claude-code-templates: Agent for Claude Code

.claude/agents/component-reviewer.md

component-reviewer is an agent for Claude Code from davila7/claude-code-templates. It costs 57 tokens per session (3,752 once invoked), scanned A, original, MIT.

An agent that checks Claude Code components before they are added or changed, including agents, commands, MCPs, hooks, settings, skills, and loops.

In plain words
What is it for?
Use it to review component structure, YAML frontmatter, descriptions, tools, model settings, file locations, security, and project naming conventions.
Why use it?
It catches invalid formatting, missing required fields, naming problems, misplaced files, hardcoded secrets, and unsafe absolute paths.

Agent for Claude Code

Written for Claude Code: $CLAUDE_PROJECT_DIR variable. Also seen: model in frontmatter; reads .claude/ paths; mentions CLAUDE.md.

This is davila7/claude-code-templates's own configuration. It tells Claude Code how to work on claude-code-templates itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-code-templates configures →

Not installable: its command points at a path on the author’s own machine, so it runs nowhere else. The line is /Users/username/.claude/scripts/.

About the project

Claude Code Templates is a command-line tool and catalogue for configuring Anthropic’s Claude Code with agents, commands, settings, hooks, integrations, skills, and project templates. Developers use it to browse and install reusable components for their coding workflows. The catalogue includes many of these Claude Code components.

davila7/claude-code-templates · 32,814 stars · on GitHub · aitmpl.com

Reuse

Borrowing it

Nothing to install: this file belongs to davila7/claude-code-templates. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/davila7/claude-code-templates/main/.claude/agents/component-reviewer.md
Clone the repo
git clone --depth 1 https://github.com/davila7/claude-code-templates

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for component-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/agents/davila7/claude-code-templates/component-reviewer/github.svg)](https://agentmods.dev/agents/davila7/claude-code-templates/component-reviewer)
Your own site
<a href="https://agentmods.dev/agents/davila7/claude-code-templates/component-reviewer"><img src="https://agentmods.dev/badge/agents/davila7/claude-code-templates/component-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for component-reviewer

Your own site · 80×15
<a href="https://agentmods.dev/agents/davila7/claude-code-templates/component-reviewer"><img src="https://agentmods.dev/badge/agents/davila7/claude-code-templates/component-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 57 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,752 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00057 $0.03752
Opus 5.5 $0.00023 $0.01501
Sonnet 5.5 $0.00011 $0.00750
Haiku 4.5 $0.00006 $0.00375

Measured 1mo ago against content hash 62cd82411fcb, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

component-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/component-reviewer.md · 483 lines

How it starts

The opening of the file, as written. The whole thing — 483 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a specialized component reviewer for the Claude Code Templates project. Your role is to ensure all components meet quality standards before they are merged.

Component Types & Validation Rules

1. AGENTS (cli-tool/components/agents/)

Format: Markdown (.md) with YAML frontmatter

Required Fields:

  • name: kebab-case identifier
  • description: Clear, comprehensive description of capabilities
  • tools: Comma-separated list (Read, Write, Edit, Bash, etc.)
  • model: Model version (sonnet, haiku, opus, inherit)

Content Requirements:

  • Clear system prompt explaining the agent's role
  • Specific focus areas or capabilities
  • Best practices and guidelines
  • No hardcoded secrets or API keys

Validation Checklist:

  • YAML frontmatter is valid and complete
  • Name uses kebab-case (lowercase with hyphens)
  • Description is clear and specific (not generic)
  • Tools are specified appropriately
  • Content provides detailed instructions
  • No hardcoded secrets (API keys, tokens, passwords)
  • No absolute paths (use relative paths like .claude/scripts/)
  • File is in correct category directory

Example Structure:

---
name: frontend-developer
description: Frontend development specialist for React applications and responsive design
tools: Read, Write, Edit, Bash
model: sonnet
---

You are a frontend developer specializing in modern React applications...

2. COMMANDS (cli-tool/components/commands/)

Format: Markdown (.md) with YAML frontmatter

Required Fields:

  • allowed-tools: Specific bash commands permitted (e.g., Bash(git add:*))
  • argument-hint: Usage syntax showing expected arguments
  • description: Clear command purpose

Content Requirements:

  • Command usage examples
  • Current state queries (using ! syntax for dynamic values)
  • Options and flags documentation
  • Error handling guidance

Validation Checklist:

  • YAML frontmatter is valid and complete
  • Name uses kebab-case
  • allowed-tools specifies permitted commands
  • argument-hint shows clear usage syntax
  • Description is specific and actionable
  • Examples demonstrate proper usage
  • No hardcoded secrets
  • No absolute paths

Read the full file on GitHub · 483 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 483 lines · 57 tokens per session scan A 62cd82411fcb

Subscribe to this mod's changes

component-reviewer is an agent published in the GitHub repository davila7/claude-code-templates (32,814 stars, last pushed today), licensed MIT. It adds 57 tokens to every session and 3,752 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

style-analyzer

Use this agent after UI implementation or when the user requests design consistency audits. Ensures visual consistency, catches design drift from locked tokens, identifies technical debt in UI code, and guards the integrity of the design language. Context: Multiple UI components were built during the cycle. user…

drobins25/craft · 203 tokens

maze-architect

Route planner for perpendicular PR review. Reads a raw diff with ZERO intent context (no story files, no commit messages, no PR descriptions) and generates 2-4 questions that the code demands answers to. These questions become coordinates for parallel maze-runner review agents. The architect throws the frisbee blind …

drobins25/craft · 157 tokens

verifier

Verification agent for /craft:research-verify. Takes a single claim from existing research and attempts to disprove it using independent primary sources. Returns a verdict (CONFIRMED/REFUTED/PARTIALLYTRUE/UNVERIFIABLE) with evidence. NOT a researcher. Does not discover new topics or cast a wide net. Takes one claim…

drobins25/craft · 178 tokens

rust-reviewer

Read-only Rust review: ownership, unsafe soundness, async/Tokio, error handling, clippy idioms, security. Use when a diff touches .rs code or Cargo.toml.

KevinZai/commander · 43 tokens

csharp-reviewer

Read-only C#/.NET review: async/await, IDisposable, LINQ, nullable types, DI lifetimes, security. Use when a diff touches .cs or .csproj files.

KevinZai/commander · 44 tokens

go-reviewer

Read-only Go review: goroutine and channel safety, errors, context propagation, idioms, security. Use when a diff touches .go code or go.mod.

KevinZai/commander · 37 tokens