review

review is a command for Claude Code from dhslegen/digital-delivery-team. It costs 27 tokens per session (1,634 once invoked), scanned B, original, MIT.

A command that reviews the changes in the current Git branch, a line of development in a code repository.

In plain words
What is it for?
Use it to compare a branch with a base branch, check related project documents, and write a review report.
Why use it?
It organizes findings into blockers, warnings, and suggestions, helping teams spot unresolved problems before merging changes.

Command for Claude Code

Written for Claude Code: argument-hint in frontmatter. Also seen: names the AskUserQuestion tool; positional $N argument.

Part of the digital-delivery-team plugin — 13 skills, 21 commands, 9 agents, 8 hooks shipped together

Good fit Use it to compare a branch with a base branch, check related project documents, and write a review report.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/dhslegen/digital-delivery-team/review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/dhslegen/digital-delivery-team

Made for: Claude Code.

Or install digital-delivery-team, the plugin that ships this one along with the rest of its 13 skills, 21 commands, 9 agents, 8 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for review

README.md
[![agentmods](https://agentmods.dev/badge/commands/dhslegen/digital-delivery-team/review.svg)](https://agentmods.dev/commands/dhslegen/digital-delivery-team/review)
Your own site
<a href="https://agentmods.dev/commands/dhslegen/digital-delivery-team/review"><img src="https://agentmods.dev/badge/commands/dhslegen/digital-delivery-team/review.svg" alt="Measured on agentmods" height="20"></a>
Per session 27 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,634 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00027 $0.01634
Opus 5 $0.00014 $0.00817
Sonnet 5 $0.00005 $0.00327
Haiku 4.5 $0.00003 $0.00163

Measured 8d ago against content hash e10e3b937bd8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade B, and why

review scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

[ -f "$DDT_PLUGIN_ROOT/bin/aggregate.mjs" ] || DDT_PLUGIN_ROOT=$(cat "${HOME}/.claude/delivery-metrics/.ddt-plugin-root" 2>/dev/null)
commands/review.md · 155 lines

How it starts

The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/review

输入:$ARGUMENTS(对比基线分支,默认 main


Phase 1 — 校验

[ -f "$DDT_PLUGIN_ROOT/bin/aggregate.mjs" ] || DDT_PLUGIN_ROOT=$(cat "${HOME}/.claude/delivery-metrics/.ddt-plugin-root" 2>/dev/null)
[ -f "$DDT_PLUGIN_ROOT/bin/aggregate.mjs" ] || DDT_PLUGIN_ROOT="${HOME}/.claude/plugins/marketplaces/digital-delivery-team"
[ -f "$DDT_PLUGIN_ROOT/bin/aggregate.mjs" ] || { echo "❌ DDT plugin root 未解析。可能原因:(1) 插件未安装;(2) shell 中 DDT_PLUGIN_ROOT 指向无效路径,请 unset DDT_PLUGIN_ROOT 后重启会话;(3) 运行 /digital-delivery-team:doctor 自检"; exit 1; }
export DDT_PLUGIN_ROOT

if printf '%s' "$ARGUMENTS" | grep -q -- '--dry-run'; then
  node "$DDT_PLUGIN_ROOT/bin/print-dry-run.mjs" --phase review --inputs "git diff <base>..HEAD,docs/prd.md,docs/arch.md" --outputs "docs/review-report.md" --next "/fix(如有 blocker) | /verify"
  exit 0
fi
node "$DDT_PLUGIN_ROOT/bin/emit-phase.mjs" --phase review --action start
git rev-parse --is-inside-work-tree 2>/dev/null || { echo "❌ 非 git 仓库"; exit 1; }
BASE=${ARGUMENTS:-main}
git diff "$BASE"...HEAD --name-only | grep -q . || { echo "⚠️ 与 $BASE 无 diff,无需 review"; exit 0; }

# 检查上游阶段是否留下未解决 blockers
if [ -f docs/blockers.md ]; then
  unresolved=$(awk '/^- \*\*resolved_at\*\*: null$/' docs/blockers.md | wc -l)
  if [ "$unresolved" -gt 0 ]; then
    echo "❌ docs/blockers.md 中存在 $unresolved 条未解决阻塞,请先处理。"
    echo "   未解决项来自:"
    awk '/^## /{h=$0} /^- \*\*resolved_at\*\*: null$/{print "   - "h}' docs/blockers.md
    exit 2
  fi
fi

Phase 2 — 派发 review-agent

使用 Task 工具派发 review-agent,传入:

  • git diff $BASE...HEAD(完整差异)
  • docs/arch.md(若存在)
  • docs/api-contract.yaml(若存在)
  • $DDT_PLUGIN_ROOT/templates/review-checklist.template.md(评审清单,插件根——v0.9.3 D19)
  • $ARGUMENTS(对比基线)

review-agent 按三级分类产出 docs/review-report.md

级别 含义 后续行动
阻塞 安全漏洞、数据丢失风险、逻辑致命错误 必须修复后重跑 /review
警告 代码质量问题、缺失测试、性能隐患 建议修复
建议 可读性、命名、注释改进 可选

Phase 3 — 汇总输出

完成后向用户报告:

/review 完成
基线: <BASE> → HEAD

阻塞:  <n> 条
警告:  <n> 条
建议:  <n> 条

报告: docs/review-report.md

Read the full file on GitHub · 155 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 155 lines · 27 tokens per session scan B e10e3b937bd8

Subscribe to this mod's changes

review is a command published in the GitHub repository dhslegen/digital-delivery-team (1 stars, last pushed 3mo ago), licensed MIT. It adds 27 tokens to every session and 1,634 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.