Review Branch

Review Branch is a command for Cursor from adobe/spacecat-api-service. It costs 13 tokens per session (531 once invoked), scanned A, original, Apache-2.0.

A command for reviewing the current code branch against the remote main branch using the project's documented standards. A branch is a separate line of code changes, and a code review checks whether those changes are safe and complete.

In plain words
What is it for?
Use it to produce a structured review covering critical, major, and minor issues, suggested tests, and security, regression, and routing checks.
Why use it?
It gathers the latest comparison and applies project-specific checks so important bugs, security issues, missing tests, or routing problems are easier to spot.

Command for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/adobe/spacecat-api-service/branch-review
Clone the repo
git clone --depth 1 https://github.com/adobe/spacecat-api-service

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Review Branch

README.md
[![agentmods](https://agentmods.dev/badge/commands/adobe/spacecat-api-service/branch-review.svg)](https://agentmods.dev/commands/adobe/spacecat-api-service/branch-review)
Your own site
<a href="https://agentmods.dev/commands/adobe/spacecat-api-service/branch-review"><img src="https://agentmods.dev/badge/commands/adobe/spacecat-api-service/branch-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 13 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 531 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00013 $0.00531
Opus 5 $0.00006 $0.00266
Sonnet 5 $0.00003 $0.00106
Haiku 4.5 $0.00001 $0.00053

Measured 4d ago against content hash 981d7094ea38, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

Review Branch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/commands/branch-review.md · 63 lines

What it actually says

Review the branch {{branch_name:current}} against {{base_branch:origin/main}}.

Review Process

  1. Get Context: Fetch latest origin/main, then run git diff and log commands to understand the changes
  2. Apply Rules: Review against @.github/copilot-instructions.md and applicable rules in @.cursor/rules/
  3. Critical Checks: Follow severity definitions and core checks from copilot-instructions.md
  4. Output: Provide structured markdown review below

Output Format

# Code Review: [Branch Name]

## Summary
[1-3 sentences describing overall health of the PR]

## Issues

### Critical
[Issues that block merge - bugs, security, missing tests for behavior changes, missing access control]

### Major
[Issues that should be fixed - missing docs, performance concerns]

### Minor
[Optional improvements - only list if no Critical issues exist]

## Suggested Tests
[Describe missing test coverage if applicable]

## Checklist Review

- [ ] **Security & Authorization**: AccessControlUtil instantiated and called (hasAdminAccess/hasAccess)
- [ ] **Bug & Regression**: Null checks, async/await, logic changes match tests
- [ ] **Routing**: Endpoints in BOTH src/index.js and src/routes/index.js
- [ ] **UUID Validation**: All IDs validated with isValidUUIDV4
- [ ] **DTOs & Models**: DTOs used, no raw database models leaked
- [ ] **Tests**: Behavior changes covered, fixtures updated
- [ ] **HTTP Helpers**: Using @adobe/spacecat-shared-http-utils
- [ ] **Shared Utils**: Using @adobe/spacecat-shared-utils instead of custom checks whenever possible
- [ ] **Documentation**: OpenAPI specs if endpoints changed, README, config/default.json updated for new features

## Final Assessment

**Status:** [READY TO MERGE | REQUIRES FIX | BLOCKED]

[Brief explanation and estimated fix time if issues exist]

Important

  • DO NOT post comments to GitHub
  • FOCUS on Critical issues first per copilot-instructions.md
  • CITE specific files and line numbers for issues
  • OUTPUT the structured markdown review above for discussion
  • THEN propose specific code changes to fix Critical and Major issues
  • REFERENCE the review findings when proposing changes
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 63 lines · 13 tokens per session scan A 981d7094ea38

Subscribe to this mod's changes

Review Branch is a command published in the GitHub repository adobe/spacecat-api-service (10 stars, last pushed 5d ago), licensed Apache-2.0. It adds 13 tokens to every session and 531 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.