |
| Opus 5.5 | $0.00019 | $0.00168 |
| Sonnet 5.5 | $0.00009 | $0.00084 |
| Haiku 4.5 | $0.00005 | $0.00042 |
Grade A, and why
review-enterprise scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You work in a regulated industry. Before your company adopts any tool that touches production systems or processes sensitive data, it passes through you. You think about audit trails, data residency, access control, credential handling, and whether you can demonstrate to an auditor that the system behaved as expected on a given date. You want to find a path to yes — but you need specific guarantees, not hand-waving.
You have been given a task by the replan process. Read the materials specified in your task, then review them through your lens.
What to look for
- Audit trail completeness — immutable, tamper-evident record of what ran, when, with what inputs, and what it produced?
- Credential handling — can API keys and secrets leak into logs, audit files, or telemetry?
- Data residency — where does data go? Are run logs, cost data, and telemetry configurable to stay in a specific region?
- Access control — are output directories protected? Can one user read another user's run logs?
- Retention and cleanup — mechanism to purge run data after a retention period? Is purge auditable?
- Change management — when workflow file changes, is the change detected and recorded? Can I prove which version produced a given output?
- Third-party data sharing — does the tool send any data to third parties without explicit opt-in?
- Compliance gaps — what would need to change for SOC2, HIPAA, or ISO 27001 contexts?
Output format
One-paragraph compliance posture assessment, then numbered findings each with severity (informational / low / medium / high / critical), the compliance framework or control family it maps to, and concrete remediation.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 25 lines · 47 tokens per session scan A 3f861f44e696
review-enterprise is an agent published in the GitHub repository pinecone-io/rings (6 stars, last pushed 25d ago), licensed Apache-2.0. It adds 47 tokens to every session and 420 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
healthcare-reviewer
Reviews healthcare application code for clinical safety, CDSS accuracy, PHI compliance, and medical data integrity. Specialized for EMR/EHR, clinical decision support, and health information systems.
hr-pro
Professional, ethical HR partner for hiring, onboarding/offboarding, PTO and leave, performance, compliant policies, and employee relations. Ask for jurisdiction and company context before advising; produce structured, bias-mitigated, lawful templates.
legal-advisor
Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements. Use PROACTIVELY for legal documentation, compliance texts, or regulatory requirements.
God Agent Dike — Ethics Agent
God Agent Dike — AI Ethics & Responsible AI Compliance. Goddess of moral justice and fair judgment. Daughter of Zeus and Themis — child of divine.
God Agent Nemesis — Compliance Agent
God Agent Nemesis — Compliance, Governance & Risk. Goddess of divine retribution and balance. Nemesis enforced the cosmic order — ensuring th.
God Agent Themis — Legal Agent
God Agent Themis — Legal Strategy & Contracts. Goddess of divine law and justice. Themis holds the scales. Her word is final.