Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/morpho-org/sdks/pr-review-cigit clone --depth 1 https://github.com/morpho-org/sdksWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/morpho-org/sdks/pr-review-ci)<a href="https://agentmods.dev/commands/morpho-org/sdks/pr-review-ci"><img src="https://agentmods.dev/badge/commands/morpho-org/sdks/pr-review-ci.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01911 |
| Opus 5 | $0.00000 | $0.00955 |
| Sonnet 5 | $0.00000 | $0.00382 |
| Haiku 4.5 | $0.00000 | $0.00191 |
Grade A, and why
pr-review-ci scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.
pr-review-ci
CI-mode pull request review. Posts an inline GitHub review with a formal APPROVE / REQUEST_CHANGES verdict. Runs in GitHub Actions on a PR.
Usage
/pr-review-ci <PR_NUMBER>
Pre-conditions:
CI=trueORGITHUB_ACTIONS=trueMUST be set in the environment.- A
<PR_NUMBER>argument is required. --watchis not supported (no cron in CI).--localis not supported (use/pr-review-localfor that).
If any pre-condition fails, abort with a clear error and exit 1.
Step 1: Validate environment + arguments
if [ "$CI" != "true" ] && [ "$GITHUB_ACTIONS" != "true" ]; then
echo "pr-review-ci must run in CI (CI=true or GITHUB_ACTIONS=true). Use /pr-review-gh for local-PR review." >&2
exit 1
fi
if [ -z "${1:-}" ]; then
echo "pr-review-ci requires a PR number." >&2
exit 1
fi
Parse <OWNER> and <REPO> from git remote get-url origin (handles both [email protected]:owner/repo.git and https://github.com/owner/repo.git).
Step 2: Fetch PR details
PR_JSON=$(gh pr view <PR_NUMBER> --json title,body,baseRefName,headRefName,headRefOid,state 2>&1)
if [ $? -ne 0 ]; then
echo "gh pr view <PR_NUMBER> failed: $PR_JSON" >&2
exit 1
fi
Extract <BASE_BRANCH>, <HEAD_BRANCH>, <HEAD_SHA>, state. Validate that all three branch/SHA fields are non-empty AND not whitespace-only (use [ -z "${X//[[:space:]]/}" ] — bare [ -z "$X" ] lets whitespace pass). If state is not OPEN, inform the user and stop. Then fetch the base branch and the PR head by pull ref (works for fork PRs, where <HEAD_BRANCH> does not exist under origin):
git fetch origin <BASE_BRANCH> "+refs/pull/<PR_NUMBER>/head:refs/remotes/origin/pr/<PR_NUMBER>"
Verify git rev-parse origin/pr/<PR_NUMBER> equals <HEAD_SHA>; if not, the PR moved mid-run — stop and report. Also verify git rev-parse HEAD equals <HEAD_SHA> (the engine reads full file contents from the worktree, so it must be at the reviewed revision); if not, run git checkout --detach <HEAD_SHA> before continuing.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +6 lines 0a4080a3abb0
- 4d ago First seen · 179 lines · 0 tokens per session scan A 8f4b71c586c4
pr-review-ci is a command published in the GitHub repository morpho-org/sdks (40 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,911 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.
Other commands, from other repositories
monitor-ci
You are the orchestrator for monitoring Nx Cloud CI pipeline executions and handling self-healing fixes. You spawn the ci-monitor-subagent subagent to poll CI status and make decisions based on the results.
actions
Command "actions" from openclaw/crabbox, covering actions, subcommands, hydrate, register and dispatch.
dart-fix-ci
Command "dart-fix-ci" from dartsim/dart, covering required reading, workflow and output.
upgrade-webkit
Upgrade Bun's WebKit fork to the latest upstream version of WebKit.
domains
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.
access
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.