code-reviewer

code-reviewer is an agent for coding agents from melodic-software/claude-code-plugins. It costs 58 tokens per session (1,637 once invoked), scanned A, original, MIT.

A code-review assistant that checks changed code for quality, project conventions, design choices, and unfinished work.

In plain words
What is it for?
Use it after modifying source files, before creating a pull request, or when reviewing code quality.
Why use it?
It provides a structured checkpoint between code that works and code that is ready to share or release.

Agent

Installs and runs on its own, but its text points at files inside its plugin — anything it tells you to read at a ${CLAUDE_PLUGIN_ROOT} path is only there once the plugin is installed. Installing the plugin gets both.

Part of the review plugin — 3 skills, 6 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/melodic-software/claude-code-plugins/code-reviewer
Clone the repo
git clone --depth 1 https://github.com/melodic-software/claude-code-plugins

Or install review, the plugin that ships this one along with the rest of its 3 skills, 6 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/agents/melodic-software/claude-code-plugins/code-reviewer.svg)](https://agentmods.dev/agents/melodic-software/claude-code-plugins/code-reviewer)
Your own site
<a href="https://agentmods.dev/agents/melodic-software/claude-code-plugins/code-reviewer"><img src="https://agentmods.dev/badge/agents/melodic-software/claude-code-plugins/code-reviewer.svg" alt="Measured on agentmods" height="20"></a>
Per session 58 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,637 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00058 $0.01637
Opus 5 $0.00029 $0.00818
Sonnet 5 $0.00012 $0.00327
Haiku 4.5 $0.00006 $0.00164

Measured yesterday against content hash 5f47d27191fe, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/review/agents/code-reviewer.md · 72 lines

How it starts

The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a senior code reviewer. Your job is to catch issues that automated tooling misses — design judgment, pattern misuse, convention drift, and loose ends. Do not flag issues the project's linters, formatters, or compilers already catch.

Before reviewing

  1. Read the project's own conventions first. Check for a CLAUDE.md, project rules, a REVIEW.md or review-criteria docs, and contributing guides. The project's documented conventions override this baseline wherever they conflict. If REVIEW.md contains code-span citations shaped like <relative-path>.md#<heading>, enumerate every citation of that shape and resolve each one, not just the first (deduplicate repeated paths): split each at the last #, Read the <relative-path>.md file (it may live outside this repository, mounted via --add-dir, or be present locally), then locate the <heading> section within it for the full criterion behind that line before finalizing any finding that overlaps its topic. If a cited .md file doesn't exist, note the unresolved citation in your report and continue — don't drop the review or treat it as a hard failure.

  2. Identify the change set — run:

    PR_BASE="$(gh pr list --head "$(git branch --show-current)" --json baseRefName -q '.[0].baseRefName' 2>/dev/null)"
    BASE=""; [ -n "$PR_BASE" ] && git fetch origin "$PR_BASE" 2>/dev/null && BASE="$(git rev-parse FETCH_HEAD 2>/dev/null)"   # capture the base rev now — a later fallback fetch overwrites FETCH_HEAD; shallow/single-branch clones may lack origin/$PR_BASE
    git diff "$(git merge-base "${BASE:-origin/${PR_BASE:-HEAD}}" HEAD 2>/dev/null || { D="$(git ls-remote --symref --end-of-options origin HEAD 2>/dev/null | awk '/^ref:/{sub(/refs\/heads\//,"",$2); print $2; exit}')"; [ -n "$D" ] && git fetch origin "$D" 2>/dev/null && git merge-base FETCH_HEAD HEAD 2>/dev/null; } || git merge-base origin/main HEAD 2>/dev/null || echo HEAD)"
    git ls-files --others --exclude-standard
    

    Read any untracked files the second command lists — they never appear in a diff.

  3. Detect affected ecosystems from changed paths and read the project's per-ecosystem convention docs when they exist. Read the convention files each time — do not rely on remembered rules.

Read the full file on GitHub · 72 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 72 lines · 58 tokens per session scan A 5f47d27191fe

Subscribe to this mod's changes

code-reviewer is an agent published in the GitHub repository melodic-software/claude-code-plugins (14 stars, last pushed yesterday), licensed MIT. It adds 58 tokens to every session and 1,637 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other agents, from other repositories

parallel-integrate

Integrate parallel workflow branches. Use after all workers complete to merge branches, resolve conflicts, finalize integration. Triggers: integrate, merge workers, combine branches, finish parallel.

jimmc414/claude-code-plugin-marketplace · 39 tokens

code-reviewer

Use this agent to review changed files for bugs, security issues, performance problems, and code quality. Use when reviewing PRs, checking code before committing, or auditing code quality. Examples: User: "Review the changes I made" Assistant: "I'll launch the code-reviewer agent to analyze your changes." User: "Is…

Sagargupta16/claude-skills · 96 tokens

context-advisor

Use this agent to assess context window health and recommend compaction or session management strategies. Examples: User: "My session feels slow and repetitive" Assistant: "I'll use the context-advisor agent to assess context health." User: "Should I compact or start fresh?" Assistant: "Let me launch the…

Sagargupta16/claude-skills · 76 tokens

repo-auditor

Use this agent to audit a repository for hygiene issues -- missing README, LICENSE, .gitignore, .env.example, stale branches, and configuration problems. Examples: User: "Audit this repo for issues" Assistant: "I'll launch the repo-auditor agent to check repository health." User: "Is this repo properly set up?"…

Sagargupta16/claude-skills · 94 tokens

dockerfile-optimizer

Use this agent to analyze and optimize Dockerfiles for smaller images, faster builds, and better security. Checks layer caching, multi-stage builds, and security hardening. Examples: User: "Optimize my Docker image, it's 2GB" Assistant: "I'll launch the dockerfile-optimizer agent to analyze and slim down the image."…

Sagargupta16/claude-skills · 103 tokens

rust-coding-author

Author or refactor Rust functions in the agentenv-core / agentenv-cli crates with TDD, idiomatic error handling, and the project's source-driven pipeline conventions. Use when the user asks to add, rewrite, or extend a function in crates/agentenv-core/ or crates/agentenv-cli/ — especially new readers, writers…

eduardoarantes/agentenv · 87 tokens