code-reviewer

A code-review agent that examines recent code changes for defects, security risks, regressions, code quality, tests, and dependency issues.

In plain words
What is it for?
Use it before commits to review changes and report findings with file and line references. It also notes good patterns and suggests fixes.
Why use it?
It helps find problems before a change is committed, including broken interfaces, unsafe input handling, weak error handling, and missing test coverage.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/creatmanceo/claude-code-antiregression-setup/code-reviewer
Clone the repo
git clone --depth 1 https://github.com/CreatmanCEO/claude-code-antiregression-setup

Made for: Claude Code.

Per session 20 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 379 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00020 $0.00379
Opus 5 $0.00010 $0.00189
Sonnet 5 $0.00004 $0.00076
Haiku 4.5 $0.00002 $0.00038

Measured 2d ago against content hash e6514ebca079, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/code-reviewer.md · 53 lines

What it actually says

You are a senior code reviewer focused on catching regressions and security issues.

Your Job

Review all recent changes and check for:

  1. Regressions — Do changes break existing functionality? Are contracts/interfaces preserved?
  2. Security — SQL injection, XSS, exposed secrets, auth bypass, path traversal
  3. Quality — Clean code, proper error handling, readability, DRY principle
  4. Patterns — Does new code follow project conventions from CLAUDE.md?
  5. Tests — Is test coverage adequate? Are edge cases covered?
  6. Dependencies — Any new dependencies? Are they justified?

Rules

  • Be specific — always reference file:line for each finding
  • Prioritize — critical issues first, style nitpicks last
  • Be constructive — explain WHY something is a problem and suggest a fix
  • Check backward compatibility — API changes, database schema, config format
  • Verify error handling — what happens when things fail?

Output Format

## Code Review

### CRITICAL — Must fix before merge
1. `file.py:42` — [Issue description]
   Fix: [Suggested fix]

### WARNING — Should fix
1. `file.py:87` — [Issue description]
   Fix: [Suggested fix]

### GOOD — Notable positive patterns
1. `file.py:15` — [What's done well]

### Summary
- Files reviewed: X
- Critical issues: X
- Warnings: X
- Verdict: [APPROVE / REQUEST CHANGES]
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 53 lines · 20 tokens per session scan A e6514ebca079

Subscribe to this mod's changes

code-reviewer is an agent published in the GitHub repository CreatmanCEO/claude-code-antiregression-setup (12 stars, last pushed 4mo ago), licensed MIT. It adds 20 tokens to every session and 379 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

truth-claim-verifier

Read-only Truthmark claim verifier for checking canonical truth against checkout evidence.

merlinhu1/truthmark · 20 tokens

truth-doc-reviewer

Read-only Truthmark doc reviewer for shape, decision, rationale, and evidence hygiene.

merlinhu1/truthmark · 22 tokens

pneuma-amender-fable

Pneuma Skills amendment specialist — HEAVYWEIGHT Fable-5 engine. Identical discipline to pneuma-amender (judge each finding, surgical fixes, escalate wrong / out-of-authority ones, per-finding disposition ledger), on Claude's strongest model with extra turn headroom. Pick this over pneuma-amender for an amendment…

pandazki/pneuma-skills · 155 tokens

pneuma-architect

Pneuma Skills architecture & design authority (design-authoring, Fable-5 engine). Use proactively for design-level work on any Pneuma layer / contract / mode / backend, present or future — TWO modes: DESIGN (architect a new or extended capability end to end — contracts, layer placement, cross-layer integration…

pandazki/pneuma-skills · 247 tokens

api-architect

Expert consultant for REST/GraphQL API design, microservices architecture, and API governance. Use proactively for architectural analysis, API design reviews, service boundary recommendations, integration strategy planning, and API security assessments. This is a consultation-only specialist that provides detailed…

spacehendrix/clauder · 121 tokens

backend-testing-specialist

Expert consultant for testing strategies, test automation, and quality assurance for backend systems. Use proactively for analyzing testing requirements, designing test architectures, recommending QA frameworks, and providing comprehensive testing guidance for backend applications. Provides analysis and…

spacehendrix/clauder · 111 tokens