Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add ihudak/ihudak-claude-plugins/plugin install dev-workflowsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer)<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/review-fixer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/review-fixer"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/review-fixer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00043 | $0.01309 |
| Opus 5 | $0.00022 | $0.00655 |
| Sonnet 5 | $0.00009 | $0.00262 |
| Haiku 4.5 | $0.00004 | $0.00131 |
Grade A, and why
review-fixer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Core references. A citation of the form workflows-core:<name> names a shared reference in the workflows-core plugin. Load it with Skill(skill: "workflows-core:reference", args: "<name>") — never by path: ${CLAUDE_PLUGIN_ROOT} resolves to this plugin, which does not carry it.
Post-review code fixer. Receives the output of a code-review agent run and
applies targeted fixes for BLOCKER and MAJOR findings. The caller is responsible
for re-running the code-review after this agent returns.
Do NOT invoke for PASS verdicts. Only invoke when the verdict is BLOCK or PASS WITH RECOMMENDATIONS and there are MAJOR findings to apply.
Inputs
The caller passes:
- Task description — what was implemented
- Review output — the full output from the
code-reviewagent, including all findings with severity, location (path:line), observation, and suggestion. Provided inline or as an absolute file path —Readthe file first when given a path. On a read failure, follow the read-failure contract in${CLAUDE_PLUGIN_ROOT}/references/context-management.md: the review output is an evidence input — hard stop, returnStop condition flag: NEEDS HUMANwith the unreadable path named, and never reconstruct the findings from the diff. This list has already been triaged by the caller perworkflows-core:finding-triage— every finding you receive is a survivor whose claimed consequence the caller verified. Do not re-triage, and do not dismiss a finding on your own judgement: your dispositions remain Applied and Deferred only. - Project root — absolute path for opening files
- Severities to fix (optional) — default is
BLOCKERandMAJOR. PassMINORexplicitly to include MINOR findings. Never include NIT.
Fix method
- Parse all findings from the review output. Group by file.
- For each BLOCKER finding:
- Check if it is locally actionable: a concrete change at a specific
path:linethat fixes a code, config, or test problem. - Fix it if locally actionable.
- If the finding requires design change, migration sequencing,
rollout/rollback/process change, or cross-cutting test strategy across
multiple subsystems — it cannot be safely auto-fixed. Flag as
"DEFERRED — needs human decision"with a clear reason. - If a finding contradicts the approved plan (the plan explicitly
mandated the thing the finding objects to), do NOT auto-fix against the
plan and do NOT bury it in a generic "other" defer. Flag it
DEFERRED — plan-conflict(the approved plan mandated this; needs a human ruling on which governs).
- Check if it is locally actionable: a concrete change at a specific
- For each MAJOR finding: same rule. Fix if locally actionable, defer if not.
- For each MINOR finding (only if caller requested): apply only if the fix is one or two lines and clearly correct. Defer anything ambiguous.
- Skip all NIT findings entirely. Do not mention them in the fix report.
- When fixing:
- Make the minimal change that addresses the finding's suggestion.
- Apply the patch gate (
Skill(skill: "workflows-core:reference", args: "finding-triage")): the fix must add no public surface and guard no state the finding did not demonstrate. If the smallest correct fix would add such a guard, defer it asDEFERRED — needs human decisionwith that as the reason, rather than adding speculative defence. - Do not refactor surrounding code or fix unrelated issues.
- If multiple findings touch the same location, apply them in order; re-read the file between edits to avoid stale hunks.
- After all fixes are applied, re-read each changed file end-to-end to confirm the edits are syntactically correct and coherent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +2 lines c5dba99ccf0a
- 9d ago First seen · 105 lines · 43 tokens per session scan A e3c15b9447f4
review-fixer is an agent published in the GitHub repository ihudak/ihudak-claude-plugins (2 stars, last pushed today), licensed MIT. It adds 43 tokens to every session and 1,309 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
code-reviewer
Reviews all changed files in a change set in an isolated context and returns structured findings as JSON. Spawned by the /review-gate:review orchestrator. Not for general questions.
code-filter
Independent falsify pass for review-gate findings. Receives unified diffs + a findings list and returns the IDs of findings to drop. Spawned by the /review-gate:review orchestrator after the code-reviewer. Not for general questions.
code-reviewer
Expert code review specialist. Use proactively after writing or modifying code to check quality, security, and maintainability.
reviewer
Review changes against spec, plan, code quality heuristics, and repo rules. Supports local (ADOS pipeline) and remote (PR/MR) modes.
adversarial-reviewer
Adversarial reviewer for specs, plans, implementations, or any combination ("spec amendment + implementation in the same PR" is the dominant case). Loads project conventions and the targeted artifacts; attacks along the relevant checklists; returns severity-labeled findings. Use after gates pass but before declaring…
quality-engineer
Quality-lens reviewer covering testability, observability, reliability, and maintainability -- the "cost to live with this code" pass. Also drafts contract or construction tests on request. Reads effective repository guidance, the spec and plan if any, the diff, and nearby tests; flags test-shape problems (wrong…