review-scope

review-scope is a command for coding agents from coleam00/Archon. It costs 0 tokens per session (1,001 once invoked), scanned A, original, MIT.

A review-scoping command defines exactly which code or work a review will examine and records that target for later reviewers.

In plain words
What is it for?
Use it to pin a review to a pull request, branch, issue, work order, or earlier review round.
Why use it?
It prevents reviewers from inspecting the wrong change or arguing about what is in scope.

Command

About the project

Archon is a workflow engine for AI coding agents that turns development processes into YAML-defined sequences with phases, validation gates, and artifacts. Developers use it to run repeatable processes such as planning, implementation, testing, code review, and pull-request creation across projects. The catalogue entries provide commands, agents, skills, hooks, instructions, and settings for working with Archon.

coleam00/Archon · 23,374 stars · on GitHub · archon.diy

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/coleam00/archon/review-scope
Clone the repo
git clone --depth 1 https://github.com/coleam00/Archon

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for review-scope

README.md
[![agentmods](https://agentmods.dev/badge/commands/coleam00/archon/review-scope.svg)](https://agentmods.dev/commands/coleam00/archon/review-scope)
Your own site
<a href="https://agentmods.dev/commands/coleam00/archon/review-scope"><img src="https://agentmods.dev/badge/commands/coleam00/archon/review-scope.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,001 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01001
Opus 5 $0.00000 $0.00500
Sonnet 5 $0.00000 $0.00200
Haiku 4.5 $0.00000 $0.00100

Measured 6d ago against content hash aefc7d68345c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

review-scope scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.archon/workflows/sdlc/review/commands/review-scope.md · 61 lines

How it starts

The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Review Scope

Establish exactly what this review round examines, and write it down for the reviewer or reviewers that follow. You do not judge anything; you make the target precise.

Inputs

Requested scope (may be empty):

$INPUTS.scope

Previous round's report (path; empty means this is the first round, full review):

$INPUTS.prior_report

Accepted work order (may be empty for a standalone review):

$INPUTS.work_order

The run's trigger message, which may narrow or override the above:

$ARGUMENTS

Resolve the target

  • When the requested scope is a bare PR number, delivery recorded it — review exactly that PR. Derive the normalized owner/repo from origin without writing its raw URL into an artifact, and use gh ... --repo <owner/repo> with that number for every GitHub read. Do not resolve a PR from the current branch, and do not accept a different target. The review object is that PR's diff, exactly.
  • A PR number, URL, or branch → resolve it with gh pr view (title, body, base, head, state, files) and gh pr diff. Make sure the PR's head is what the local checkout reflects; note the head SHA. In PR mode the review object is the PR's diff, exactly — uncommitted or untracked local state is out of scope and must not appear in the scope file.
  • Empty scope → first check whether the current branch has an open PR (gh pr view); if it does, that PR is the target (PR mode, as above). Otherwise the working diff: uncommitted changes plus commits ahead of the merge-base with the default/base branch (git merge-base, git diff, git log). Note the current HEAD SHA.

Resolve the accepted contract

  • When work_order is non-empty, read it in full. It is the accepted contract implementation received. Preserve its required outcome, explicit non-goals, and boundaries as prose; do not parse it with scripts, regexes, or keyword extraction.
  • When work_order is empty and the target is a PR, use the PR body's problem/outcome and explicit scope or non-goals as the standalone review contract. Do not infer a broader promise from the changed files.
  • When neither supplies an explicit boundary, state that the review is using the requested scope and repository contracts without inventing a non-goal.

Read the full file on GitHub · 61 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 61 lines · 0 tokens per session scan A aefc7d68345c

Subscribe to this mod's changes

review-scope is a command published in the GitHub repository coleam00/Archon (23,374 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,001 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.