Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add caiowilson/MCP-memento --skill review-changesgit clone --depth 1 https://github.com/caiowilson/MCP-mementoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/caiowilson/mcp-memento/review-changes)<a href="https://agentmods.dev/skills/caiowilson/mcp-memento/review-changes"><img src="https://agentmods.dev/badge/skills/caiowilson/mcp-memento/review-changes/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/caiowilson/mcp-memento/review-changes"><img src="https://agentmods.dev/badge/skills/caiowilson/mcp-memento/review-changes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00062 | $0.00358 |
| Opus 5 | $0.00031 | $0.00179 |
| Sonnet 5 | $0.00012 | $0.00072 |
| Haiku 4.5 | $0.00006 | $0.00036 |
Grade A, and why
review-changes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Review local changes
Perform a read-only review. Never edit files or Git state.
- Establish scope with
git status --short, then inspect staged and unstaged name-status and diff statistics separately with--no-ext-diff. - Read the actual staged and unstaged diffs with
--no-ext-diff, batching by changed path if needed. Never enable external diff drivers. Read relevant untracked files directly; do not infer their content from filenames. - Prioritize behavior, security boundaries, public contracts, data loss, concurrency, and compatibility. Read only the surrounding production code needed to validate a concern.
- Discover nearby tests through changed-file naming, root manifests, test scripts, and CI configuration. Identify the smallest relevant validation commands, but do not claim they ran unless they did.
- Check whether tests cover the changed behavior and important failure paths. Avoid style-only findings unless they create a concrete maintenance or correctness risk.
Present findings first, ordered by severity. Each finding must name a path and location, explain the failure mode, and connect it to diff evidence. Then list open questions and validation gaps. If there are no findings, say so directly and state residual risks.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 18 lines · 62 tokens per session scan A e47d207fc7ba
review-changes is a skill published in the GitHub repository caiowilson/MCP-memento (11 stars, last pushed 3d ago), licensed MIT. It adds 62 tokens to every session and 358 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
orbit-github
Open Orbit briefing skill — selected by the Orbit pipeline when GitHub is the user's only connected connector, or when the user explicitly scopes their daily digest to GitHub. Pulls the past 24 hours of PRs, review requests, issues, CI runs, and merges from the user's authenticated GitHub connection and renders them…
diff-review
Render the patch-edit run's accumulated changes as a reviewable diff, surface it through a GenUI choice surface, and persist the user's accept / reject decision into the artifact manifest.
ghx
Guidance for safe, reliable GitHub CLI workflows across issues, pull requests, and reviews.
github-pr-fix
Fix a GitHub pull request by addressing feedback or CI failures, pushing changes, and publishing replies.
twin-pr-triage
Scan open pull requests, assess risk and complexity, and build a prioritized review queue. Used by digital twin personas to reduce PR review cognitive load.
ai-driven-code-editor-cli
OpenCode AI - AI-driven code editor/IDE (CLI/TUI version of Cursor/Windsurf). Use when: (1) AI-assisted coding tasks, (2) Code refactoring with AI, (3) GitHub PR review/fixes, (4) Multi-file edits requiring context, (5) Running AI agents on codebases. NOT for: simple one-line ed…