Borrowing it
Nothing to install: this file belongs to rcdelacruz/claude-code-agents. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/rcdelacruz/claude-code-agents/main/.claude/commands/workflow-review-code.mdgit clone --depth 1 https://github.com/rcdelacruz/claude-code-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/rcdelacruz/claude-code-agents/workflow-review-code)<a href="https://agentmods.dev/commands/rcdelacruz/claude-code-agents/workflow-review-code"><img src="https://agentmods.dev/badge/commands/rcdelacruz/claude-code-agents/workflow-review-code/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/rcdelacruz/claude-code-agents/workflow-review-code"><img src="https://agentmods.dev/badge/commands/rcdelacruz/claude-code-agents/workflow-review-code.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00009 | $0.01965 |
| Opus 5.5 | $0.00004 | $0.00786 |
| Sonnet 5.5 | $0.00002 | $0.00393 |
| Haiku 4.5 | $0.00001 | $0.00197 |
Grade A, and why
workflow-review-code scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 324 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are in CODE REVIEW MODE.
Use code-reviewer agent to perform thorough code quality analysis.
Review Process
1. Initial Assessment (5 mins)
- Review overall code structure
- Check file organization
- Assess naming conventions
- Verify TypeScript usage
2. Architecture Review (10 mins)
Component Architecture
- Server vs Client Components used correctly
- Props properly typed with interfaces
- Components are focused and single-purpose
- Proper separation of concerns
Data Flow
- Data fetching in Server Components
- Mutations via Server Actions or tRPC
- State management appropriate for use case
- No prop drilling (use Context or state management)
Code Organization
- Files in correct directories
- Consistent naming (camelCase, PascalCase, kebab-case)
- Imports organized (React, libraries, local)
- No circular dependencies
3. TypeScript Review (10 mins)
Type Safety
// ❌ BAD: Any types
function processData(data: any) { }
// ✅ GOOD: Proper types
function processData(data: User) { }
// ❌ BAD: Type assertions
const user = data as User
// ✅ GOOD: Type guards
if (isUser(data)) {
// data is User
}
Type Coverage
- No
anytypes (except unavoidable cases) - Functions have return type annotations
- Interfaces defined for complex objects
- Generics used where appropriate
- Type guards for runtime checks
4. React Best Practices (15 mins)
Hooks Usage
// ❌ BAD: Conditional hooks
if (condition) {
useEffect(() => { })
}
// ✅ GOOD: Hooks at top level
useEffect(() => {
if (condition) { }
}, [condition])
// ❌ BAD: Missing dependencies
useEffect(() => {
fetchData(userId)
}, []) // userId missing!
// ✅ GOOD: All dependencies
useEffect(() => {
fetchData(userId)
}, [userId])
Component Patterns
- Hooks only in components/custom hooks
- Proper dependency arrays in useEffect
- Memoization used appropriately (useMemo, useCallback)
- No inline function definitions in JSX (if used in deps)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 324 lines · 9 tokens per session scan A dc7885842577
workflow-review-code is a command published in the GitHub repository rcdelacruz/claude-code-agents (2 stars, last pushed 1y ago), licensed MIT. It adds 9 tokens to every session and 1,965 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
workflow-review-code compared with commands from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| workflow-review-codercdelacruz/claude-code-agents | Command | 2 | 1y ago | MIT | A | 9 | Claude Code |
| diff-reviewcoco-research/coco | Command | 785 | yesterday | Apache-2.0 | A | 11 | Claude Code |
| review-branchdamusix/atomic-claude | Command | 115 | 5d ago | MIT | A | 35 | Claude Code |
| refactorRchGrav/claudebox | Command | 1.2k | 1mo ago | MIT | A | 9 | Claude Code |
| spec-trace-requirementsrjmurillo/ai-agents | Command | 49 | yesterday | MIT | A | 0 | GitHub Copilot |
| merge-conflict-analysisrjmurillo/ai-agents | Command | 49 | yesterday | MIT | A | 0 | GitHub Copilot |
| initazrtydxb/procoder | Command | 211 | 11d ago | Apache-2.0 | A | 16 | Claude Code |