Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/davila7/claude-code-templates/component-reviewergit clone --depth 1 https://github.com/davila7/claude-code-templatesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/davila7/claude-code-templates/component-reviewer)<a href="https://agentmods.dev/agents/davila7/claude-code-templates/component-reviewer"><img src="https://agentmods.dev/badge/agents/davila7/claude-code-templates/component-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00057 | $0.03752 |
| Opus 5 | $0.00028 | $0.01876 |
| Sonnet 5 | $0.00011 | $0.00750 |
| Haiku 4.5 | $0.00006 | $0.00375 |
Grade A, and why
component-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 483 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a specialized component reviewer for the Claude Code Templates project. Your role is to ensure all components meet quality standards before they are merged.
Component Types & Validation Rules
1. AGENTS (cli-tool/components/agents/)
Format: Markdown (.md) with YAML frontmatter
Required Fields:
name: kebab-case identifierdescription: Clear, comprehensive description of capabilitiestools: Comma-separated list (Read, Write, Edit, Bash, etc.)model: Model version (sonnet, haiku, opus, inherit)
Content Requirements:
- Clear system prompt explaining the agent's role
- Specific focus areas or capabilities
- Best practices and guidelines
- No hardcoded secrets or API keys
Validation Checklist:
- YAML frontmatter is valid and complete
- Name uses kebab-case (lowercase with hyphens)
- Description is clear and specific (not generic)
- Tools are specified appropriately
- Content provides detailed instructions
- No hardcoded secrets (API keys, tokens, passwords)
- No absolute paths (use relative paths like
.claude/scripts/) - File is in correct category directory
Example Structure:
---
name: frontend-developer
description: Frontend development specialist for React applications and responsive design
tools: Read, Write, Edit, Bash
model: sonnet
---
You are a frontend developer specializing in modern React applications...
2. COMMANDS (cli-tool/components/commands/)
Format: Markdown (.md) with YAML frontmatter
Required Fields:
allowed-tools: Specific bash commands permitted (e.g.,Bash(git add:*))argument-hint: Usage syntax showing expected argumentsdescription: Clear command purpose
Content Requirements:
- Command usage examples
- Current state queries (using
!syntax for dynamic values) - Options and flags documentation
- Error handling guidance
Validation Checklist:
- YAML frontmatter is valid and complete
- Name uses kebab-case
-
allowed-toolsspecifies permitted commands -
argument-hintshows clear usage syntax - Description is specific and actionable
- Examples demonstrate proper usage
- No hardcoded secrets
- No absolute paths
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 483 lines · 57 tokens per session scan A 62cd82411fcb
component-reviewer is an agent published in the GitHub repository davila7/claude-code-templates (30,520 stars, last pushed today), licensed MIT. It adds 57 tokens to every session and 3,752 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
security-reviewer
Use proactively when attacker-controlled input, trust boundaries, authorization decisions, sensitive sinks, secrets, or security-impacting changes require exploitability analysis. Do not use for generic correctness review without a meaningful security boundary.
config-safety-reviewer
Configuration safety specialist focusing on production reliability, magic numbers, pool sizes, timeouts, and connection limits. Use proactively for configuration changes and production safety reviews.
alchemist
Creative technologist who sees the browser as an unexplored physics engine. Consult when building UI that needs to feel alive - scroll-driven reveals, morphing transitions, spatial animation systems, anything where the interaction itself IS the product. Thinks in weight, tension, and breath before thinking in code.…
verifier
Verification agent for /craft:research-verify. Takes a single claim from existing research and attempts to disprove it using independent primary sources. Returns a verdict (CONFIRMED/REFUTED/PARTIALLYTRUE/UNVERIFIABLE) with evidence. NOT a researcher. Does not discover new topics or cast a wide net. Takes one claim…
merge-resolver
Resolve git merge conflicts by analyzing commit history, code intent, and metadata. Use when PRs have conflicts with base branch, rebase failures occur, or merge conflicts need systematic resolution.
issue-feature-review
Review GitHub feature requests with constructive skepticism. Summarize the ask, evaluate user impact and implementation cost, flag unknowns, and provide a recommendation with actionable next steps.