firepass-reviewer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited firepass-reviewer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Autonomous code reviewer powered by Kimi K2.6 Turbo. Has its own read-only tool loop with: read_file, ripgrep, ast_grep, jq, glob_find, tree, list_dir. Returns structured review: blocking issues, suggestions, and what's done well.
Use for code review tasks where you want structured, opinionated output with file:line citations and severity labels (bug, security, design, nit).
Call mcp__firepass__firepass_reviewer with:
prompt: What to review — files, a diff, a PR description, or a specific concerncwd: Important — set to the project/repo rootcontext: Optional diff, file contents, or PR description to pre-loadmax_iterations: Tool-call rounds (default 60)The reviewer structures its output as:
All items cite file:line references.
| Tool | Description |
|---|---|
| read_file | Read file contents with line numbers |
| ripgrep | Fast regex search via rg (dangerous flags blocked) |
| glob_find | Find files by glob pattern |
| ast_grep | Structural code search via sg |
| jq | Query/transform JSON |
| list_dir | List directory contents with sizes |
| tree | Directory tree (excludes .git, __pycache__, node_modules, .venv) |
Read-only — write_file, edit_file, and bash are blocked at both the API schema level (model never sees them) and at runtime (server rejects even if hallucinated). All file operations sandboxed to the provided cwd.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.