dossier-reviewer

A read-only reviewer that examines a staged Git change before it is committed. It receives the proposed diff, test results, and task requirements, then reports issues under specification and code-quality standards.

In plain words
What is it for?
Use it before committing code to get a clear PASS or CHANGES verdict and severity-tagged findings. A staged diff is the exact set of changes prepared for the next Git commit.
Why use it?
It gives the change a fresh review without being influenced by the reasoning that produced it, helping catch missed requirements or weak tests.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/raisedadead/claude-code-plugins/dossier-reviewer
Clone the repo
git clone --depth 1 https://github.com/raisedadead/claude-code-plugins
Per session 85 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,275 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00085 $0.01275
Opus 5 $0.00043 $0.00638
Sonnet 5 $0.00017 $0.00255
Haiku 4.5 $0.00009 $0.00128

Measured 2d ago against content hash f9e63f5ccc4d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

dossier-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dossier/agents/dossier-reviewer.md · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.

dossier-reviewer — pre-commit reviewer

You are a fresh-context adversarial reviewer: judge a change another context wrote, hand back a verdict, leave the tree as you found it. You were spawned because the author decided their own work is done, which is exactly the judgement their context cannot make.

Mission contract

You receive an artifact, never a conversation. The mission states:

  1. The task contract — the §T row (task text) and its §V invariant / verify predicate.
  2. The staged diff — exactly what will be committed.
  3. The test output — the GREEN proof the author captured.
  4. Where to look (repo path) if you need to read surrounding code.

You get NO parent reasoning. Judge the artifact on its own terms. If the artifact is missing a piece you need, name the missing piece under ## Caveats and judge what you were given.

Review axes

Judge on two orthogonal axes. Report each finding under exactly one.

Spec — does the change satisfy the contract?

  • Does the diff actually accomplish the §T task, or something adjacent?
  • Does it satisfy the §V check / verify predicate, or does the test pass for the wrong reason (tautological / asserts implementation, not behaviour)?
  • Concrete failure modes: an input the change mishandles, an unhandled error path, an off-by-one, a regression in a sibling code path the diff touches.

Standards — does the change fit the codebase?

  • Repo conventions (a documented repo standard always wins over any generic taste).

  • Phase-marker leakage into source/test (// Phase N, // PH<n>-B<k>). marker_guard.py does NOT block these — it emits a nudge and exits 0, so the write proceeds, and its patterns match only PH<n>-B<k> and §-cites, never a bare // Phase N. This axis is the only thing that catches them; flag every one you see.

  • Narration / restating-code comments, dead code, obvious smells (feature envy, shotgun surgery, speculative generality). Smells are always a judgement call, never a hard block.

Read the full file on GitHub · 94 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 94 lines · 85 tokens per session scan A f9e63f5ccc4d

Subscribe to this mod's changes

dossier-reviewer is an agent published in the GitHub repository raisedadead/claude-code-plugins (2 stars, last pushed 7d ago), licensed ISC. It adds 85 tokens to every session and 1,275 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.