validation-standards

validation-standards is an agent for Claude Code from eai-support/eai-gofer. It costs 17 tokens per session (1,164 once invoked), scanned A, original, Apache-2.0.

A review agent that checks code against a project's written rules, architecture plans, existing patterns, and cleanliness standards.

In plain words
What is it for?
Use it after implementation to review constitution rules, research and plan alignment, file structure, naming, comments, logging, error handling, and other code-hygiene issues.
Why use it?
It catches code that does not fit the project's design or conventions, as well as common unwanted leftovers such as placeholder comments, silent errors, and unnecessary complexity.

Agent for Claude Code

Part of the eai-gofer plugin — 2 skills, 3 commands, 47 agents, 3 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/eai-support/eai-gofer/validation-standards
Clone the repo
git clone --depth 1 https://github.com/eai-support/eai-gofer

Made for: Claude Code.

Or install eai-gofer, the plugin that ships this one along with the rest of its 2 skills, 3 commands, 47 agents, 3 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for validation-standards

README.md
[![agentmods](https://agentmods.dev/badge/agents/eai-support/eai-gofer/validation-standards.svg)](https://agentmods.dev/agents/eai-support/eai-gofer/validation-standards)
Your own site
<a href="https://agentmods.dev/agents/eai-support/eai-gofer/validation-standards"><img src="https://agentmods.dev/badge/agents/eai-support/eai-gofer/validation-standards.svg" alt="Measured on agentmods" height="20"></a>
Per session 17 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,164 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00017 $0.01164
Opus 5 $0.00009 $0.00582
Sonnet 5 $0.00003 $0.00233
Haiku 4.5 $0.00002 $0.00116

Measured 4d ago against content hash 88575dd00db0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

validation-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/validation-standards.md · 152 lines

How it starts

The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a specialist validation agent focused on standards compliance and code hygiene. Your job is to verify that implemented code follows project conventions, matches architecture patterns from research, and is free of AI slop.

Core Responsibilities

  1. Constitution Compliance

    • Read .specify/memory/constitution.md for project principles
    • Verify implementation follows documented conventions
    • Check naming patterns match project style
    • Ensure architectural decisions are respected
  2. Architecture Pattern Compliance

    • Compare implementation against patterns in research.md
    • Verify file structure matches plan.md
    • Check that existing codebase patterns are followed
    • Flag deviations without justification
  3. AI Slop Detection (Semantic)

    • Redundant comments that restate what the code does
    • Over-engineered abstractions for one-time operations
    • Unnecessary defensive checks in trusted internal paths
    • Noisy logging that adds volume without diagnostic value
    • Copy-paste artifacts from training data that don't fit local patterns
    • Silent failures — catch blocks that swallow errors
  4. Code Hygiene

    • TODO/FIXME placeholders left in production code
    • Magic numbers without named constants
    • Unused imports or variables
    • Inconsistent error handling patterns
    • Dead code (unreachable branches)

Analysis Strategy

Step 1: Load Standards

  • Read .specify/memory/constitution.md for project conventions
  • Read research.md for codebase patterns identified
  • Read plan.md for architectural decisions

Step 2: Pattern Compliance Check

For each new/modified file:

  • Compare naming conventions against existing code
  • Verify file is in the expected directory per plan.md
  • Check import patterns match project style
  • Verify error handling follows project patterns

Step 3: AI Slop Detection

For each new/modified file:

  • Read the code and comments together
  • Flag comments that just restate the code (e.g., // increment counter above counter++)
  • Flag abstractions that are used exactly once
  • Flag defensive null checks on values that are guaranteed non-null by TypeScript
  • Flag catch blocks with empty bodies or just console.log(error)
  • Flag functions longer than necessary due to AI verbosity

Read the full file on GitHub · 152 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 152 lines · 17 tokens per session scan A 88575dd00db0

Subscribe to this mod's changes

validation-standards is an agent published in the GitHub repository eai-support/eai-gofer (1 stars, last pushed today), licensed Apache-2.0. It adds 17 tokens to every session and 1,164 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

code-reviewer

Reviews completed implementation for governing-source compliance, scope economy, repository quality policy, and material code correctness. Use after implementation or when review/implementation check/compliance is requested.

shinpr/claude-code-workflows · 38 tokens

nw-product-discoverer-reviewer

Use as peer reviewer for product-discoverer outputs -- validates evidence quality, sample sizes, decision gate compliance, bias detection, and discovery anti-patterns. Runs on Haiku for cost efficiency.

nWave-ai/nWave · 0 tokens

legal-reviewer

Legal-services / legal-tech specialist pre-implementation reviewer for legal archetype (law firms, solo practitioners, legal-SaaS). Outputs threat model TM-{slug}.md and signs off Critical/High mitigations before senior-dev claims tasks.

avelikiy/great_cto · 52 tokens

edtech-reviewer

Education-technology specialist pre-implementation reviewer for edtech archetype. Specialises in COPPA verifiable parental consent, FERPA student-data handling, GDPR-K (digital age of consent), Section 508 + WCAG 2.2 AA accessibility, child-safety content moderation (CSAM hash, NCMEC reporting), and US state…

avelikiy/great_cto · 112 tokens

healthcare-reviewer

Healthcare-specific pre-implementation reviewer for archetype:healthcare. Specialises in HIPAA Security Rule (45 CFR 164.308–318), Business Associate Agreement (BAA) chain, FHIR/HL7 implementation gotchas, PHI access logging (immutable audit), HITECH breach-notification timelines, and HHS Office for Civil Rights (OCR)…

avelikiy/great_cto · 103 tokens

mobile-store-reviewer

Mobile-app pre-implementation reviewer for App Store / Play Store policy compliance. Outputs threat model TM-{slug}.md and signs off store-policy decisions before senior-dev claims tasks.

avelikiy/great_cto · 40 tokens