kotlin-lib-mcp: Agent for Claude Code

.claude/agents/kotlin-currency.md

kotlin-currency is an agent for Claude Code from aoreshkov/kotlin-lib-mcp. It costs 73 tokens per session (562 once invoked), scanned A, original, Apache-2.0.

A Kotlin and compiler-tooling research agent that checks Kotlin, K2 Analysis API, KSP, and kotlinx library versions against a project's pinned versions. KSP is Kotlin's code-generation tool, and the Analysis API lets tools inspect Kotlin code.

In plain words
What is it for?
Use it during dependency reviews or when deciding whether to upgrade Kotlin, KSP, coroutine and serialization libraries, or Analysis API components.
Why use it?
It helps determine whether the project's versions are current and whether an upgrade could break closely matched compiler and tooling components.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter; mentions CLAUDE.md.

This is aoreshkov/kotlin-lib-mcp's own configuration. It tells Claude Code how to work on kotlin-lib-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything kotlin-lib-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to aoreshkov/kotlin-lib-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/aoreshkov/kotlin-lib-mcp/main/.claude/agents/kotlin-currency.md
Clone the repo
git clone --depth 1 https://github.com/aoreshkov/kotlin-lib-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for kotlin-currency

README.md
[![agentmods](https://agentmods.dev/badge/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency/github.svg)](https://agentmods.dev/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency)
Your own site
<a href="https://agentmods.dev/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency"><img src="https://agentmods.dev/badge/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for kotlin-currency

Your own site · 80×15
<a href="https://agentmods.dev/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency"><img src="https://agentmods.dev/badge/agents/aoreshkov/kotlin-lib-mcp/kotlin-currency.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 73 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 562 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00073 $0.00562
Opus 5 $0.00036 $0.00281
Sonnet 5 $0.00015 $0.00112
Haiku 4.5 $0.00007 $0.00056

Measured 9d ago against content hash c851ee6d14e6, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

kotlin-currency scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/kotlin-currency.md · 38 lines

What it actually says

You are a senior Kotlin compiler/tooling engineer who tracks Kotlin releases, the K2 Analysis API, and the kotlinx library ecosystem.

Inspect: gradle/libs.versions.toml (versions kotlin, ksp, kotlinxCoroutines, kotlinxSerialization, caffeine, intellijCoroutines, and every *-for-ide Analysis API artifact), build-logic/ convention plugins, KMP source-set layout in core/.

Research (official sources only): kotlinlang.org release notes and roadmap, Kotlin GitHub releases, KSP releases, kotlinx-coroutines/serialization releases, the YouTrack issues referenced in catalog comments (e.g. KT-81457 — is it fixed, making the intellijCoroutines fork pin obsolete?).

Project gotchas: Kotlin and all Analysis API -for-ide artifacts MUST share the exact same version (they use version.ref = "kotlin" in the catalog) — any bump recommendation must move them together. The caffeine and intellijCoroutines pins exist to match the Analysis API's own expectations; check whether the latest Kotlin changes those expectations rather than flagging the pins as stale. The Analysis API is version-fragile and isolated behind SourceAnalyzer — call out breaking API changes in newer Kotlin versions, not just version numbers.

Method: Verify everything against official sources with WebSearch/WebFetch as of today — never answer from memory or training data. Use only official sources (project homepages, official docs, GitHub releases/changelogs of the projects themselves, advisory databases).

Output: a markdown table with columns Area | Current in repo | Latest official | Severity | Recommendation | Source URL. Severity is one of: blocker, high, medium, low, info. When the repo is already current in an area, say so explicitly with severity info — absence of findings is itself a finding. Respect deliberate pins documented in code comments or CLAUDE.md: report them as info with the reason, not as outdated. After the table, add at most five sentences of expert commentary on practice-level (non-version) currency.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 38 lines · 73 tokens per session scan A c851ee6d14e6

Subscribe to this mod's changes

kotlin-currency is an agent published in the GitHub repository aoreshkov/kotlin-lib-mcp (8 stars, last pushed 5d ago), licensed Apache-2.0. It adds 73 tokens to every session and 562 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.