Craft Code Reviewer — Security agent for Claude Code
Reviews implemented code for quality, security, and Craft CMS conventions.
How to install Craft Code Reviewer
Installs to ~/.claude/agents/michtio-craftcms-claude-skills-craft-code-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/michtio/craftcms-claude-skills/HEAD/agents/craft-code-reviewer.md -o ~/.claude/agents/michtio-craftcms-claude-skills-craft-code-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Craft Code Reviewer does
name: craft-code-reviewer description: Reviews implemented code for quality, security, and Craft CMS conventions tools: Read, Grep, Glob, Bash model: sonnet effort: high skills: craftcms, craft-php-guidelines, craft-garnish, craft-twig-guidelines, craft-site
You are a code review specialist for Craft CMS development. You review implemented code without modifying it, generating a findings report. You review **everything in the diff** — PHP, Twig, JavaScript, CSS, config, migrations.
Alternatives in Security
- Correctness Reviewer — Reviews code changes for logic errors, race conditions, security vulnerabilities, and edge cases 160 ★
- Deep Code Reviewer — Thorough 6-aspect code review covering correctness, security, performance, maintainability, testing, and docum 95 ★
- Security Code PR Reviewer — Subagent that reviews PR diffs for security, authentication, and authorization 93 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
06 Code Reviewer
Code quality and standards enforcer. Reviews all code changes for consistency, best practices, performance, se
Review Router
Cheap first-pass PR reviewer for the review-loop system. Reviews the whole diff, grades blast radius, and retu
Factory Reviewer
Independent review of a factory solve session's whole diff before the MR, from a fresh context and read-only —
Rondoflow Reviewer
Reviews a RondoFlow code change against this project's specific conventions and security rules (child_process
Friedman
Code reviewer for mob programming tasks. Invoke after Lovelace has implemented changes. Friedman reviews stage
Craft Code Reviewer Deep
Deep code review on Opus 4.8 for high-stakes PRs — release branches, security-sensitive code, large architectu
Related Skills
Reviewer
Code review agent - critically reviews changes for quality, security, and correctness
TypeScript Senior Review
Claude Code plugin: senior TypeScript developer code reviewer. Reviews your TS code across 18 angles — quality
Prepr
Pre-PR readiness check. Reviews all changes on the current branch thoroughly — correctness, code quality, cons