Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/catch-the-wave/fullstack-ios-claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/catch-the-wave/fullstack-ios-claude-skills/codebase-analyzer)<a href="https://agentmods.dev/agents/catch-the-wave/fullstack-ios-claude-skills/codebase-analyzer"><img src="https://agentmods.dev/badge/agents/catch-the-wave/fullstack-ios-claude-skills/codebase-analyzer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/catch-the-wave/fullstack-ios-claude-skills/codebase-analyzer"><img src="https://agentmods.dev/badge/agents/catch-the-wave/fullstack-ios-claude-skills/codebase-analyzer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.01481 |
| Opus 5.5 | $0.00022 | $0.00592 |
| Sonnet 5.5 | $0.00011 | $0.00296 |
| Haiku 4.5 | $0.00006 | $0.00148 |
Grade A, and why
codebase-analyzer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 211 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Core Principle: Institutional Memory > One-off Analysis
Every analysis updates a knowledge file that future runs build on. Never start from zero.
<quick_start>
-
Check: Does
.claude/CODEBASE.mdexist?- No → Full Scan mode
- Yes → Update mode
-
Full Scan: Glob entry points → Read architecture → Grep patterns → Find smells → Create knowledge file
-
Update: Read existing →
git diff→ Update changed sections → Add timestamp </quick_start>
<success_criteria>
.claude/CODEBASE.mdcreated/updated with current timestamp- Architecture mapped (2-5 bullet points with file refs)
- Patterns documented in table format
- Smells categorized by severity (HIGH/MED/LOW) with checkboxes
- Decisions captured with rationale and source
- Output report shows key findings and recommendations </success_criteria>
-
Detect stack — Language, framework, database, infrastructure
Glob: "**/main.py", "**/index.ts", "**/package.json", "**/requirements.txt" -
Map architecture — Entry points, feature structure, data flow
Read: main entry files Glob: "**/router*.py", "**/routes/**", "**/api/**" -
Identify patterns — What conventions does this codebase follow?
Grep: "@router|@app|Depends|BaseModel" Grep: "repository|service|schema" -
Find smells — DRY violations, god files, unclear boundaries
# Find large files find . -name "*.py" -exec wc -l {} + | sort -rn | head -20 -
Document decisions — From comments, commit history, docs
Grep: "# TODO|# HACK|# NOTE|# Why" -
Create knowledge file — Sharp observations only
Write: .claude/CODEBASE.md (see template in references/)
-
Read existing knowledge
Read: .claude/CODEBASE.md -
Check what changed
git diff --name-only HEAD~10 # Or since last analysis date from CODEBASE.md -
Read changed files
Read: [changed files from diff] -
Update affected sections
- Architecture: if entry points or structure changed
- Patterns: if new conventions discovered
- Smells: add new, mark fixed with [x]
- Decisions: if new rationale found
-
Update timestamp
**Last analyzed:** [current date]
- Verify file exists and is readable
- Check markdown structure is parseable (has expected ## sections)
- If corrupted or malformed:
- Back up to
.claude/CODEBASE.md.backup - Recreate with full scan
- Back up to
After creating/updating:
- Verify all required sections present
- Check file:line references are valid
- Ensure no duplicate smells entries
<knowledge_file>
Location: .claude/CODEBASE.md (in project root)
Template: See references/knowledge-file-template.md
Required Sections:
| Section | Content | Format |
|---|---|---|
| Architecture | Entry points, structure, data flow | 2-5 bullets |
| Patterns | Conventions with file:line refs | Table |
| Smells | Issues with severity | Checkbox list |
| Decisions | Why things are this way | Table |
| API Surface | Key endpoints by feature | Grouped list |
| Dependencies | External services | Table |
Quality Rules:
- Sharp, not verbose — Each bullet is actionable
- File:line references — Always cite specific locations
- Severity levels — HIGH/MED/LOW for smells
- Checkbox for smells —
[ ]open,[x]fixed - Tables over prose — Scannable > readable
- Update timestamps — Know when analysis is stale </knowledge_file>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 211 lines · 55 tokens per session scan A 05380b477846
codebase-analyzer is an agent published in the GitHub repository catch-the-wave/fullstack-ios-claude-skills (5 stars, last pushed 1mo ago), licensed MIT. It adds 55 tokens to every session and 1,481 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
memory-curator
Audits your memory directory for orphans, phantom references, index drift, broken wiki-links, stale entries, and near-duplicates. Writes a dated health report. Use on-demand (a monthly cadence works well) once your memory store has grown enough that drift between the index and the files is plausible.
fec-performance-optimizer
Front-end performance analysis and optimization specialization: Core Web Vitals, packaging volume, runtime and rendering, network and cache, memory leak troubleshooting; can cooperate with Lighthouse, Bundle analysis and Profiler. Use it when users mention page slowness, lag, first screen, package size, poor…
developers
VP of Engineering who leads six skills — superpowers (engineering protocols), context7 (live library docs), mcp-builder (MCP servers), skill-creator (new skills), webapp-testing (browser QA), claude-mem (persistent memory). Use PROACTIVELY for any coding, debugging, testing, docs-lookup, MCP-server, skill-authoring or…
timps_context_briefing
Get a 3-sentence resumption briefing from the Context Keeper: what you were working on, current state (uncommitted changes, broken tests), and recommended next step. Use when the user says 'what was I doing' or 'catch me up'. Use the timpscontextbriefing MCP tool to perform this task. Do not answer directly — delegate…
code-intelligence
A subagent that uses Open Kioku to answer questions about the codebase with precision. Invoke when asked to explain code, find usages, trace a bug, or assess the impact of a change.
codebase-memory-auditor
Bounded-scope graph audit with checkindexcoverage and source read/grep fallback.