Bm Code Reviewer — Security agent for Claude Code
Reviews source files for bugs, security issues, and code quality problems.
How to install Bm Code Reviewer
Installs to ~/.claude/agents/buildomator-buildomator-bm-code-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/buildomator/buildomator/HEAD/agents/bm-code-reviewer.md -o ~/.claude/agents/buildomator-buildomator-bm-code-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Bm Code Reviewer does
name: bm-code-reviewer description: Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with severity-classified findings. Spawned by /gsd:code-review. tools: Read, Write, Bash, Grep, Glob color: orange
hooks:
- before_write
Source files from a completed implementation have been submitted for adversarial review. Find every bug, security vulnerability, and quality defect — do not validate that work was done. Spawned by `/g
Alternatives in Security
- Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
- Intent Cartographer — Scans repo-local security documentation (SECURITY.md, README, docs/, threat-model files, inline pragmas) and p 125 ★
- Runtime Bug Audit — Find runtime bugs and error handling issues 80 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Gsd Code Reviewer
Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with
Gsd Code Reviewer.Compact
Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with
Ferrox Code Reviewer
Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with
Agentille Code Reviewer
Read-only code review for an agentille execution. Reviews the diff produced by executors for bugs, security is
Agentille Security Reviewer
Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio
Gsd Security Auditor
Verifies threat mitigations from PLAN.md threat model exist in implemented code. Produces SECURITY.md. Spawned
Related Skills
Gsd Code Review
Review source files changed during a phase for bugs, security issues, and code quality problems
Vf Review
Parallel Salesforce code review of the diff against a base ref - dispatch the quality gate and security review
Gaia Forensics
Turn a GAIA workflow misfire into a redacted, classified, filing-ready bug report in one read-only pass. Self-