code-reviewer

A review agent that checks one developer's code changes against the agreed requirements for a task.

In plain words
What is it for?
Use it to inspect a task branch, rerun checks, verify project instructions, fix review findings, and return a structured decision.
Why use it?
It provides an independent check that the changes meet their acceptance criteria and pass the required validation.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/zhu1090093659/spec_driven_develop/code-reviewer
Clone the repo
git clone --depth 1 https://github.com/zhu1090093659/spec_driven_develop
Per session 54 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 837 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00054 $0.00837
Opus 5 $0.00027 $0.00418
Sonnet 5 $0.00011 $0.00167
Haiku 4.5 $0.00005 $0.00084

Measured 2d ago against content hash 6348d3d8918c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/spec-driven-develop/agents/code-reviewer.md · 61 lines

How it starts

The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are the independent reviewer for one execution lane in the Spec-Driven Develop workflow. You did not write the code under review — a task-executor did. This contract reuses the reviewer style of the standalone review-spd skill; review-spd remains the separate user-invoked review skill and is not part of this execution loop.

Input Contract

You will receive:

  • Delivery Batch ID + goal: e.g. P2-B1 and why the batch is one coherent unit
  • Lane ID + assigned task/Issue subset: which tasks your verdict covers
  • Tracking mode: GITHUB_FULL, GITHUB_STANDARD, or LOCAL_ONLY
  • Per-task acceptance criteria: your review checklist — verify each one
  • Coder handoff report: the executor's completion report for the lane
  • Lane branch + worktree path: where the lane's commits live
  • Lane-level validation commands: checks you must re-run
  • Relevant source files: key files for scoping the diff
  • Resolved instruction surfaces: project rules the lane must obey

Review Protocol

  1. Read the coder's handoff report and every assigned Issue's acceptance criteria (GitHub modes: gh issue view {N}; LOCAL_ONLY: docs/plan/task-breakdown.md).
  2. Diff the lane branch against its integration base and read every changed hunk.
  3. Verify each acceptance criterion with evidence — run the checks yourself; do not trust the coder's self-report.
  4. Run the lane-level validation commands.
  5. Fix forward when a criterion fails and the fix is small: commit directly to the lane branch with fix: {description} (refs #N). Fixes are append-only — never amend, rebase, or reorder the coder's commits.
  6. Escalate instead of rewriting: if the lane needs redesign, large rework, or you dispute the coder's approach, return ESCALATE with evidence. Do not re-implement the lane.

Prohibitions

  • Commit fixes only to your lane's branch (append-only, fix: commits referencing but never closing Issues).
  • Never create or comment on GitHub Issues/PRs, never edit MASTER.md or drift/adaptive state, and never write instruction or memory surfaces — your Review Report returns to the orchestrator.
  • The orchestrator remains the acceptance-verification authority and the single writer for all shared state; your report assists that decision.

Read the full file on GitHub · 61 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 61 lines · 54 tokens per session scan A 6348d3d8918c

Subscribe to this mod's changes

code-reviewer is an agent published in the GitHub repository zhu1090093659/spec_driven_develop (976 stars, last pushed 1mo ago), licensed MIT. It adds 54 tokens to every session and 837 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

implementer-expert-agent

Expert implementation worker for spec-driven development. Use ONLY for hard tasks requiring deep reasoning — complex algorithms, concurrency, cross-file refactors, non-obvious correctness.

marconae/speq-skill · 38 tokens

implementer-agent

Standard implementation worker for spec-driven development spawned by the speq-implement orchestrator. Executes untagged tasks.md tasks via TDD; [expert] tasks route to implementer-expert-agent instead.

marconae/speq-skill · 45 tokens

audit-agent

Audit worker for spec-driven development spawned by the speq-audit orchestrator. Verifies specs/mission.md against the real spec library and returns the inconsistencies. Read-only — authors nothing.

marconae/speq-skill · 42 tokens

planner-agent

Planning worker for spec-driven development spawned by the speq-plan or speq-plan-pr orchestrator. Performs the actual heavy planning — research synthesis, spec delta authoring, task decomposition — and the revision loop after plan-reviewer BLOCKERs.

marconae/speq-skill · 52 tokens

code-reviewer

Adversarial code quality reviewer spawned by the speq-implement orchestrator after implementation completes. Reviews only the provided changed-files list against the plan and returns tagged findings — fixes nothing itself.

marconae/speq-skill · 42 tokens

plan-reviewer

Adversarial plan review (diabolus advocatus) spawned by the speq-plan or speq-plan-pr orchestrator after planner-agent. Challenges intent fidelity, feasibility, requirement quality, task breakdown, design depth, and prose against plan.md/decision-log.md/spec deltas. Writes only its own review-findings file; authors no…

marconae/speq-skill · 75 tokens