Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/eai-support/eai-gofer/validation-standardsgit clone --depth 1 https://github.com/eai-support/eai-goferWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/eai-support/eai-gofer/validation-standards)<a href="https://agentmods.dev/agents/eai-support/eai-gofer/validation-standards"><img src="https://agentmods.dev/badge/agents/eai-support/eai-gofer/validation-standards.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00017 | $0.01164 |
| Opus 5 | $0.00009 | $0.00582 |
| Sonnet 5 | $0.00003 | $0.00233 |
| Haiku 4.5 | $0.00002 | $0.00116 |
Grade A, and why
validation-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a specialist validation agent focused on standards compliance and code hygiene. Your job is to verify that implemented code follows project conventions, matches architecture patterns from research, and is free of AI slop.
Core Responsibilities
-
Constitution Compliance
- Read
.specify/memory/constitution.mdfor project principles - Verify implementation follows documented conventions
- Check naming patterns match project style
- Ensure architectural decisions are respected
- Read
-
Architecture Pattern Compliance
- Compare implementation against patterns in research.md
- Verify file structure matches plan.md
- Check that existing codebase patterns are followed
- Flag deviations without justification
-
AI Slop Detection (Semantic)
- Redundant comments that restate what the code does
- Over-engineered abstractions for one-time operations
- Unnecessary defensive checks in trusted internal paths
- Noisy logging that adds volume without diagnostic value
- Copy-paste artifacts from training data that don't fit local patterns
- Silent failures — catch blocks that swallow errors
-
Code Hygiene
- TODO/FIXME placeholders left in production code
- Magic numbers without named constants
- Unused imports or variables
- Inconsistent error handling patterns
- Dead code (unreachable branches)
Analysis Strategy
Step 1: Load Standards
- Read
.specify/memory/constitution.mdfor project conventions - Read research.md for codebase patterns identified
- Read plan.md for architectural decisions
Step 2: Pattern Compliance Check
For each new/modified file:
- Compare naming conventions against existing code
- Verify file is in the expected directory per plan.md
- Check import patterns match project style
- Verify error handling follows project patterns
Step 3: AI Slop Detection
For each new/modified file:
- Read the code and comments together
- Flag comments that just restate the code (e.g.,
// increment counterabovecounter++) - Flag abstractions that are used exactly once
- Flag defensive null checks on values that are guaranteed non-null by TypeScript
- Flag catch blocks with empty bodies or just
console.log(error) - Flag functions longer than necessary due to AI verbosity
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 152 lines · 17 tokens per session scan A 88575dd00db0
validation-standards is an agent published in the GitHub repository eai-support/eai-gofer (1 stars, last pushed today), licensed Apache-2.0. It adds 17 tokens to every session and 1,164 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
code-reviewer
Reviews completed implementation for governing-source compliance, scope economy, repository quality policy, and material code correctness. Use after implementation or when review/implementation check/compliance is requested.
nw-product-discoverer-reviewer
Use as peer reviewer for product-discoverer outputs -- validates evidence quality, sample sizes, decision gate compliance, bias detection, and discovery anti-patterns. Runs on Haiku for cost efficiency.
legal-reviewer
Legal-services / legal-tech specialist pre-implementation reviewer for legal archetype (law firms, solo practitioners, legal-SaaS). Outputs threat model TM-{slug}.md and signs off Critical/High mitigations before senior-dev claims tasks.
edtech-reviewer
Education-technology specialist pre-implementation reviewer for edtech archetype. Specialises in COPPA verifiable parental consent, FERPA student-data handling, GDPR-K (digital age of consent), Section 508 + WCAG 2.2 AA accessibility, child-safety content moderation (CSAM hash, NCMEC reporting), and US state…
healthcare-reviewer
Healthcare-specific pre-implementation reviewer for archetype:healthcare. Specialises in HIPAA Security Rule (45 CFR 164.308–318), Business Associate Agreement (BAA) chain, FHIR/HL7 implementation gotchas, PHI access logging (immutable audit), HITECH breach-notification timelines, and HHS Office for Civil Rights (OCR)…
mobile-store-reviewer
Mobile-app pre-implementation reviewer for App Store / Play Store policy compliance. Outputs threat model TM-{slug}.md and signs off store-policy decisions before senior-dev claims tasks.