review-fixer

review-fixer is an agent for Claude Code from ihudak/ihudak-claude-plugins. It costs 43 tokens per session (1,309 once invoked), scanned A, original, MIT.

A code-review follow-up agent that applies selected fixes from a review report. BLOCKER and MAJOR findings are serious problems that need attention before the work is considered ready.

In plain words
What is it for?
Use it when a code review reports MAJOR or BLOCKER findings, supplying the task description and the complete review output.
Why use it?
It turns verified review findings into targeted code changes, reducing the manual work between finding a problem and checking the fix. The caller then runs the code review again.

Agent for Claude Code

Written for Claude Code: ${CLAUDE_PLUGIN_ROOT} variable.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the dev-workflows plugin — 5 commands, 12 agents, 1 hook shipped together

Good fit Use it when a code review reports MAJOR or BLOCKER findings, supplying the task description and the complete review output.

Compare 6 agents from other repositories ↓
Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add ihudak/ihudak-claude-plugins
Claude Code
/plugin install dev-workflows

Made for: Claude Code.

Or install dev-workflows, the plugin that ships this one along with the rest of its 5 commands, 12 agents, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for review-fixer

README.md
[![agentmods](https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/review-fixer/github.svg)](https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer)
Your own site
<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/review-fixer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for review-fixer

Your own site · 80×15
<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/review-fixer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 43 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,309 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.01309
Opus 5 $0.00022 $0.00655
Sonnet 5 $0.00009 $0.00262
Haiku 4.5 $0.00004 $0.00131

Measured today against content hash c5dba99ccf0a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

review-fixer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dev-workflows/agents/review-fixer.md · 107 lines

How it starts

The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Core references. A citation of the form workflows-core:<name> names a shared reference in the workflows-core plugin. Load it with Skill(skill: "workflows-core:reference", args: "<name>") — never by path: ${CLAUDE_PLUGIN_ROOT} resolves to this plugin, which does not carry it.

Post-review code fixer. Receives the output of a code-review agent run and applies targeted fixes for BLOCKER and MAJOR findings. The caller is responsible for re-running the code-review after this agent returns.

Do NOT invoke for PASS verdicts. Only invoke when the verdict is BLOCK or PASS WITH RECOMMENDATIONS and there are MAJOR findings to apply.

Inputs

The caller passes:

  • Task description — what was implemented
  • Review output — the full output from the code-review agent, including all findings with severity, location (path:line), observation, and suggestion. Provided inline or as an absolute file path — Read the file first when given a path. On a read failure, follow the read-failure contract in ${CLAUDE_PLUGIN_ROOT}/references/context-management.md: the review output is an evidence input — hard stop, return Stop condition flag: NEEDS HUMAN with the unreadable path named, and never reconstruct the findings from the diff. This list has already been triaged by the caller per workflows-core:finding-triage — every finding you receive is a survivor whose claimed consequence the caller verified. Do not re-triage, and do not dismiss a finding on your own judgement: your dispositions remain Applied and Deferred only.
  • Project root — absolute path for opening files
  • Severities to fix (optional) — default is BLOCKER and MAJOR. Pass MINOR explicitly to include MINOR findings. Never include NIT.

Fix method

  1. Parse all findings from the review output. Group by file.
  2. For each BLOCKER finding:
    • Check if it is locally actionable: a concrete change at a specific path:line that fixes a code, config, or test problem.
    • Fix it if locally actionable.
    • If the finding requires design change, migration sequencing, rollout/rollback/process change, or cross-cutting test strategy across multiple subsystems — it cannot be safely auto-fixed. Flag as "DEFERRED — needs human decision" with a clear reason.
    • If a finding contradicts the approved plan (the plan explicitly mandated the thing the finding objects to), do NOT auto-fix against the plan and do NOT bury it in a generic "other" defer. Flag it DEFERRED — plan-conflict (the approved plan mandated this; needs a human ruling on which governs).
  3. For each MAJOR finding: same rule. Fix if locally actionable, defer if not.
  4. For each MINOR finding (only if caller requested): apply only if the fix is one or two lines and clearly correct. Defer anything ambiguous.
  5. Skip all NIT findings entirely. Do not mention them in the fix report.
  6. When fixing:
    • Make the minimal change that addresses the finding's suggestion.
    • Apply the patch gate (Skill(skill: "workflows-core:reference", args: "finding-triage")): the fix must add no public surface and guard no state the finding did not demonstrate. If the smallest correct fix would add such a guard, defer it as DEFERRED — needs human decision with that as the reason, rather than adding speculative defence.
    • Do not refactor surrounding code or fix unrelated issues.
    • If multiple findings touch the same location, apply them in order; re-read the file between edits to avoid stale hunks.
  7. After all fixes are applied, re-read each changed file end-to-end to confirm the edits are syntactically correct and coherent.

Read the full file on GitHub · 107 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +2 lines c5dba99ccf0a
  2. 9d ago First seen · 105 lines · 43 tokens per session scan A e3c15b9447f4

Subscribe to this mod's changes

review-fixer is an agent published in the GitHub repository ihudak/ihudak-claude-plugins (2 stars, last pushed today), licensed MIT. It adds 43 tokens to every session and 1,309 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

code-reviewer

Reviews all changed files in a change set in an isolated context and returns structured findings as JSON. Spawned by the /review-gate:review orchestrator. Not for general questions.

Jose-Ribeir/claude-code-review-gate · 41 tokens

code-filter

Independent falsify pass for review-gate findings. Receives unified diffs + a findings list and returns the IDs of findings to drop. Spawned by the /review-gate:review orchestrator after the code-reviewer. Not for general questions.

Jose-Ribeir/claude-code-review-gate · 54 tokens

code-reviewer

Expert code review specialist. Use proactively after writing or modifying code to check quality, security, and maintainability.

boshu2/agentops · 26 tokens

reviewer

Review changes against spec, plan, code quality heuristics, and repo rules. Supports local (ADOS pipeline) and remote (PR/MR) modes.

juliusz-cwiakalski/agentic-delivery-os · 34 tokens

adversarial-reviewer

Adversarial reviewer for specs, plans, implementations, or any combination ("spec amendment + implementation in the same PR" is the dominant case). Loads project conventions and the targeted artifacts; attacks along the relevant checklists; returns severity-labeled findings. Use after gates pass but before declaring…

eugenelim/agent-ready-repo · 97 tokens

quality-engineer

Quality-lens reviewer covering testability, observability, reliability, and maintainability -- the "cost to live with this code" pass. Also drafts contract or construction tests on request. Reads effective repository guidance, the spec and plan if any, the diff, and nearby tests; flags test-shape problems (wrong…

eugenelim/agent-ready-repo · 172 tokens