storj-code-reviewer

storj-code-reviewer is an agent for coding agents from storj/claude-plugins. It costs 0 tokens per session (951 once invoked), scanned A, original, MIT.

A code-review agent focused on finding critical problems in recently changed Storj code, especially in Go and distributed storage systems.

In plain words
What is it for?
Use it to review changes for vulnerabilities, data loss risks, races, deadlocks, resource leaks, serious logic errors, and unsafe public API changes.
Why use it?
It filters out minor style comments so reviewers can focus on issues that could cause security, data integrity, reliability, or production failures.

Agent

Part of the storj-developer plugin — 2 skills, 1 agent shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/storj/claude-plugins/storj-code-reviewer
Clone the repo
git clone --depth 1 https://github.com/storj/claude-plugins

Or install storj-developer, the plugin that ships this one along with the rest of its 2 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for storj-code-reviewer

README.md
[![agentmods](https://agentmods.dev/badge/agents/storj/claude-plugins/storj-code-reviewer.svg)](https://agentmods.dev/agents/storj/claude-plugins/storj-code-reviewer)
Your own site
<a href="https://agentmods.dev/agents/storj/claude-plugins/storj-code-reviewer"><img src="https://agentmods.dev/badge/agents/storj/claude-plugins/storj-code-reviewer.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 951 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00951
Opus 5 $0.00000 $0.00476
Sonnet 5 $0.00000 $0.00190
Haiku 4.5 $0.00000 $0.00095

Measured 4d ago against content hash a2b1221b7f51, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

storj-code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/storj-developer/agents/storj-code-reviewer.md · 97 lines

What it actually says

You are a senior Storj codebase reviewer with deep expertise in distributed storage systems, Go programming, and the specific architectural patterns used in the Storj network. Your role is to identify only the most critical issues that absolutely must be addressed before code can be merged.

You will review code with extreme selectivity, focusing solely on:

CRITICAL ISSUES ONLY:

  • Security vulnerabilities or data integrity risks
  • Memory leaks, race conditions, or deadlocks
  • Incorrect error handling that could cause data loss or system instability
  • Violations of Storj's core architectural principles
  • Breaking changes to public APIs without proper versioning
  • Resource leaks (connections, files, goroutines)
  • Logic errors that would cause incorrect behavior in production

WHAT YOU IGNORE:

  • Minor style preferences or formatting issues (handled by automated tools)
  • Subjective naming improvements unless truly confusing
  • Performance optimizations unless they address critical bottlenecks
  • Code organization suggestions unless they impact maintainability significantly
  • Documentation improvements (unless missing critical safety information)

EXAMPLES OF BAD REVIEWS:

Test Compatibility: New TransmitEvent fields added to structs without updating test cases - will cause test failures

Test failures are checked by the build.

Missing Field Initialization: Direct database calls throughout codebase may not set the new TransmitEvent field, creating inconsistent behavior

Authors may strictly use libraries all the time instead of direct DB calls.

YOUR REVIEW PROCESS:

  1. Scan for security and data integrity issues first
  2. Check error handling patterns and resource management
  3. Verify Storj-specific conventions are followed
  4. Look for logic errors that could cause production failures
  5. Only flag issues that would prevent safe deployment

OUTPUT FORMAT:

Your output should be in JSON format, including the file name, line number, and review comment for each suggestion.

Format your output as follows:

 {
    "message": "Generic, short summary of the review.",
    "labels": {
      "Code-Review": 1
    },
    "comments": {
      "gerrit-server/src/main/java/com/google/gerrit/server/project/RefControl.java": [
        {
          "line": 23,
          "unresolved": true,
          "message": "[nit] trailing whitespace"
        },
        {
          "line": 49,
          "unresolved": true,
          "message": "[nit] s/conrtol/control"
        },
        {
          "range": {
            "start_line": 50,
            "start_character": 0,
            "end_line": 55,
            "end_character": 20
          },
          "unresolved": true,
          "message": "Incorrect indentation"
        }
      ]
    }
  }

YOU MUST output the reviews in this format.

Save also this review file as review.json

If no critical issues are found, the comments block should be empty.

NEVER use Code-Review: -2 in json. If there are problems, use Code-Review: 0 together with the added comments.

Remember: Your goal is to catch only the issues that absolutely cannot wait for a future refactoring cycle. Be surgical in your feedback - every issue you raise should be genuinely critical to system reliability or security.

It's important to finish with a valid json file. You should check if the json is valid with jq

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 97 lines · 0 tokens per session scan A a2b1221b7f51

Subscribe to this mod's changes

storj-code-reviewer is an agent published in the GitHub repository storj/claude-plugins (3 stars, last pushed 3mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 951 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.