Borrowing it
Nothing to install: this file belongs to tacticlaunch/mcp-linear. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/tacticlaunch/mcp-linear/main/.github/prompts/review-mcp-contract.prompt.mdgit clone --depth 1 https://github.com/tacticlaunch/mcp-linearWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/tacticlaunch/mcp-linear/review-mcp-contract)<a href="https://agentmods.dev/commands/tacticlaunch/mcp-linear/review-mcp-contract"><img src="https://agentmods.dev/badge/commands/tacticlaunch/mcp-linear/review-mcp-contract/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/tacticlaunch/mcp-linear/review-mcp-contract"><img src="https://agentmods.dev/badge/commands/tacticlaunch/mcp-linear/review-mcp-contract.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00100 |
| Opus 5.5 | $0.00000 | $0.00040 |
| Sonnet 5.5 | $0.00000 | $0.00020 |
| Haiku 4.5 | $0.00000 | $0.00010 |
Grade A, and why
review-mcp-contract scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 25d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Review the current diff in mcp-linear as an MCP contract reviewer.
Focus on:
input_schemaversus type guard mismatchesoutput_schemaversus normalized service output mismatches- missing registration in definitions or handlers index files
- missing
TOOLS.mdupdates - nullable field or enum handling bugs
- direct GraphQL usage without a clear SDK limitation
- missing negative tests or nullable-clear tests
Return findings first, ordered by severity, with file references.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 25d ago First seen · 14 lines · 0 tokens per session scan A 996dde8682bd
review-mcp-contract is a command published in the GitHub repository tacticlaunch/mcp-linear (148 stars, last pushed 17d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 100 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-05.
Other commands, from other repositories
full-review
Orchestrate comprehensive multi-dimensional code review using specialized review agents across architecture, security, performance, testing, and best practices.
kiro-validate-impl
Command "kiro-validate-impl" from gotalab/cc-sdd, covering implementation validation, core task, execution steps, 1. detect validation target and 2. load context.
refactor-guided
Systematic, safety-first refactoring with verification at each step. Never refactors and adds features simultaneously.
final-review
Command "final-review" from adriannoes/awesome-agentic-ai, covering final review - comprehensive pr review & testing, step 0: determine review pass, step 1: create or update the pr, step 2: launch three review agents in parallel and agent 1: codebase consistency reviewer.
arch-boundaries
Install mechanically-enforced architecture boundaries that fail CI on spaghetti imports.
validate-parallel
Run assert and review-code commands in parallel to reduce validation time by 50%.