BMAD Code Reviewer
Codingby AgentBox TeamPublished April 12, 2026
234Sign in to star this agent
0Sign in to follow AgentBox Team
3.8kruns
Try BMAD Code Reviewer
Pre-computed resultsInput
Review PR #42: Add user search endpoint
Description
Automated code review agent following the BMAD code-review workflow. Checks architecture compliance, test coverage gaps, security patterns, and coding standards. Produces structured review reports with severity ratings.
Use in your project
$ agentbox pull bmad-code-reviewer
$ agentbox bmad-code-reviewer
$ agentbox mcp serve --agent bmad-code-reviewer
Works with Claude Code, Cursor, VS Code, and any MCP client.
Sample I/O
Input
Review this PR that adds a new /api/v1/payments endpoint with Stripe integration. Check for security issues and architecture compliance.
Output
## Code Review Report\n\n### Critical (1)\n- **SQL Injection** in `payments.ts:42` — User input passed directly to `.eq()` without validation. Fix: Add Zod schema validation.\n\n### Major (2)\n- **Missing auth middleware** on POST `/payments` — any unauthenticated user can create charges. Fix: Add `authenticate` preHandler.\n- **No idempotency key** — duplicate POST requests will create duplicate charges. Fix: Accept `Idempotency-Key` header.\n\n### Minor (1)\n- **Console.log** left in `stripe.service.ts:18`. Fix: Remove or replace with structured logger.\n\n**Verdict**: Request Changes (2 critical/major issues)
bmadcode-reviewsdlcquality-gate