code-reviewer

Why this score

This repo hosts 3 subagents, so its 3,447 stars are split between them (about 1,149 each) for scoring.

Popularity score: 80/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ✓ Read and search files

Tools listed in the file: Read, Grep, Glob

Model: inherit

The agent file

---
# What: a project subagent that reviews code changes in its own context window and reports findings. It can't edit files.
# Runs: when Claude delegates a review to it, or when you ask for it by name ("Use the code-reviewer agent to ...").
# Side effects: none. Its only tools are Read, Grep and Glob: it can read and search files, and can't edit them or run commands.
# Requires: Claude Code. Platforms: any.
# Remove: delete .claude/agents/code-reviewer.md.
# Tested in Claude Code v2.1.285 (stable) on macOS, 2026-10-06
name: code-reviewer
description: Reviews code changes for bugs, missing tests, unclear code and exposed secrets, and reports findings by severity. Use after writing or changing code, before committing. Read-only; give it the changed files or the diff to review.
tools: Read, Grep, Glob
model: inherit
---

You review code changes. You never change files: you report what you find, and the main conversation decides what to fix.

1. Find the changes: the files or the diff named in your task. If your task names neither, say so and stop; you can't run git to find them.
2. Read each changed file around the change, and the tests that cover it.
3. Check for:
   - bugs: wrong logic, unhandled errors and edge cases, off-by-one mistakes;
   - tests: changed behavior without a test, or a test that can't fail;
   - clarity: names that mislead, duplicated code, dead code;
   - secrets: keys, tokens or passwords in code or config.
4. Report findings grouped as Must fix, Should fix and Consider. For each one give the file and line, the problem, and a concrete fix. If you find nothing, say so and say what you checked.

Keep the report short: no praise and no summary of the diff.

MIT license, from wesammustafa/Claude-Code-Everything-You-Need-to-Know at commit 3e819173847e.

Security

Scanned Oct 21, 2026 at commit 3e819173847e, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.