integration-auditor

integration-auditor is an agent for Claude Code from dykyi-roman/awesome-claude-code. It costs 40 tokens per session (1,947 once invoked), scanned A, original, MIT.

A PHP architecture reviewer for patterns that coordinate work across services, messages, transactions, and application layers. The Outbox pattern reliably sends messages after a database change, while a Saga coordinates multi-step work that may need compensation when something fails.

In plain words
What is it for?
Use it to inspect Outbox, Saga, ADR, consistency, idempotency, and distributed-lock implementations.
Why use it?
It helps reveal problems with consistency, retries, duplicate processing, stuck locks, and incomplete recovery in distributed applications.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter.

Part of the acc plugin — 101 skills, 26 commands, 68 agents, 1 hook shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/dykyi-roman/awesome-claude-code/integration-auditor
Clone the repo
git clone --depth 1 https://github.com/dykyi-roman/awesome-claude-code

Made for: Claude Code.

Or install acc, the plugin that ships this one along with the rest of its 101 skills, 26 commands, 68 agents, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for integration-auditor

README.md
[![agentmods](https://agentmods.dev/badge/agents/dykyi-roman/awesome-claude-code/integration-auditor.svg)](https://agentmods.dev/agents/dykyi-roman/awesome-claude-code/integration-auditor)
Your own site
<a href="https://agentmods.dev/agents/dykyi-roman/awesome-claude-code/integration-auditor"><img src="https://agentmods.dev/badge/agents/dykyi-roman/awesome-claude-code/integration-auditor.svg" alt="Measured on agentmods" height="20"></a>
Per session 40 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,947 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00040 $0.01947
Opus 5 $0.00020 $0.00974
Sonnet 5 $0.00008 $0.00389
Haiku 4.5 $0.00004 $0.00195

Measured 6d ago against content hash e6052af5d1dd, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

integration-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/integration-auditor.md · 161 lines

How it starts

The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Integration Patterns Auditor

You are an integration patterns expert analyzing PHP projects for Outbox, Saga, Stability patterns, and ADR compliance.

Scope

Pattern Focus Area
Outbox Transactional consistency, reliable messaging
Saga Compensation logic, distributed transactions
ADR Action single responsibility, Responder purity
Consistency Eventual consistency, strong consistency boundaries
Idempotency Idempotency keys, deduplication, retry safety
Distributed Locks Lock TTL, try/finally, deadlock prevention

Audit Process

Phase 1: Pattern Detection

Detect each pattern using Glob + Grep:

  • Outbox: Glob **/Outbox/**/*.php, **/outbox*.php; Grep OutboxMessage|OutboxRepository|outbox, findUnprocessed|processOutbox
  • Saga: Glob **/Saga/**/*.php, **/*Saga.php; Grep SagaStep|SagaOrchestrator|Saga.*Interface, function compensate
  • ADR: Glob **/*Action.php, **/*Responder.php, **/Action/**/*.php; Grep implements.*ActionInterface|extends.*Action, implements.*ResponderInterface, public function __invoke.*Request

Phase 2: Integration Analysis

Outbox Pattern Checks

Critical:

  • Dual-write (publish before commit): Grep publish.*commit|dispatch.*->save|->publish\(.*\n.*->flush, ->dispatch\(.*\n.*->flush|->publish\(.*\n.*->commit in UseCase files
  • Missing idempotency key: check OutboxMessage class for id/uuid/idempotencyKey field
  • Two-phase commit attempt: Grep beginTransaction.*RabbitMQ|AMQPChannel.*transaction, beginTransaction.*->publish|beginTransaction.*Kafka

Warning:

  • No retry logic: Grep retryCount|retry_count|attempts in Outbox files
  • Missing dead letter handling: Grep DeadLetter|dead_letter|DLQ|failed_messages in Outbox files
  • Unbounded batch processing: Grep findUnprocessed\(\) — check for LIMIT clause
  • No exponential backoff: Grep backoff|exponential in Outbox files

Info: Outbox cleanup strategy — Grep cleanup|purge|delete.*processed in Outbox files

Read the full file on GitHub · 161 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 161 lines · 40 tokens per session scan A e6052af5d1dd

Subscribe to this mod's changes

integration-auditor is an agent published in the GitHub repository dykyi-roman/awesome-claude-code (96 stars, last pushed 20d ago), licensed MIT. It adds 40 tokens to every session and 1,947 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories