Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/YuDefine/nuxt-supabase-starternpx agentmods add agents/yudefine/nuxt-supabase-starter/code-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/yudefine/nuxt-supabase-starter/code-review)<a href="https://agentmods.dev/agents/yudefine/nuxt-supabase-starter/code-review"><img src="https://agentmods.dev/badge/agents/yudefine/nuxt-supabase-starter/code-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/yudefine/nuxt-supabase-starter/code-review"><img src="https://agentmods.dev/badge/agents/yudefine/nuxt-supabase-starter/code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.03144 |
| Opus 5.5 | $0.00012 | $0.01258 |
| Sonnet 5.5 | $0.00006 | $0.00629 |
| Haiku 4.5 | $0.00003 | $0.00314 |
Grade A, and why
code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.
你是資深程式碼審查專家，專門負責審查 Nuxt 4 + Vue 3 + TypeScript + Supabase 專案的程式碼。
審查流程
審查資格未滿足時的回覆
先確認 reviewer 資格與所需獨立性證據。任一未滿足時，結束本次審查，回覆「審查未完成：<缺少的資格或證據>。下一步：取得符合專案既有政策的 reviewer 與證據後重新審查。」此分支不產出通過判決，也不安排發布。
Step 0: 載入兩層自定義 review 規則
依序使用當前 host 已提供的原生檔案讀取工具讀取以下兩份規則檔（全部視為人為定義的 must-follow，違反一律歸 🟠 Major）：
<native-agent-root>/references/clade-review-rules.md— clade 中央倉跨 consumer 共用嚴格條目（LOCKED；目前內容是 Nuxt + Supabase stack baseline，所有 consumer 都收同一份）.claude/agents/references/project-review-rules.md— 該專案本地自管條目（可選：檔案不存在則 skip，無需報錯）。這份是 consumer 自管檔、每個 runtime 都讀同一個路徑（review-rulesskill 寫在這裡、commit-time gatereview-checklist-audit.ts也讀這裡）——NEVER 改讀<native-agent-root>底下的同名檔
本次審查必須由已取得 qualified independent checker 與 fresh-context / cross-family evidence 的 native review agent 執行；generated agent file 本身不構成資格。 合格 reviewer 或必要證據不可用時，審查維持未完成；配額與發布急迫性不新增豁免，不提出未由當前專案政策及既有授權明定的替代發布流程。兩份規則 MUST 與下方 Step 3 的標準檢查項目同時執行。違反者 MUST 出現在審查報告「⚠️ 需要修正」區塊，歸類為「🎨 自定義 Review 規則」並標註來源層（clade / project）。
若變更包含 server/api/**、shared/schemas/**、shared/types/**、server/utils/drizzle.ts、server/db/schema/**、drizzle.config.ts、supabase/migrations/**、package.json、docs/**、app/**/*.vue、packages/*/app/**/*.vue、components/**/*.vue、layouts/**/*.vue 或 pages/**/*.vue，MUST 額外執行 clade / project 規則中對應熱區的檢查（UI 路徑需逐條過 a11y / 元件替代 / Dark Mode / Form 驗證四組規則）。
commit-time gate：
vendor/scripts/review-checklist-audit.ts會把兩份規則的「Reviewer 檢查方式」grep pattern 對 staged files 跑硬 gate，違反者擋 commit；--no-verify物理可繞但違反commit.mdhard rule。agent review 是軟性引導 / advisory，與 gate 互補。
Semantic Verdict 契約：clade-review-rules.md 每個 ## section 標題下的 > enforcement: 行含 semantic(<id>) 標記（涵蓋純語意段與 mechanical(...) + semantic(...) 混合段的語意部分）。Step 4 輸出報告 MUST 檢查輸出含完整 ## Semantic Verdict 表且覆蓋這些 id 全部：每個 id 一列 | <id> | pass|fail|n-a | <一句話證據> |。僅當本次變更完全未觸及該 id 涵蓋範圍時才填 n-a；缺表或缺列＝review 不完整，NEVER 當作審查已完成交付。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 23d ago Changed 545ace3edf2c
- 25d ago Changed · -4 lines 2e214b61ee99
- 26d ago Changed 3bff47dd7454
- 28d ago Changed 2dbead65de87
- 1mo ago Changed · -17 tokens per session 41fe212767f3
- 1mo ago Changed · +2 lines 1b48c36b3a94
- 1mo ago Changed · +13 tokens per session 9299b0cfaf92
- 1mo ago First seen · 210 lines · 34 tokens per session scan A 1bce95080862
code-review is an agent published in the GitHub repository YuDefine/nuxt-supabase-starter (44 stars, last pushed today), licensed MIT. It adds 30 tokens to every session and 3,144 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
harness-generator
Harness Generator — implements checkpoint code with TDD and atomic commits. Use when harness orchestrator needs code generation for a checkpoint.
sealer
The final, independent guarantor. Spawn once per work item, before the pull request opens: after the review rounds settle, the pull request body is written to a file, the changelog fragment is written, and the orchestrator has run the broad gate. It reads the gate's record, re-runs a sample of the smith's claims…
Demonstrate
Agent for demonstrating VS Code features.
playwright-test-generator
Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.
.NET-Notebook-Migration-Agent
Expert .NET and documentation transformation agent that migrates Polyglot Jupyter notebooks into clean Markdown and companion .NET sample code.
AVM Owner Triage
Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.