python-reviewer

A code-review agent for Python 3.14+ applications, especially FastAPI services. FastAPI is a Python framework for building web APIs.

In plain words
What is it for?
Use it to review architecture, type hints, asynchronous code, Pydantic models, SQLAlchemy sessions, tests, input handling, and secrets.
Why use it?
It targets issues that can cause blocked asynchronous work, memory problems, typing errors, database-session mistakes, or security bugs.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/thebeardedbearsas/claude-craft/python-reviewer
Clone the repo
git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craft

Made for: Claude Code.

Per session 31 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 4,607 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00031 $0.04607
Opus 5 $0.00015 $0.02303
Sonnet 5 $0.00006 $0.00921
Haiku 4.5 $0.00003 $0.00461

Measured 2d ago against content hash 2324ce714b50, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

python-reviewer scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Exemples : time.sleep(), open(), requests.get(),

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

subprocess.run(), os.read()
.claude/agents/python-reviewer.md · 627 lines

How it starts

The opening of the file, as written. The whole thing — 627 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent Auditeur Python 3.14+ / FastAPI

Identite

Je suis un specialiste de la revue de code Python 3.14+ avec un focus sur les applications FastAPI. Mon approche cible les erreurs specifiques a Python : les appels bloquants dans du code async, la couverture de type hints avec Pydantic v2, la gestion des sessions SQLAlchemy, et les anti-patterns Python classiques (arguments mutables par defaut, etat global). Je ne fais pas un audit generique -- je detecte ce qui provoque des deadlocks, des fuites de memoire ou des bugs subtils en production.

Systeme de notation (100 points)

Categorie Points Focus
Architecture et Typing 30 Clean Architecture, type hints, Pydantic models
Async Correctness 20 Blocking calls, await manquants, gestion des tasks
Tests 25 pytest, couverture, fixtures, mocks
Securite 25 Injection, validation, secrets, deserialisation

1. Architecture et Typing (30 points)

Arbre de decision : Organisation du code

Le projet suit-il une architecture en couches ?
  NON --> MAJEUR : tout dans un seul fichier ou structure plate
  OUI --> Le Domain depend-il de frameworks (FastAPI, SQLAlchemy) ?
    OUI --> CRITIQUE : Domain couple a l'infrastructure
    NON --> Les interfaces (Protocol/ABC) sont-elles definies dans le Domain ?
      NON --> MAJEUR : pas d'inversion de dependance
      OUI --> OK

Le fichier contient-il des imports circulaires ?
  OUI --> CRITIQUE : restructurer les modules

Type hints : arbre de decision

La fonction est-elle publique ?
  OUI --> Tous les parametres et le retour sont-ils types ?
    NON --> MAJEUR : type hints manquants
    OUI --> Utilise-t-elle des types modernes (Python 3.10+) ?
      list[str] au lieu de List[str] ? --> BON
      str | None au lieu de Optional[str] ? --> BON
      Utilise-t-elle Any ? --> Justifie ?
        NON --> MAJEUR : Any injustifie
        OUI --> MINEUR : documenter pourquoi

Pydantic v2 patterns

Read the full file on GitHub · 627 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 627 lines · 31 tokens per session scan A 2324ce714b50

Subscribe to this mod's changes

python-reviewer is an agent published in the GitHub repository TheBeardedBearSAS/claude-craft (105 stars, last pushed 9d ago), licensed MIT. It adds 31 tokens to every session and 4,607 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

django-fastapi-expert

Django ORM, Django REST Framework, FastAPI async patterns, and Pydantic v2 specialist. Use when building Python web applications, designing APIs with Django or FastAPI, or working with Python web frameworks. Trigger phrases: Django, FastAPI, DRF, Django REST Framework, Pydantic, ORM, queryset, viewset, serializer…

travisjneuman/.claude · 86 tokens

api-scaffolding-django-pro

Master Django 5.x with async views, DRF, Celery, and Django Channels. Build scalable web applications with proper architecture, testing, and deployment. Use PROACTIVELY for Django development, ORM optimization, or complex Django patterns.

wshobson/agents · 57 tokens

sprint-master

Agile delivery partner for sprint planning, retrospectives, velocity analysis, and user stories. Use when planning a sprint, running a retro, estimating capacity, or breaking epics into stories. Uses the capacity calculator to size commitments.

mohitagw15856/pm-claude-skills · 50 tokens

python-expert

Write idiomatic Python code with advanced features like decorators, generators, and async/await. Specializes in FastMCP 2.x async servers, real API integrations, plain text formatting for LLM consumption, and comprehensive async testing with pytest-asyncio. Use PROACTIVELY for Python refactoring, optimization, or…

utensils/mcp-nixos · 73 tokens

fenic-feature-developer

Use this agent when the user requests help implementing new features, operations, expressions, or functionality for the Fenic DataFrame library. This includes:\n\n- Adding new DataFrame operations (e.g., 'add a pivot operation to DataFrame')\n- Creating new logical expressions (e.g., 'implement a regexextract…

typedef-ai/fenic · 612 tokens

gsd-plan-checker

Verifies plans will achieve phase goal before execution. Goal-backward analysis of plan quality. Spawned by /gsd:plan-phase orchestrator.

travisjneuman/.claude · 36 tokens