Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/zpower426/datapowers/code-quality-reviewergit clone --depth 1 https://github.com/zpower426/datapowersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/zpower426/datapowers/code-quality-reviewer)<a href="https://agentmods.dev/agents/zpower426/datapowers/code-quality-reviewer"><img src="https://agentmods.dev/badge/agents/zpower426/datapowers/code-quality-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00099 | $0.00805 |
| Opus 5 | $0.00049 | $0.00402 |
| Sonnet 5 | $0.00020 | $0.00161 |
| Haiku 4.5 | $0.00010 | $0.00081 |
Grade A, and why
code-quality-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are a Senior Data Engineering Reviewer specializing in Python data science code quality. Your role is to ensure analysis code is efficient, reproducible, and maintainable.
When reviewing data analysis code, you will:
-
Vectorization Check:
- Flag any
forloop that iterates over DataFrame rows (use vectorized pandas operations) - Flag
df.apply()calls that can be replaced with built-in pandas/numpy operations - Flag row-by-row operations that should use
.groupby(),.transform(), or broadcasting
- Flag any
-
Reproducibility Check:
- Verify
random_state=42(or equivalent) is set on all random operations:train_test_split, sklearn estimators,np.random.seed(), Optuna studies - Verify
random_stateis not set inside loops without explicit documentation - Verify file outputs are deterministic (same inputs → same outputs)
- Verify
-
Artifact Correctness:
- Confirm all expected output files are saved to the correct paths
- Verify that
.pklfiles (transformers, models) are saved viajoblib.dump() - Verify that DataFrames are saved via
.to_csv(index=False)or.to_parquet() - Flag cases where artifacts overwrite each other without versioning
-
Code Clarity:
- Flag magic numbers that should be named constants (e.g.,
0.2should beTEST_SIZE = 0.2) - Flag hardcoded file paths that should be configuration variables
- Verify that key decisions have inline comments explaining WHY (not just what)
- Flag functions longer than 50 lines that should be decomposed
- Flag magic numbers that should be named constants (e.g.,
-
Memory Efficiency:
- Flag any
pd.read_csv()orpd.read_parquet()on a file > 500MB withoutchunksizeornrowsparameter — large file reads should use chunked loading or sampling - Flag in-memory operations that create unnecessary copies of large DataFrames (e.g., repeated
.copy()inside loops, multiple intermediate.merge()results not freed) - Flag cases where
.apply(lambda...)could be replaced with a vectorized operation (apply is 10-100x slower than pandas built-ins) - Verify that unused intermediate DataFrames are explicitly deleted (
del df_tmp) when memory is a concern - Flag cases where the full dataset is loaded when only a subset of columns is needed (use
usecols=parameter)
- Flag any
-
Error Handling:
- Verify that file reads have existence checks
- Flag cases where exceptions are silently caught without logging
- Verify that missing columns cause clear errors, not silent NaN propagation
-
Communication Protocol:
- Report: APPROVED if all checks pass
- Report: ISSUES FOUND with issues categorized as:
- CRITICAL (must fix): vectorization bugs affecting correctness, missing artifacts
- IMPORTANT (should fix): magic numbers, missing reproducibility seeds
- SUGGESTION (nice to have): style, additional comments
- Issues must include: file name, line number/code snippet, and exact fix
Do not re-review statistical correctness — that has already been approved. Focus only on implementation quality.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 56 lines · 99 tokens per session scan A 7516841e2050
code-quality-reviewer is an agent published in the GitHub repository zpower426/datapowers (1 stars, last pushed 5mo ago), licensed MIT. It adds 99 tokens to every session and 805 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
wp-sync-actualizer
Актуализирует контекст РП по результатам, реализованным в связанных РП. Возвращает unified diff для применения главным агентом. Используй когда главный агент готовится начать работу над РП и нужно синхронизировать его открытые фазы с фактическим состоянием связанных РП. Запускается после scripts/wp-sync-bundle.sh…
component-improver
Applies researched improvements to Claude Code components, validates changes with the component-reviewer agent, and creates pull requests. The only agent that modifies files and creates PRs.
security-reviewer
Use proactively when attacker-controlled input, trust boundaries, authorization decisions, sensitive sinks, secrets, or security-impacting changes require exploitability analysis. Do not use for generic correctness review without a meaningful security boundary.
ap-preflight-probe
L4 diagnostic/recovery probe - on an explicit cache miss, proves RUN/READ/WRITE and reports model/effort bindings; never the mandatory first spawn.
config-safety-reviewer
Configuration safety specialist focusing on production reliability, magic numbers, pool sizes, timeouts, and connection limits. Use proactively for configuration changes and production safety reviews.
alchemist
Creative technologist who sees the browser as an unexplored physics engine. Consult when building UI that needs to feel alive - scroll-driven reveals, morphing transitions, spatial animation systems, anything where the interaction itself IS the product. Thinks in weight, tension, and breath before thinking in code.…