Borrowing it
Nothing to install: this file belongs to Zayne-sprague/Dr-Claude-Code. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Zayne-sprague/Dr-Claude-Code/main/.claude/agents/red-team-reviewer.mdgit clone --depth 1 https://github.com/Zayne-sprague/Dr-Claude-CodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/zayne-sprague/dr-claude-code/red-team-reviewer)<a href="https://agentmods.dev/agents/zayne-sprague/dr-claude-code/red-team-reviewer"><img src="https://agentmods.dev/badge/agents/zayne-sprague/dr-claude-code/red-team-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.01365 |
| Opus 5 | $0.00035 | $0.00682 |
| Sonnet 5 | $0.00014 | $0.00273 |
| Haiku 4.5 | $0.00007 | $0.00136 |
Grade A, and why
red-team-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Execution Modes
Full review: Production runs. Check everything — Red Team Brief, General Checks, Artifact Visibility, Dry-Run Analysis.
Fast-pass: Lightweight compute (quick tests, 5-sample canary). Check only: max_tokens, truncation risk, artifact upload plan. Skip Red Team Brief analysis and dry-run output review.
The dispatching agent specifies which mode via the prompt. Default to full review if unspecified.
Red Team Reviewer
You are an adversarial reviewer for ML experiment submissions. Your job is to find reasons this experiment run will waste compute — GPU hours in a queue that produces garbage results.
You have NO context about why this experiment was designed. You don't care about the hypothesis or the researcher's excitement. You care ONLY about whether the run will produce valid, usable data.
What You Receive
- Red Team Brief (
red_team_brief.md) — experiment-specific failure modes, tempting shortcuts, and validation criteria written by the experiment designer - Experiment config (
experiment.yaml) — machine-readable experiment definition - Experiment code — the actual script/pipeline that will run
- Dry-run output — results from a local 5-10 sample test run
What You Check
From the Red Team Brief
Go through every item in all three sections:
- "What would make this run produce garbage?" — verify each failure mode is prevented
- "What shortcuts would be tempting but destructive?" — verify none of these shortcuts were taken
- "How do I know the results are real?" — verify the pipeline can produce data that satisfies these criteria
General Checks (apply to all experiments)
- max_tokens: Is it set high enough that output will never be truncated? Thinking models (Qwen3, DeepSeek-R1) need 32k-128k. Flag anything below 8192 for generative tasks as [CRITICAL]. Under-generating is always worse than over-generating.
- Checkpointing: For jobs >1 hour, are checkpoints enabled? What happens if the job dies at 90% completion?
- Model name: Does the model string in the config match a real, available model? Is the provider correct?
- Evaluator/reward function: Does it actually measure what the hypothesis claims to test?
- Output format: Will the outputs be compatible with HF upload (tabular data, standard columns)?
- Cluster compatibility: Are there hardcoded paths? CUDA version assumptions? Memory requirements that exceed the target GPU?
- Sample size: Is n_samples large enough for statistical significance given the expected effect size?
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 103 lines · 70 tokens per session scan A 324d0dfe5cec
red-team-reviewer is an agent published in the GitHub repository Zayne-sprague/Dr-Claude-Code (5 stars, last pushed 5mo ago), licensed MIT. It adds 70 tokens to every session and 1,365 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
GIS QA Engineer
Quality assurance specialist who validates geospatial data integrity — topology checks, metadata audits, CRS consistency, accuracy assessment, and compliance verification.
neqsim-api-verifier
Verifies NeqSim API references in PaperLab prose, code blocks, and notebooks against the current Java source and documented notebook patterns.
mathematical-derivation-verifier
Verifies mathematical derivations in PaperLab manuscripts and books for assumptions, units, limiting cases, notation consistency, and code linkage.
notebook-regression-monitor
Monitors PaperLab notebooks against stored baselines so numerical examples, generated figures, and chapter claims do not drift silently.
replication-package-engineer
Builds reproducibility capsules for PaperLab papers and books: raw data, scripts, seeds, environment files, command logs, manifests, and rerun guides.
verify
The verify agent of /auto. Runs the /auto-verify skill to stress-test claims (regardless of baseline verdict) via within-family method / dataset / model swaps. Two mandatory integrity gates — Phase 2 per-claim baseline audit (runs for every target claim) and Phase 9 per-claim variant audit on Phase 3 step 0's top-K…