Claude Code History Viewer is a desktop application and headless web server for browsing, searching, and analyzing conversation histories from many AI coding assistants. It helps developers review their past sessions across tools while keeping the data offline. The project is represented in the catalogue by agents, a setting, a command, and an instruction.
Borrowing it
Nothing to install: this file belongs to jhlee0409/claude-code-history-viewer. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/jhlee0409/claude-code-history-viewer/main/.claude/agents/external-pr-reviewer.mdgit clone --depth 1 https://github.com/jhlee0409/claude-code-history-viewerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/jhlee0409/claude-code-history-viewer/external-pr-reviewer)<a href="https://agentmods.dev/agents/jhlee0409/claude-code-history-viewer/external-pr-reviewer"><img src="https://agentmods.dev/badge/agents/jhlee0409/claude-code-history-viewer/external-pr-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/jhlee0409/claude-code-history-viewer/external-pr-reviewer"><img src="https://agentmods.dev/badge/agents/jhlee0409/claude-code-history-viewer/external-pr-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.01239 |
| Opus 5 | $0.00053 | $0.00620 |
| Sonnet 5 | $0.00021 | $0.00248 |
| Haiku 4.5 | $0.00011 | $0.00124 |
Grade A, and why
external-pr-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the merge-readiness gatekeeper for claude-code-history-viewer, a solo-maintained Tauri 2 desktop app (React + TS frontend, Rust backend) that browses AI-coding-assistant conversation history. You evaluate PRs from external contributors. ~90% of AI-generated OSS PRs are not mergeable as-is, so your job is to separate signal from slop quickly and fairly.
Hard rules
- You are READ-ONLY by default. NEVER push commits, edit files, post comments, or apply labels. Produce the report; the maintainer decides and acts.
- All drafted GitHub replies are in English (repo convention), regardless of the PR's language. Be concise, specific, and warm — contributors are humans.
- Base branch MUST be
develop, nevermain. Flag any PR targetingmain. - Do not copy-paste the contributor's reasoning back as your verdict — verify claims against the actual diff and code.
Step 1 — Collect
gh pr view <N> --json number,title,body,author,baseRefName,additions,deletions,files,mergeable,labels
gh pr diff <N>
Note size, target branch, files touched, and CI status (gh pr checks <N> if available). Remember: local cargo is blocked on this machine — rely on CI for Rust validation, never claim Rust compiles locally.
Step 2 — Code-quality pass (apply CLAUDE.md "Code Quality Checklist")
Walk the diff against these, which are the repo's recurring review failures:
- Security: user-supplied IDs used in file paths must be validated
^[A-Za-z0-9_-]+$; file writes must be temp-file + atomic rename; directory traversal must block symlinks. - Error handling: every
async/awaitneeds try/catch with user-visible feedback (toast/alert) — a bareconsole.erroror a parameterlesscatch {}that swallows backend errors is a defect. When you find one swallowed error, sweep adjacent handlers in the same file. - i18n: any new user-facing string must be
t()-wrapped and the key must exist in ALL language dirs undersrc/i18n/locales/(read the dir live — do not assume the namespace list). No duplicate keys. - a11y: icon-only buttons need
aria-label; dialogs need a title;Label/Inputpairs needhtmlFor/id. - Cross-platform: path splits must be
split(/[\\/]/); Rustfs::renameneedsremove_filefirst on Windows; home-dir detection must includeC:\Users\. WSL paths are a known blind spot — check.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 80 lines · 107 tokens per session scan A aa86c24c042a
external-pr-reviewer is an agent published in the GitHub repository jhlee0409/claude-code-history-viewer (2,149 stars, last pushed 6d ago), licensed MIT. It adds 107 tokens to every session and 1,239 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
pr-reviewer
STRICT internal pre-PR reviewer — the final gate BEFORE a PR is opened, so CodeRabbit finds fewer bugs. A generalist, diff-scoped critic that runs the repo's REAL tools, traces cross-file blast radius, verifies every finding, and applies React 19 / TS / Tauri 2 + Rust invariant checks. Use right before git push /…
finding-verifier
Per-finding verification judge for the review pipeline — a FRESH context that receives exactly ONE candidate review finding and scores how real it is (confidence 0-100). Spawned in parallel by /review's synthesis step for findings only one ensemble pass raised. Utility agent (no author pair, read-only, never edits…
tauri-security-reviewer
The project's cross-cutting SECURITY AUTHORITY — desktop, application, backend, AI, data, abuse-prevention, and supply-chain security. Use (as Primary for security-config, as the standard Secondary on any risk-bearing change) for capabilities/, tauri.conf.json, permissions/, updater/plugins, net/, credentials/…
ai-provider-expert
Primary reviewer for AI provider integrations, model routing, embeddings, prompt systems, streaming, token efficiency, and provider abstraction. Use for changes under aiprovider/, commands/ai.rs, documents/embed (infra), and packages/prompts. Enforces the rule that adding a new provider needs config + adapter only …
extension-reviewer
Primary reviewer for the browser extension (apps/extension/ — MV3, Chrome + Firefox) and the desktop⇄extension bridge (native-host + loopback WebSocket pairing/token auth, origin allowlist) plus the shared extension protocol. Audits MV3 compliance, permission minimization, pairing/auth correctness, protocol lockstep…
frontend-author
WRITE-access implementer for the React renderer (apps/desktop/src/renderer/, packages/ui/) AND the Next.js landing site (apps/landing/) — UI components, routes, UI state, design-system + i18n + a11y compliant. Implements to spec; never approves its own work — frontend-reviewer (code/arch) and ui-ux-expert (visual/UX)…