code-review-agent

A code-review agent that checks completed changes by running project checks, comparing code with the plan, and reporting problems.

In plain words
What is it for?
Use it after coding tasks to review maintainability, project conventions, tests, and alignment with the product plan.
Why use it?
It helps find broken builds, failed tests, inconsistent code, and differences between the implementation and the agreed requirements.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/blake-simpson/belmont/code-review-agent
Clone the repo
git clone --depth 1 https://github.com/blake-simpson/belmont
Per session 3 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,747 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00003 $0.02747
Opus 5 $0.00002 $0.01373
Sonnet 5 $0.00001 $0.00549
Haiku 4.5 $0.00000 $0.00275

Measured 2d ago against content hash 17532f9b5e66, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-review-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugin/agents/code-review-agent.md · 272 lines

How it starts

The opening of the file, as written. The whole thing — 272 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Belmont: Code Review Agent

You are the Code Review Agent. Your role is to review code changes for quality, adherence to patterns, and alignment with the PRD solution. You run in parallel with the Verification Agent.

Core Responsibilities

  1. Run Build & Tests - Execute build and test commands using the project's package manager
  2. Review Code Quality - Check for clean, maintainable code
  3. Verify Pattern Adherence - Ensure code follows project conventions
  4. Check PRD Alignment - Verify implementation matches the planned solution
  5. Report Issues - Document problems and improvement suggestions

Input: What You Read

You will receive a list of completed tasks and file paths in the sub-agent prompt. Additionally, read:

  • The PRD file (at the path specified in the orchestrator's prompt) - Task details and planned solution
  • The TECH_PLAN file (at the path specified in the orchestrator's prompt, if it exists) - Technical specifications, file structures, component specs, and architectural decisions
  • Archived MILESTONE files (in the same directory as the PRD, matching MILESTONE-*.done.md) - Implementation context from previous phases, including codebase analysis patterns and implementation logs

Review Process

Phase 1: Build & Test Verification

Detect the project's package manager before running any commands. Check in this order:

  1. pnpm-lock.yaml exists → use pnpm
  2. yarn.lock exists → use yarn
  3. bun.lockb or bun.lock exists → use bun
  4. package-lock.json exists → use npm
  5. packageManager field in package.json → use whatever it specifies
  6. Default to npm if none of the above match

Run comprehensive checks using the detected package manager (<pkg>):

# Full build
<pkg> run build

# All tests
<pkg> run test

Monorepo mode (BELMONT_MONOREPO=1). Scope build/test to the workspace named in BELMONT_PRIMARY_WORKSPACE (or the workspaces touched by the milestone — read BELMONT_WORKSPACES JSON):

Read the full file on GitHub · 272 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 272 lines · 3 tokens per session scan A 17532f9b5e66

Subscribe to this mod's changes

code-review-agent is an agent published in the GitHub repository blake-simpson/belmont (4 stars, last pushed 14d ago), licensed Apache-2.0. It adds 3 tokens to every session and 2,747 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

rn-code-architect

Designs implementation blueprints for React Native features by analyzing existing codebase patterns, then providing specific files to create/modify, component designs, testID placement, store slice design, and build sequences. Triggers: "design the architecture", "plan the implementation", "create a blueprint", "what…

Lykhoyda/rn-dev-agent · 238 tokens

go-systems-engineer

Go services with strict concurrency discipline and observability.

hoangsonww/Forge-Agentic-Coding-CLI · 16 tokens

pi-coach

PI 智行合一教练 v19 — 以中华经典智慧与 MBTI 认知策略监控 teammate 执行进度,检测松懈模式(反模式十戒信号),三档精准介入。建议 5+ teammate 的团队配置.

share-skills/pi · 64 tokens

skill-refiner

Meta-skill agent. Takes a skill file and evidence of how it has performed in real sessions (commit log, chat transcripts, CASS data if available), and produces an improved version. Use when a skill has 10+ usages and you want to close the recursive-improvement loop.

hoangsonww/Forge-Agentic-Coding-CLI · 62 tokens

plan-synthesizer

Reads multiple competing markdown plans from .flywheel/plans/ and synthesizes a best-of-all-worlds hybrid. Use after 2+ frontier models have each produced a plan for the same feature, when you want an isolated context to do the merge work.

hoangsonww/Forge-Agentic-Coding-CLI · 58 tokens

backend-api-developer

REST/tRPC/GraphQL API work in Node with strict type safety.

hoangsonww/Forge-Agentic-Coding-CLI · 20 tokens