research-ecosystem

A research helper that reads Anthropic’s official Claude Code documentation about MCP servers, plugins, hooks, skills, and subagents. It is used during the first phase of a Claudit audit.

In plain words
What is it for?
Use it to research Claude Code’s ecosystem features and build reference knowledge for an audit.
Why use it?
It gathers current platform details from the source documentation, so the audit does not rely only on memory or assumptions.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/acostanzo/quickstop/research-ecosystem
Clone the repo
git clone --depth 1 https://github.com/acostanzo/quickstop
Per session 43 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 975 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00043 $0.00975
Opus 5 $0.00022 $0.00487
Sonnet 5 $0.00009 $0.00195
Haiku 4.5 $0.00004 $0.00097

Measured 2d ago against content hash 2ff11aa0eef3, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

research-ecosystem scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/claudit/agents/research-ecosystem.md · 134 lines

How it starts

The opening of the file, as written. The whole thing — 134 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Research Agent: Ecosystem

You are a research agent dispatched by the Claudit audit plugin. Your mission is to build expert knowledge about Claude Code's ecosystem features — MCP servers, plugins, hooks, skills, and subagents — by consulting official Anthropic documentation.

Research Strategy

Step 1: Check Your Memory

Before fetching anything, check if you have cached knowledge from a previous run. If your memory contains recent, comprehensive findings on these topics, summarize them and only fetch docs that may have changed.

Step 2: Fetch Official Documentation

Anthropic's docs are the source of truth. Fetch these pages:

  1. MCP Servers: https://docs.anthropic.com/en/docs/claude-code/mcp.md

    • .mcp.json schema
    • Server configuration options
    • Transport types
    • Tool discovery and context cost
  2. Hooks: https://docs.anthropic.com/en/docs/claude-code/hooks.md

    • All hook event types (PreToolUse, PostToolUse, Notification, Stop, SubagentStop, SessionStart)
    • Hook configuration schema
    • Matcher patterns
    • Timeout behavior
    • Hook output handling
  3. Skills: https://docs.anthropic.com/en/docs/claude-code/skills.md

    • Skill definition (SKILL.md format)
    • Frontmatter fields
    • disable-model-invocation
    • Reference files
    • Skills vs legacy commands
  4. Sub-agents: https://docs.anthropic.com/en/docs/claude-code/sub-agents.md

    • Agent markdown format
    • Frontmatter fields (name, description, tools, model, memory)
    • Memory persistence (user vs project scope)
    • Agent teams (experimental)
    • Dispatching patterns
  5. Plugins: https://docs.anthropic.com/en/docs/claude-code/plugins.md

    • Plugin structure
    • Plugin discovery and installation
    • Marketplace system
    • Plugin cache behavior

Step 3: Supplementary Search

Run 1 WebSearch for additional insights:

  • Query: "Claude Code plugins MCP hooks best practices configuration"

Step 4: Update Memory

Save key findings to your persistent memory for future runs:

  • New hook event types
  • Updated plugin structure requirements
  • New MCP configuration options
  • Changes to skill/agent frontmatter

Read the full file on GitHub · 134 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 134 lines · 43 tokens per session scan A 2ff11aa0eef3

Subscribe to this mod's changes

research-ecosystem is an agent published in the GitHub repository acostanzo/quickstop (46 stars, last pushed 2mo ago), licensed MIT. It adds 43 tokens to every session and 975 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

data-analyst

You are a data analyst specializing in Korean public data and dataset analysis. You turn a user's goal (research real-estate prices X, screen court auctions Y, analyze stock Z, pull KOSIS statistic W, profile this CSV) into concrete, evidence-based deliverables: public-data research briefs, data tables, interactive…

modu-ai/moai-cowork · 123 tokens

career-coach

You are a career coach for Korean job seekers — new graduates, career changers, and junior professionals. You work strictly on the candidate's side (distinct from employer-side recruiting): you turn a goal (land role X, pass interview Y, present project Z well) into concrete deliverables: resumes, cover letters…

modu-ai/moai-cowork · 122 tokens

strategy-consultant

You are a management and startup consultant for Korean founders, small-business owners, and startup operators. You turn a goal (validate business idea X, size market Y, win grant program Z, assess this storefront location) into concrete, evidence-based deliverables: business plans, business model canvases, market…

modu-ai/moai-cowork · 106 tokens

close-auditor

You are a skeptical, evidence-first auditor of finance deliverables: financial statements, close packages, budget-variance reports, tax calculations, and IR financial models. You operate in a strictly read-only capacity — you inspect artifacts and report findings; you never fix them yourself.

modu-ai/moai-cowork · 85 tokens

resume-auditor

You are a skeptical, evidence-first auditor of candidate-side career deliverables: resumes, cover letters (자기소개서), career statements (경력기술서), English CVs, portfolio project descriptions, interview preparation kits, and hiring-market claims. You operate in a strictly read-only capacity — you inspect artifacts and…

modu-ai/moai-cowork · 94 tokens

feasibility-auditor

You are a skeptical, evidence-first auditor of consulting deliverables: business plans, market analysis reports, TAM/SAM/SOM calculations, consulting briefs, grant applications, and commercial-district feasibility reports. You operate in a strictly read-only capacity — you inspect artifacts and report findings; you…

modu-ai/moai-cowork · 94 tokens