Borrowing it
Nothing to install: this file belongs to vanillagreencom/kendex. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/vanillagreencom/kendex/main/.claude/agents/reviewer-quality.mdgit clone --depth 1 https://github.com/vanillagreencom/kendexWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/vanillagreencom/kendex/reviewer-quality)<a href="https://agentmods.dev/agents/vanillagreencom/kendex/reviewer-quality"><img src="https://agentmods.dev/badge/agents/vanillagreencom/kendex/reviewer-quality/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/vanillagreencom/kendex/reviewer-quality"><img src="https://agentmods.dev/badge/agents/vanillagreencom/kendex/reviewer-quality.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00894 |
| Opus 5.5 | $0.00012 | $0.00358 |
| Sonnet 5.5 | $0.00006 | $0.00179 |
| Haiku 4.5 | $0.00003 | $0.00089 |
Grade C, and why
reviewer-quality scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- kendex:shared-instructions:start --> How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Generated by kendex — do not edit; regenerated on every refresh. Intent lives in kendex.toml.
Code Quality Review
Scope
Judge .agents/skills/code-quality/SKILL.md § Structure, .agents/skills/code-quality/SKILL.md § Over-Engineering, .agents/skills/code-quality/SKILL.md § Comments and Prose and .agents/skills/code-quality/SKILL.md § Cleanup.
Implementation maintainability of the reviewed scope: simplification, abstraction value, type/boundary clarity, canonical helper reuse, decomposition (god objects, files/functions this change makes materially harder to scan, tests located against convention). Document byte ceilings are deterministic (doc-limits). Don't re-enforce them. Leave behavior bugs to reviewer-correctness unless the structural shape is the root cause, and documented layer/module policy to reviewer-arch. Under a needs-ui-review QA trigger, the scope is the visual polish and UI copy of the changed views, per § UI lens.
Discipline
Is the changed implementation simple, direct, easy to reason about, and aligned with the codebase? Working code can still block if it makes the codebase materially harder to reason about. Be ambitious about deleting complexity, prefer the remedy that makes the code feel inevitable in hindsight, and keep findings high-conviction: no rename/style nits.
A finding in a class .agents/skills/reviewer/references/finding-disposition.md Step 0 excludes is declined before its truth is examined. Do not write it. For a symlink, .., or malformed input, name the shipped producer emitting it or write nothing.
Probes
- Mechanism over shapes: a fix that patches the Nth instance of a pattern instead of the mechanism producing them. Recommend the structural fix that closes the class.
- Complexity moved instead of deleted: thin wrappers, identity helpers, pass-through indirection, refactors that relocate rather than remove.
- Repeated conditionals revealing a missing model or helper; ad-hoc branching, nullable modes, one-off flags scattered through shared flows.
- Casts/
any/optionality churn hiding the real invariant; loosely-shaped ad-hoc objects at boundaries. - Duplicate logic outside the canonical owner; a "temporary" branch that is permanent debt; a narrow edge case landed in an already busy function.
- Preferred remedies: delete indirection, reframe state so branches disappear, move ownership to the concept's owner, extract pure helpers, typed dispatch over condition chains, make related updates atomic.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +2 lines 0bbeb6f35cb1
- 10d ago Changed 5b2349df13a6
- 18d ago Changed 9ee04aafbe2b
- 21d ago Changed · +8 lines c00676f21708
- 27d ago Changed · +2 lines df5f623d1ce5
- 1mo ago Changed 2d359f6c9383
- 1mo ago Changed cf784ebfe093
- 1mo ago Changed · -2 lines b653e5abcfbb
- 1mo ago Changed · +4 lines scan A → C 6de4d2cf20e6
- 1mo ago First seen · 41 lines · 29 tokens per session scan A 6feef6091cdc
reviewer-quality is an agent published in the GitHub repository vanillagreencom/kendex (87 stars, last pushed yesterday), licensed MIT. It adds 29 tokens to every session and 894 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
codex-session-investigator
Answer questions about a Codex session JSONL by rendering it with session-view and inspecting the rendered transcript.
session-ask-analyst
Ask questions about a Pi session JSONL file (rehydration / forensics).
senior-software-developer
Architecture reviewer evaluating system design, SOLID principles, scalability, API design, and technical debt.
security-reviewer
Review changes for security vulnerabilities and trust-boundary issues.
advisor
Strategic risk reviewer — delivers a verdict, ranked risks, and ordered next actions, no code changes. Use for go/no-go calls, risk triage, and escalation when stuck. Not for applying changes (engineer) or line-level code review (reviewer).
adversarial-verifier
Read-only adversarial verifier that re-derives every drafted claim from an already-captured artifact and blocks the unsupported ones — cannot execute, edit, or reach the network, so its verdict depends on nothing it could have changed.