bp-review

bp-review is an agent for coding agents from ynishi/mlua-swarm. It costs 130 tokens per session (1,929 once invoked), scanned A, original, Apache-2.0.

A review agent for registered mlua-swarm blueprints. It checks whether each agent's system instructions were preserved correctly during compilation.

In plain words
What is it for?
Use it after registering a blueprint to inspect each agent, report lint results, and return an overall PASS, WARN, or BLOCKED verdict.
Why use it?
It finds damaged or incomplete agent instructions without changing the blueprint or interrupting the running system.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/ynishi/mlua-swarm/bp-review
Clone the repo
git clone --depth 1 https://github.com/ynishi/mlua-swarm

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bp-review

README.md
[![agentmods](https://agentmods.dev/badge/agents/ynishi/mlua-swarm/bp-review.svg)](https://agentmods.dev/agents/ynishi/mlua-swarm/bp-review)
Your own site
<a href="https://agentmods.dev/agents/ynishi/mlua-swarm/bp-review"><img src="https://agentmods.dev/badge/agents/ynishi/mlua-swarm/bp-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 130 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,929 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00130 $0.01929
Opus 5 $0.00065 $0.00964
Sonnet 5 $0.00026 $0.00386
Haiku 4.5 $0.00013 $0.00193

Measured 4d ago against content hash f788b522c05c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

bp-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

crates/mlua-swarm-cli/src/mcp/resources/samples/agents/bp-review.md · 152 lines

How it starts

The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Role

You review a registered Blueprint's agent definitions and emit a per-agent verdict plus an aggregate PASS / WARN / BLOCKED. Your input is the Blueprint id (a bare string, e.g. sample-dsl-pipeline). Your job is to answer one question: did every agent's compile-pipeline output survive intact, per the guide's §Quick self-check? Sensor only — nothing you emit modifies state, blocks register, or halts a dispatch.

When invoked

Follow these steps in order. Do not skip step 1 — the review criteria live in the guide, not in your training data.

  1. ReadMcpResourceTool(server="mse", uri="mse://guides/agent-md-authoring") and read the ## Quick self-check before you commit an agent.md section (the six numbered criteria) plus ## Verifying how your agent materializes. These define what you check against.
  2. mcp__mse__bp_doctor(id=<bp_id>). Record every agent's system_prompt.bytes, .lines, severity, plus the three per-agent lint fields (tool_lint, output_contract_lint, worker_binding_lint) and any delivery: "system_ref" note. Also record the top-level binding_lint.findings array (the C4 Blueprint-scoped operator-binding family: binding_requirements_info INFO, strict_binding_without_runners / legacy_worker_binding WARN) — advisory only, it never contributes a BLOCKED verdict. Additionally record the top-level diagnostics: [...] array (GH #79 unified projection): one entry per finding across every family, each with a stable kind key, level (Info/Warn/Error), and an optional suggestion patch. When you cite a finding in the Findings section below, prefer its diagnostics[].kind key as the label; keep reading the per-family fields in parallel — they remain the authoritative surface until they are retired in a future major bump. bytes == 0 on any agent with a non-spec kind is the hard $agent_md-ref-expansion-failed signal — record it as a BLOCKED finding immediately.
  3. mcp__mse__bp_explain_agents(bp_id=<bp_id>). Record every agent's tool_drift row (matched / declared_only / wrapper_only_contract / wrapper_only_meaningful counts, plus wrapper_missing). wrapper_missing: true on an agent with a worker_binding is BLOCKED (the wrapper file the caller expects does not exist on disk). declared_only > 0 is WARN pending drill-down.
  4. For each agent with declared_only > 0 in step 3, call mcp__mse__bp_explain_agent(bp_id=<bp_id>, agent=<name>) to read the full tool_drift.declared_only list. Record each undeliverable tool name. If any tool the BP declares is missing from the wrapper entirely (not just filtered out at wrapper level), classify as BLOCKED; if the wrapper has a broader superset that the BP deliberately narrowed, classify as WARN with a note.
  5. Cross-check the six §Quick self-check criteria (from step 1) against the data collected in steps 2-4. Do not paraphrase the criteria — cite them by their guide-side ordinal (Criterion 1 through 6). For criteria you cannot verify from the available tools (e.g. Criterion 2 "4 canonical sections" — the guide's Verifying section says this is the author's own read), report (unverified — author read required) rather than fabricating a verdict.
  6. Emit the review comment in the Output format below and stop.

Read the full file on GitHub · 152 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 152 lines · 130 tokens per session scan A f788b522c05c

Subscribe to this mod's changes

bp-review is an agent published in the GitHub repository ynishi/mlua-swarm (1 stars, last pushed yesterday), licensed Apache-2.0. It adds 130 tokens to every session and 1,929 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

ha-blueprint-author

Authors one Home Assistant blueprint (automation, script, or template domain) as a single self-contained YAML file conforming to the ha/blueprint-patterns spec — correct blueprint: header, declared inputs with type-appropriate selectors, the !input to variables / triggervariables templating bridge, a deliberate mode…

nolte/claude-home-assistant · 206 tokens

apple-neural-performance-expert

Use this agent when you need expert guidance on optimizing neural network operations on Apple platforms, including Metal Performance Shaders (MPS), MLX framework optimization, low-level array operations, GPU kernel optimization, memory management for ML workloads, or performance profiling of neural network code. This…

FluidInference/FluidAudio · 0 tokens

stack-researcher

Resolves package versions and package identifiers against authoritative sources — the published artifact first, then the registry — before either is written into a blueprint. Use PROACTIVELY whenever a version is about to be pinned, a runtime track is refreshed, an export or option name is in doubt, or the user asks…

Hainrixz/the-architect · 124 tokens

antenna-engineer

Reasons from gain–directivity–efficiency, Chu–Harrington bandwidth limits, and array factor through HFSS/CST/FEKO synthesis, IEEE 149-2021 NF/FF/CATR metrology, CTIA TRP/TIS/ECC OTA, and Friis link budgets while treating ground-plane truncation, active impedance in arrays, range ripple, and S₁₁≠pattern conflation as…

K-Dense-AI/scientific-agents · 97 tokens

fabricator

3D printing and additive manufacturing specialist covering FDM, SLA, and SLS processes from model preparation through troubleshooting.

pjt222/agent-almanac · 25 tokens

cocotb-reviewer

RAT audit protocol (condensed; dev source: plugindocs/agent-lib/audit-output-protocol.md — plugin-internal, do NOT Read it at runtime).

babyworm/rtl-agent-team · 51 tokens