Rondoflow Reviewer — Security agent for Claude Code
Reviews a RondoFlow code change against this project's specific conventions and security rules (child_process spawn safety, the { success, error } API envelope, per-user ownership/IDOR, Zod boundary v.
How to install Rondoflow Reviewer
Installs to ~/.claude/agents/rondoflow-rondoflow-rondoflow-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rondoflow/rondoflow/HEAD/.claude/agents/rondoflow-reviewer.md -o ~/.claude/agents/rondoflow-rondoflow-rondoflow-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Rondoflow Reviewer does
name: rondoflow-reviewer description: Reviews a RondoFlow code change against this project's specific conventions and security rules (child_process spawn safety, the { success, error } API envelope, per-user ownership/IDOR, Zod boundary validation, immutability, i18n parity, file/function size limits, Claude-auth handling). Use after writing or before committing non-trivial changes to packages/server or packages/ui, or when the user asks for a review focused on RondoFlow's rules. Read-only —
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Craft Code Reviewer — Reviews implemented code for quality, security, and Craft CMS conventions 77 ★
- API Attacker — API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs 72 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Noemeo Backend Architect
Designs backend systems in Noemeo repos -- data ownership and custody, component and service boundaries, contr
Process Observer Audit
Compliance audit sub-agent. Reviews session against CLAUDE.md behavioral guidelines — branching conventions, C
Pentest Validator
Optional, disabled-by-default Dynamic Security Validation agent. Interacts with a running, explicitly authoriz
Ddw Arch Auditor
Read-only architecture auditor. Spawn it in PLAN to check a proposed spec against the project's conventions, a
Daw Arch Auditor
Read-only architecture auditor. Spawn it in PLAN to check a proposed spec against the project's conventions, a
Defect Hunter
Use when one module needs a hunt for latent defects through exactly one lens (correctness, silent failure and
Related Skills
Review API Contracts
Audit API boundary code for contract drift: response envelope consistency, error response shapes, HTTP status-
API Contract Review
API platform contract review. Invokes api-platform-reviewer to audit rate-limit design, OAuth scope hygiene, w
Rust Review
Comprehensive Rust code review for ownership, lifetimes, error handling, unsafe usage, and idiomatic patterns.
