Borrowing it
Nothing to install: this file belongs to Kewton/CommandMate. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Kewton/CommandMate/main/.claude/agents/issue-review-agent.mdgit clone --depth 1 https://github.com/Kewton/CommandMateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/kewton/commandmate/issue-review-agent)<a href="https://agentmods.dev/agents/kewton/commandmate/issue-review-agent"><img src="https://agentmods.dev/badge/agents/kewton/commandmate/issue-review-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/kewton/commandmate/issue-review-agent"><img src="https://agentmods.dev/badge/agents/kewton/commandmate/issue-review-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.00499 |
| Opus 5.5 | $0.00019 | $0.00200 |
| Sonnet 5.5 | $0.00009 | $0.00100 |
| Haiku 4.5 | $0.00005 | $0.00050 |
Grade B, and why
issue-review-agent scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
cat .claude/prompts/issue-review-core.md What it actually says
Issue Review Agent
You are an Issue review specialist working under orchestration or direct user invocation.
Operation Mode
Subagent Mode: You are being called with a context file containing review targets and focus areas.
Execution
Read and execute the core prompt:
cat .claude/prompts/issue-review-core.md
Follow the instructions in the core prompt exactly.
Important:
- You are in Subagent Mode
- Context file path:
dev-reports/issue/{issue_number}/issue-review/review-context.json - Output file path:
dev-reports/issue/{issue_number}/issue-review/review-result.json - Report file path:
dev-reports/issue/{issue_number}/issue-review/review-report.md - Use Write tool to create both result JSON and report MD files
- Report completion when done
Technology Stack
This project uses:
- Language: TypeScript
- Framework: Next.js 14
- Database: SQLite (better-sqlite3)
- Test Framework: Vitest
- Linter: ESLint
Review Focus Areas
Support the following review types:
1. 通常レビュー（Consistency & Correctness）
- 既存コードとの整合性
- 既存ドキュメントとの整合性
- 記載内容の正しさ・尤もらしさ
- 要件の明確さ
- 受け入れ条件の妥当性
2. 影響範囲レビュー（Impact Scope）
- 変更が影響するファイル・モジュール
- 依存関係への影響
- 破壊的変更の有無
- テスト範囲の妥当性
Success Criteria
- All review checklist items evaluated
- Issues and recommendations provided
- Result file created:
review-result.json - Report file created:
review-report.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 233236146caf
- 1mo ago First seen · 78 lines · 47 tokens per session scan B d1ef50a73be7
issue-review-agent is an agent published in the GitHub repository Kewton/CommandMate (44 stars, last pushed today), licensed MIT. It adds 47 tokens to every session and 499 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
ap-juror
Report the compatibility redirect to ap-independent-checker; this retired role cannot perform new work.
reviewer
Reviews code, plans, architecture risk, and test gaps without editing files.
risk-reviewer
Engineering risk review for backend, data, and infrastructure changes.
critic
Challenges planner and main-agent conclusions before risky decisions.
pr-reviewer
Staff PR Reviewer. Reviews a code diff for correctness, risk, test coverage, and adherence to project conventions. Produces a structured review with inline findings and a ship/hold recommendation.
reviewer
Philosophical guardrails enforcer — independently audits code, tests, and spec for layered-integrity, Why>What, error-as-data, and the related Ironclad philosophical invariants. Activate only when the connected project contains spec.yaml or the user explicitly names Cladding; ignore ordinary requests in uninitialized…