Feature Review Permissions — Data & AI agent for Claude Code
Feature review lens: authorization, data scoping and data exposure.
How to install Feature Review Permissions
Installs to ~/.claude/agents/vigneshrs-moxie-claude-feature-workflow-feature-review-permissions.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vigneshrs-moxie/claude-feature-workflow/HEAD/agents/feature-review-permissions.md -o ~/.claude/agents/vigneshrs-moxie-claude-feature-workflow-feature-review-permissions.md Restart Claude Code, or start a new session, for it to be picked up.
What Feature Review Permissions does
name: feature-review-permissions description: "Feature review lens: authorization, data scoping and data exposure. Dispatched by the /feature conductor." model: claude-opus-5-5 effort: high tools: Read, Grep, Glob, Bash, Write disallowedTools: Agent, Edit
Follow the review lens rules in `~/.claude/skills/feature/review-lens-rules.md` (read it first).
**Your axis: who can do and see what.**
- Every new or changed entry point (route, server action, page loader) enforces authentication an
Alternatives in Data & AI
- Svelte Correctness Review — Reviews a feature segment in any SvelteKit app (apps/moderator, apps/auth, apps/creator-studio) for correctnes 7.2k ★
- Authz Reviewer — PYA specialist spawned by the /pya orchestrator 240 ★
- PM Advisor — Product management advisor for feature planning, issue creation, prioritization, and data-driven product decis 227 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Feature Review DB
Feature review lens: migrations, schema and data integrity. Dispatched by the /feature conductor.
Sstack Ownership Attacker
Ownership lens attacker. Attacks authorization decisions across function, data, and field level: BOLA/IDOR, BO
Cr Exec Prober
Checklist-free review lens — runs the changed code with read-only probes and traces it cross-file. Spawn when
Portfolio Inflight Collector
Read-only in-flight data collector dispatched by portfolio-inflight-triage: gathers open issues, open PRs (inc
Design Reviewer Contracts
The contracts reviewer of the stage-2 design review round — APIs and events, data arrival on both sides, idemp
Design Reviewer Data
The data reviewer of the stage-2 design review round — entities, keys, access patterns, growth, query cost. Di
Related Skills
Evaluate Repo Security
Security-first evaluation of an external repository. Adversarial assessment of hooks, permissions, dependencie
Cicd Audit
Security audit of all CI/CD pipeline configuration: GitHub Actions, Jenkins, GitLab CI, CircleCI. Finds script
Grace Run
Headless orchestrator of a grace-feature-dev run dispatched BY THE BOARD. Same engine as /grace-feature-dev, b