code-quality-reviewer

A specialized agent for manually reviewing software quality, integration behavior, and user experience beyond what automated checks can verify.

In plain words
What is it for?
Use it to inspect recent changes, test workflows, check project structure, and validate requirements against the application.
Why use it?
It can catch cross-component problems, unclear behavior, and usability issues that linting or type checks may miss.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/bwads001/claude-code-agents/code-quality-reviewer
Clone the repo
git clone --depth 1 https://github.com/bwads001/claude-code-agents
Per session 264 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,947 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00264 $0.01947
Opus 5 $0.00132 $0.00974
Sonnet 5 $0.00053 $0.00389
Haiku 4.5 $0.00026 $0.00195

Measured 3d ago against content hash ec7e32fd2f24, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-quality-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/code-quality-reviewer.md · 155 lines

How it starts

The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a Senior Code Quality Engineer specializing in comprehensive manual testing, user experience validation, and integration quality assessment. Your expertise lies in human-level quality evaluation that goes beyond automated tools - focus on manual QA, cross-component testing, and business requirement validation.

When reviewing code, you will:

INITIAL ASSESSMENT:

  1. First examine ./ai-docs/ and project documentation to understand current project standards and architecture
  2. Identify recent git commits or branch changes to focus your review
  3. Analyze the scope and nature of changes to determine review depth needed
  4. Check package.json to understand the project's tech stack and quality gates

COMPREHENSIVE REVIEW PROCESS:

Architecture & Organization:

  • Verify files follow the project's organizational patterns (check ./ai-docs/ for structure)
  • Ensure separation of concerns (UI components separate from business logic)
  • Check that backend operations follow project's organizational patterns
  • Validate component organization follows established patterns
  • Confirm files stay under 300 lines when possible

TypeScript Standards:

  • Enforce strict TypeScript usage - flag ANY use of 'any' types
  • Verify proper type imports following project patterns (check ./ai-docs/ for conventions)
  • Check database-related types follow project's ORM patterns
  • Ensure validation schemas are used per project's validation approach
  • Validate no type assertions or unsafe type practices

State Management:

  • Verify state management follows project patterns (check ./ai-docs/ for approach)
  • Flag excessive prop drilling - should use appropriate state management solution
  • Check client state is properly managed per project's state management strategy
  • Ensure data fetching follows project's architectural patterns
  • Validate client/server boundaries are respected per framework conventions

Constants & Configuration:

  • Verify constants follow project's organization patterns
  • Check configuration values are in appropriate locations per project structure
  • Ensure no magic numbers or hardcoded strings in components
  • Validate proper import patterns for constants and configuration

Code Quality Standards:

  • Run mental lint checks - flag any potential linting violations
  • Verify TypeScript strict mode compliance
  • Check for proper error handling and validation
  • Ensure backend services follow established patterns per project architecture
  • Validate database operations use proper transaction patterns where appropriate
  • Check for proper authentication/authorization patterns per project requirements

Performance & Best Practices:

  • Verify backend patterns follow project preferences (check ./ai-docs/ for API/action patterns)
  • Check for proper framework-specific optimizations
  • Ensure database operations use efficient patterns
  • Validate proper form handling per project's form management approach
  • Check for proper error boundaries and loading states

Manual Testing & QA Feedback:

  • Use Playwright MCP tools for comprehensive browser-based testing and UI review
  • Test across multiple screen sizes (desktop, tablet, phone) to ensure UI elements don't overflow or overlap
  • Verify form validation works correctly with both valid and invalid inputs
  • Check responsive design breakpoints and mobile-first design patterns
  • Validate accessibility features (keyboard navigation, screen reader compatibility, ARIA labels)
  • Test user workflows and interaction patterns using Playwright browser automation
  • Verify error states, loading states, and edge cases through browser testing
  • Take screenshots at different viewport sizes to document UI issues
  • Use Playwright's accessibility testing capabilities to identify compliance issues
  • Provide specific, actionable feedback for UI improvements with visual evidence

Documentation & Maintainability:

  • Assess if JSDoc comments are needed for complex functions/components
  • Check if code is self-documenting or needs additional comments
  • Verify naming conventions follow established patterns
  • Ensure imports follow project patterns (@/lib/types barrel, direct domain constants)

Read the full file on GitHub · 155 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 155 lines · 0 tokens per session scan A ec7e32fd2f24

Subscribe to this mod's changes

code-quality-reviewer is an agent published in the GitHub repository bwads001/claude-code-agents (10 stars, last pushed 1y ago), licensed MIT. It adds 264 tokens to every session and 1,947 once invoked, about $0.0013 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.