reviewing-agent-definitions
Reviewing Agent Definitions
Agents run with a tool grant a contributor chose. The grant is the review's centre of gravity: everything else is quality, but an over-broad grant is a security weakening that ships silently.
Scope, severity, and output format come from ../reviewing-claude-config/SKILL.md. Report only
what the changeset introduced or worsened — the fence is stated there.
Prefer being reached through that router rather than directly: it runs an always-on secret scan
before routing and a filter afterwards, and neither happens on a direct invocation. If you were
invoked directly, run the secret scan yourself using the patterns in
../reviewing-claude-config/reference/security-patterns.md, as Grep queries rather than the
shell commands a read-only grant cannot execute, and say in the findings that the filter did
not run. For frontmatter fields and tool names, see ../reviewing-claude-config/reference/claude-code-requirements.md.