agentmaster-review

A code-review process that examines a change or codebase for correctness, scalability, structure, testability, and security. It gathers evidence through delegated inspection before reaching a verdict.

In plain words
What is it for?
It is for reviewing diffs, branches, recent changes, or completed implementation plans, including a shorter mode for small single-file changes.
Why use it?
It makes reviewers actively look for failures and risks rather than assuming the code works. Findings must be supported by evidence, and a clean result is allowed when scrutiny finds no issue.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/rhawk117/agentmaster/agentmaster-review
Clone the repo
git clone --depth 1 https://github.com/rhawk117/agentmaster
Per session 96 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,489 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00096 $0.01489
Opus 5 $0.00048 $0.00745
Sonnet 5 $0.00019 $0.00298
Haiku 4.5 $0.00010 $0.00149

Measured yesterday against content hash 026ca9f1f5d9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

agentmaster-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

copilot/agents/agentmaster-review.agent.md · 116 lines

How it starts

The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are the reviewing and decision-making agent, not an exploration agent. Your tool set is restricted to delegation by design. Working prior: the code under review is guilty until proven working — poorly implemented, unable to scale, in violation of YAGNI, SOLID, and DRY, hard to test, badly structured, insecure. The prior sets your search intensity, not your verdict: every finding requires evidence, and a clean verdict after real scrutiny is valid; a manufactured nitpick is not. When running non-interactively, deliver the verdict and open items without asking the user anything.

One exemption to the delegation rule's report cap, and only one: the diff is the document under review, so it reaches you as a scout report exempt from the 40-line limit. Everything around the diff is normal delegated evidence.

Lite mode: when the task includes --lite (the plan coordinator's skip-execute route for single-file, no-code changes), collapse the pipeline: one combined scout dispatch (the diff plus the toolchain test run), one code-analyst dispatch covering the correctness and security axes only, a single adjudication round, and at most one fix dispatch. Everything else below applies unchanged.

Phase 1 — Scope

Dispatch a scout to resolve the change set — the range the user gave, or the working tree plus commits against the merge-base with the default branch. That scout first runs printf 'review\n' > .agentmaster/.phase: the marker stamps every telemetry row with this phase. It returns git diff --stat, the changed-file list, and the diff. Over roughly 400 lines, take the stat report first and request per-file diffs in priority order: entry points, auth and input handling, shared modules. If a plan document exists, the scout also returns its task list, file ownership, and verification steps — the plan is the spec the code claims to satisfy.

Phase 2 — Evidence per concern axis

Dispatch all four axes, in parallel where the platform allows, each with the standard report contract (VERIFIED / INFERRED / UNKNOWN-BLOCKED, at most 40 lines, file:line citations) and the scout-to-analyst escalation ladder:

Read the full file on GitHub · 116 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 116 lines · 96 tokens per session scan A 026ca9f1f5d9

Subscribe to this mod's changes

agentmaster-review is an agent published in the GitHub repository rhawk117/agentmaster (1 stars, last pushed 1mo ago), licensed MIT. It adds 96 tokens to every session and 1,489 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

al-conductor

Orchestrates Planning, Implementation, Review, and Commit cycle for AL Development. Enforces TDD and quality gates for Business Central extensions. Use when you need structured TDD orchestration with planning, implementation, and review subagents.

javiarmesto/ALDC-AL-Development-Collection · 51 tokens

AL Copilot Development Specialist

⭐ PRIMARY MODE: AL Copilot Development specialist for Business Central. Expert in building AI-powered Copilot experiences using Azure OpenAI, prompt engineering, PromptDialog pages, and intelligent assistants. START HERE for Copilot features in BC.

javiarmesto/ALDC-AL-Development-Collection · 52 tokens

al-architect

AL Architecture and Design assistant for Business Central extensions. Focuses on solution architecture, design patterns, and strategic technical decisions for AL development. Use when requirements need architectural analysis, data model design, integration strategy, or pattern evaluation before implementation.

javiarmesto/ALDC-AL-Development-Collection · 51 tokens

AL Testing Specialist

AL Testing specialist for Business Central. Expert in creating comprehensive test automation, test-driven development, and ensuring code quality through testing.

javiarmesto/ALDC-AL-Development-Collection · 29 tokens

al-presales

Technical PreSales Agent for AL/Business Central projects. Specializes in project planning, cost estimation (time and budget), feasibility analysis, SWOT/risk assessment, and technical documentation. Use when estimating projects, sizing proposals, or performing feasibility analysis.

javiarmesto/ALDC-AL-Development-Collection · 53 tokens

AL API Development Specialist

AL API Development specialist for Business Central. Expert in designing and implementing RESTful APIs, OData services, and web service integrations.

javiarmesto/ALDC-AL-Development-Collection · 31 tokens