Back to catalog / Agent orchestration

Configure a least-privilege code-review subagent

Declare a focused reviewer with AgentDefinition, grant read tools only, and invoke it from the main task.

Goal

Have a code-review subagent produce verifiable findings without repository-editing tools.

Declare AgentDefinition(description=..., prompt=..., tools=[...], model=...) in ClaudeAgentOptions(agents={...}). [agents]
Give the reviewer only read tools such as Read and Grep, and scope its target to named files or directories. [agents]
Use query(..., options=options) to ask the main agent to invoke the named subagent, then inspect AssistantMessage and ResultMessage. [agents]

Check that review findings cite files or evidence and that AgentDefinition.tools excludes Write, Edit, and Bash.

If the subagent is not selected, check that its name matches the prompt; do not broaden tool permissions to fix routing.

Review only approved source directories; review text may contain confidential source code.

Subagent descriptions and tool lists are not an OS sandbox; the runtime must enforce actual isolation.

These values describe the upstream repository, not popularity or likes for an individual skill or playbook.

No metrics snapshot is available yet.

License: MIT