It is currently too easy for robo-reviewers to bypass the honeypots for the review audits.
- Go in the Review section and in the First posts section (or any of them where review audits are enabled)
- If you click on the Add comment link and that is an audit, then you will pass the audit and get the "Congratulations" message.
- If it's not an audit, you can just click on "Nothing to do".
This seems to me a very easy to find loophole which could be used by robo-reviewers, and shouldn't even delay them for more than half a second. If they do it for every single review then they are guaranteed to pass all audits.
Note that this also works if you click on "Flag" for example, and I suspect pretty much any link appearing on the review.
I would propose that you get the "Congratulations" message only after you get to a final irreversible action, for example clicking on "Flag" AND defining the type of flag, or clicking on "Close" AND choosing the type of close, or any other method that would be considered irreversible. The cost of doing such an irreversible action should be null in case of audits, for example if you flag a post, this shouldn't count towards the daily flag cap.
Tested on this review.