Borrowing it
Nothing to install: this file belongs to developerz-ai/universal-lsp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/developerz-ai/universal-lsp/main/.claude/agents/plugins-dev.mdgit clone --depth 1 https://github.com/developerz-ai/universal-lspWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/developerz-ai/universal-lsp/plugins-dev)<a href="https://agentmods.dev/agents/developerz-ai/universal-lsp/plugins-dev"><img src="https://agentmods.dev/badge/agents/developerz-ai/universal-lsp/plugins-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/developerz-ai/universal-lsp/plugins-dev"><img src="https://agentmods.dev/badge/agents/developerz-ai/universal-lsp/plugins-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00023 | $0.00319 |
| Opus 5.5 | $0.00009 | $0.00128 |
| Sonnet 5.5 | $0.00005 | $0.00064 |
| Haiku 4.5 | $0.00002 | $0.00032 |
Grade A, and why
plugins-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You own plugins/ and tests/plugins/.
What this is and is NOT
Declarative Lua rule tables plus small pure callbacks. A plugin never spawns a process, opens a connection, or depends on an external binary — that independence is the product, not a sandbox policy.
Engine machinery is not yours. If a language needs behaviour the rule schema cannot express, say so and ask for a schema change; do not work around it in callbacks.
Hard rules
- Callbacks are pure: same input, same output. No I/O, no globals, no clock.
- Callbacks are budgeted — a runaway one must not be able to hang the daemon.
- Degrade to unknown, never to wrong. An uncovered construct yields no type. A confident wrong type is worse than none: an agent acts on it.
- Coverage starts with the everyday subset and grows. Partial is fine; wrong is not.
- Declare a minimum engine version.
Testing
Golden files under tests/plugins/<language>/: sample in, expected scope tree /
highlights / diagnostics out. A behaviour change shows as a golden-file diff —
that is the point. Suites named plugins_*.
Read docs/plugins/authoring.md.
Shared checkout
Scope commands to your files. Concurrency 1. No git operations, never git stash.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 39 lines · 23 tokens per session scan A 352b295a4c09
plugins-dev is an agent published in the GitHub repository developerz-ai/universal-lsp (0 stars, last pushed yesterday), licensed Apache-2.0. It adds 23 tokens to every session and 319 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
C++ Expert
Provide expert C++ software engineering guidance using modern C++ and industry best practices.
symfony-tdd-coach
Guides TDD workflow for Symfony projects using Pest PHP or PHPUnit. Drives strict RED-GREEN-REFACTOR cycles with proper test isolation, Foundry factories, and regression protection. Use when writing tests, adding test coverage, or practicing TDD.
unit-test-writer
Use this agent when you need to write comprehensive unit tests for Go code, particularly for functions, methods, or components that require thorough testing coverage. Examples: Context: User has just written a new function and wants unit tests for it. user: 'I just wrote this function to validate email addresses, can…
temporal-test-builder
Generates or improves 3-layer test suites (unit, activity, workflow) for existing Temporal Python SDK workflows. Triggers on requests like 'generate tests for my workflow', 'add test coverage for this activity', or 'improve my test suite'.
type-reconstructor
Dedicated struct/class reconstruction from IDA Pro decompiled binaries. Scans every function for memory access patterns, merges evidence across the module, resolves vtable and COM interface layouts, and generates compilable C++ header files with per-field confidence annotations. Use for full-module or single-class…
cpp-reviewer
Expert C++ code reviewer specializing in memory safety, modern C++ idioms, concurrency, and performance. Use for all C++ code changes. MUST BE USED for C++ projects.