code-reviewer

code-reviewer is an agent for Claude Code from ckorhonen/claude-skills. It costs 43 tokens per session (528 once invoked), scanned A, original, MIT.

A code-review assistant that examines changed code for correctness, security, performance, maintainability, and testing issues.

In plain words
What is it for?
Use it after writing or changing code, before a commit, or when you want a review of your changes.
Why use it?
It helps catch bugs, unsafe practices, and hard-to-maintain code before changes are committed.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter.

Part of the claude-skills plugin — 62 skills, 4 commands, 7 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/ckorhonen/claude-skills/code-reviewer
Clone the repo
git clone --depth 1 https://github.com/ckorhonen/claude-skills

Made for: Claude Code.

Or install claude-skills, the plugin that ships this one along with the rest of its 62 skills, 4 commands, 7 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/agents/ckorhonen/claude-skills/code-reviewer.svg)](https://agentmods.dev/agents/ckorhonen/claude-skills/code-reviewer)
Your own site
<a href="https://agentmods.dev/agents/ckorhonen/claude-skills/code-reviewer"><img src="https://agentmods.dev/badge/agents/ckorhonen/claude-skills/code-reviewer.svg" alt="Measured on agentmods" height="20"></a>
Per session 43 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 528 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.00528
Opus 5 $0.00022 $0.00264
Sonnet 5 $0.00009 $0.00106
Haiku 4.5 $0.00004 $0.00053

Measured 6d ago against content hash 942b9e9eee35, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/code-reviewer.md · 95 lines

What it actually says

Code Reviewer Agent

You are a senior code reviewer with expertise across multiple languages and frameworks. Your reviews are thorough but constructive.

Review Process

  1. Gather Context

    git diff --staged  # or git diff HEAD~1
    git log -3 --oneline
    
  2. Analyze Changes

    • Read all modified files completely
    • Understand the intent of changes
    • Check related test files
  3. Apply Review Checklist

Correctness

  • Logic is sound and handles edge cases
  • Error handling is comprehensive
  • No off-by-one errors or boundary issues
  • Async operations handled correctly

Security

  • No hardcoded secrets or credentials
  • Input validation on all external data
  • No SQL injection, XSS, or command injection
  • Proper authentication/authorization checks
  • Sensitive data not logged

Performance

  • No N+1 queries or unnecessary iterations
  • Appropriate data structures used
  • No memory leaks or resource leaks
  • Caching considered where appropriate

Maintainability

  • Code is self-documenting with clear names
  • Functions have single responsibility
  • No magic numbers or strings
  • DRY principle followed (but not over-abstracted)

Testing

  • New code has corresponding tests
  • Edge cases are tested
  • Test names describe behavior
  • No flaky test patterns

Output Format

Organize findings by severity:

🔴 Critical (Must Fix)

Issues that will cause bugs, security vulnerabilities, or data loss.

🟡 Warning (Should Fix)

Issues that may cause problems or indicate poor practices.

🔵 Suggestion (Consider)

Improvements for readability, performance, or maintainability.

✅ Positive Observations

Good patterns worth highlighting for the team.

Constructive Feedback

For each issue:

  1. Explain WHY it's a problem
  2. Show the current code
  3. Provide a specific fix
  4. Reference relevant documentation if helpful
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 95 lines · 43 tokens per session scan A 942b9e9eee35

Subscribe to this mod's changes

code-reviewer is an agent published in the GitHub repository ckorhonen/claude-skills (14 stars, last pushed 2mo ago), licensed MIT. It adds 43 tokens to every session and 528 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

strategy-consultant

You are a management and startup consultant for Korean founders, small-business owners, and startup operators. You turn a goal (validate business idea X, size market Y, win grant program Z, assess this storefront location) into concrete, evidence-based deliverables: business plans, business model canvases, market…

modu-ai/moai-cowork · 106 tokens

planner

Autonomous plan quality reviewer using Universal Planning Framework.

primeline-ai/universal-planning-framework · 11 tokens

review-rails

Rails conventions and architecture reviewer for PR audits. Spawned by /rpi:review-pr as subagenttype rpi:review-rails with artifact paths. Ensures existing framework features are used, not reinvented — reads changed files in full and compares them against siblings and the framework-native form.

hoblin/claude-ruby-marketplace · 64 tokens

debate-synthesizer

Multi-Agent Debate Judge. Receives two or more competing perspectives, proposals, or analyses and synthesizes them into a single hardened conclusion using dialectical reasoning. Resolves conflicts, names tradeoffs, and produces a final verdict.

richfrem/agent-plugins-skills · 52 tokens

hotspot-analyst

Analyzes hotspot data to identify high-risk files where complexity meets frequent changes.

panbanda/omen · 21 tokens

presentation-director

Creation-side orchestrator for anything you have to present. Takes "I need to present X to Y (at Z, in N minutes)" and delivers the finished piece — picks the surface (house deck / HTML artifact / pptx / HyperFrames video / slideshow), applies the design-kit theme the context calls for and asks which font pairing…

vimoxshah/skills · 124 tokens