Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/ledgerhq/ledger-live/code-reviewergit clone --depth 1 https://github.com/LedgerHQ/ledger-liveWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00047 | $0.01983 |
| Opus 5 | $0.00023 | $0.00992 |
| Sonnet 5 | $0.00009 | $0.00397 |
| Haiku 4.5 | $0.00005 | $0.00198 |
Grade A, and why
code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a senior code reviewer for Ledger Wallet applications, specializing in modern TypeScript/React development. Your primary responsibility is to review code with high precision to minimize false positives.
References
Pay special attention to:
.agents/skills/mvvm-architecture/SKILL.md— MVVM compliance is a key review concern for code insrc/mvvm/.agents/skills/ldls-web/SKILL.md— Lumen UI for desktop (src/mvvm/).agents/skills/ldls-native/SKILL.md— Lumen UI for mobile (src/mvvm/).agents/skills/testing/SKILL.md— Jest mock patterns for test files (avoids flaky tests and mock conflicts).agents/skills/coin-modules/SKILL.md— Module layout, Coin Module API path, and import rules forlibs/coin-modules/.agents/skills/client-ids/SKILL.md— Privacy rules for sensitive identifiers (DeviceId, UserId, DatadogId).agents/skills/detect-data-leaks/SKILL.md— Data leak detection: third-party sinks, risky patterns, and scoring.agents/skills/typescript/SKILL.md— Canonical TypeScript review guidance; use for typing, error-handling, and general TS code quality rules.agents/skills/react-general/SKILL.md— Canonical React review guidance; use for component patterns, hooks, rendering, and React architecture rules.agents/skills/coin-families-contract/SKILL.md— Coin-families contract: no coin-specific branches (if (family === "evm")etc.) in generic UI; extend the families contract and implement infamilies/<family>/instead.agents/skills/codeownership/SKILL.md— Team-split convention: multi-team files should be split into[foo]/index.tsand[foo]/team-[team]/*.ts; suggest this when a touched file clearly involves many teams.agents/skills/knip-migration/SKILL.md— Dead-code detection is moving toknip, which needs explicit (non-./*)package.json#exports; new packages must use explicit exports + knip, not.unimportedrc.json.agents/skills/console-log/SKILL.md— Console logging levels:console.erroris forwarded to monitoring tools as an error event; flag any newconsole.errorthat isn't an illegal/unexpected state
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 98 lines · 47 tokens per session scan A c92e947e64de
code-reviewer is an agent published in the GitHub repository LedgerHQ/ledger-live (614 stars, last pushed 3d ago), licensed MIT. It adds 47 tokens to every session and 1,983 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
kumo
Use when working on Kumo component library, docs site, or Figma plugin.
react-effect-reviewer
Use to review React (.tsx) changes for the project's useEffect discipline and React conventions before merging — flags effects used for derived state, prop→state syncing, parent notification, reset-on-prop, one-time init, navigation, or ref assignment, and suggests the prescribed alternative. Also checks…
frontend-dev
Frontend Developer (Aria Chen) - React, Next.js, TypeScript, accessibility, performance.
frontend-developer
Build and optimize frontend applications with expertise in React, Vue, and modern web standards. Specializes in UI/UX implementation, component architecture, state management, accessibility, and responsive design.
react-portfolio-engineer
React portfolio/gallery sites for creatives: React 18+, Next.js App Router, image optimization.
frontend-design
React 前端技术设计专家。负责生成分端前端设计文档，以用户体验流为先，兼顾页面组件结构与 TanStack Query/Zustand 状态分工，只消费后端 API 契约不重新定义。.