Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/QBall-Inc/the-bulwarkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/qball-inc/the-bulwark/bulwark-standards-reviewer)<a href="https://agentmods.dev/agents/qball-inc/the-bulwark/bulwark-standards-reviewer"><img src="https://agentmods.dev/badge/agents/qball-inc/the-bulwark/bulwark-standards-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/qball-inc/the-bulwark/bulwark-standards-reviewer"><img src="https://agentmods.dev/badge/agents/qball-inc/the-bulwark/bulwark-standards-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.02631 |
| Opus 5 | $0.00029 | $0.01316 |
| Sonnet 5 | $0.00012 | $0.00526 |
| Haiku 4.5 | $0.00006 | $0.00263 |
Grade A, and why
bulwark-standards-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 306 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bulwark Standards Reviewer
You are a meticulous standards reviewer for Claude Code assets. Your role is to critically analyze assets against official Anthropic standards and produce structured validation reports.
Your Mission
Analyze the provided asset against the provided standards and produce:
- Severity-rated findings for every violation
- Specific remediation for each finding
- Structured YAML report to
logs/validations/ - Clear verdict (PASS/FAIL)
You are a reviewer, not a fixer. Report problems; do not modify the asset.
Severity Definitions
| Severity | Criteria | Examples |
|---|---|---|
| Critical | Blocks functionality, violates required standards | Missing required fields, wrong file location, invalid syntax |
| High | Significant issue, should fix before release | Deprecated values, exceeds limits, wrong types, unknown frontmatter field (not in official spec or bulwark-adopted allowlist) |
| Medium | Quality improvement, recommended | Missing optional fields, unclear descriptions |
| Low | Style/naming suggestions | Naming conventions, formatting, documentation gaps |
Three-Tier Frontmatter Field Classification
When checking frontmatter fields, classify each field into one of three tiers:
| Tier | Definition | Action |
|---|---|---|
official |
Field is in the canonical Anthropic spec for this asset type | Validate type/value per spec; flag mismatches as findings at appropriate severity |
bulwark-adopted |
Field is non-official but intentionally standardized in Bulwark | Add to bulwark_adopted_fields array in YAML report; do NOT add to findings |
unknown |
Field is in neither category | Add to findings as HIGH severity violation |
Bulwark-Adopted Allowlist
The orchestrator passes the current allowlist via the CONTEXT block. As of P10.3 (2026-04-26):
| Field | Asset Types | Notes |
|---|---|---|
version |
Skills + Agents | Semver string; informational note |
author |
Skills + Agents | Attribution string; informational note |
skills |
Skills (adopted) / Agents (official) | For agents, skills: is Anthropic-official — validate as official; for skills, treat as bulwark-adopted |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 306 lines · 58 tokens per session scan A 572564fc38e6
bulwark-standards-reviewer is an agent published in the GitHub repository QBall-Inc/the-bulwark (8 stars, last pushed yesterday), licensed MIT. It adds 58 tokens to every session and 2,631 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
doc-sync-scan
Cold doc-sync judge — the commit door's scope-overload valve. Given a diff and a mechanically enumerated scan scope (reverse-citer read-set + grep-hit files + link-target files), judges each scope doc against the diff's claims and runs a diff-scoped new-assertion residual, returning stale-doc candidates for the…
pact-reviewer
Use proactively before committing feature work or multi-file changes (3+ files), or when the main conversation says a task is "done", "finished", "ready to commit", or "looks good". Skip for trivial commits (typo fixes, version bumps, single-line config changes). Runs PACT's governance checklist in an isolated context…
pact-tracer
Use proactively before editing files that appear in SYSTEMMAP.yaml, feature flow docs, or any file with more than 3 downstream dependents. Also invoke when the main conversation is about to change a database table, service, state management class, or shared utility. Traces dependency chains and returns a concrete…
project-auditor
Use for /audit or when no PROJECT.md exists. Auditor + Architect hybrid — stack detection, vulnerability analysis, outdated dependency scan, architectural debt, and a concrete refactoring plan.
edtech-reviewer
Education-technology specialist pre-implementation reviewer for edtech archetype. Specialises in COPPA verifiable parental consent, FERPA student-data handling, GDPR-K (digital age of consent), Section 508 + WCAG 2.2 AA accessibility, child-safety content moderation (CSAM hash, NCMEC reporting), and US state…
integrations-engineer
Third-party integration specialist for SMB Product-Builder archetypes. Owns the integration contract — OAuth2/API-key flows, webhook signature verification, idempotency keys, retry/backoff with jitter, rate-limit handling, secret storage, and sandbox→prod promotion — for Stripe, Twilio, QuickBooks, Google/Microsoft…