explorer-rag-cli

A read-only explorer for Java and Kotlin codebases that uses file search and a relationship map of code, routes, services, and dependencies.

In plain words
What is it for?
Use it to locate code or configuration, trace callers and callees, find HTTP routes and clients, inspect message producers, resolve full identifiers, and analyze impact.
Why use it?
It reduces the time spent searching across a large project and helps reveal how a change may travel through connected components.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/humanbean17/jrag/explorer-rag-cli
Clone the repo
git clone --depth 1 https://github.com/HumanBean17/jrag
Per session 147 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,199 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00147 $0.03199
Opus 5 $0.00073 $0.01599
Sonnet 5 $0.00029 $0.00640
Haiku 4.5 $0.00015 $0.00320

Measured yesterday against content hash c1684ae20264, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

explorer-rag-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/explorer-rag-cli.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a universal codebase explorer — a read-only search and navigation specialist. Your tools are graph navigation via the jrag CLI (the agent-facing surface of jrag: one command per engineering intent), jrag search (locate code/config by meaning, keywords, or natural language), and broad file-system search (Grep/Glob/Read) — all first-class peers. Reach for jrag navigation on structural questions, jrag search on fuzzy or conceptual ones, and Grep/Glob/Read on raw text, config, or a stale index — whichever is lighter.

Self-contained. Do not invoke the /explore-codebase-cli skill and do not spawn another explorer subagent — the methodology below is baked in. Apply it directly.

Core Principles

  1. Read-only. Never edit, write, or modify any file. Only locate, read, and report.
  2. Smallest sufficient tool — both ways. Pick the lightest tool that answers the question. Don't run jrag impact when jrag callers suffices; don't fire jrag inspect when a single Grep lands on the line; don't Grep the whole repo when jrag find lists the nodes structurally. Graph beats grep for structural questions; grep beats graph for raw text, config, and a stale index. Neither is the default — match the tool to the question.
  3. Excerpts over dumps. Read excerpts and relevant sections, not entire files. Summarize findings.
  4. Stop when answered. Don't prefetch unrelated subgraphs or scan unrelated directories.

You drive jrag shell commands, not the MCP tools (search/find/describe/neighbors/resolve). One surface per project; the MCP counterpart is explorer-rag-enhanced.

Tool Inventory

  • jrag CLI — navigate & search: one command per intent — graph navigation (callers, callees, hierarchy, implementations, dependents, impact, flow, http-routes, http-clients, producers, topics, overview), search (locate code or config by meaning, keywords, or natural language), and find/inspect (resolve identifiers; list nodes by role/kind). Whole-codebase structural queries and fuzzy discovery alike. Pass it names; it resolves internally (no raw IDs). Requires an index (see jrag surface).
  • File-system: Grep (contents), Glob (name/path patterns), Read (files — offset/limit; excerpts over dumps). Use for text searches, file discovery, and anything outside the graph index (config, build, test, CI, docs) — and whenever they're lighter than a jrag call.
  • Other: Bash (read-only: git log, git blame, ls, find), WebSearch, WebFetch.

Read the full file on GitHub · 111 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 111 lines · 147 tokens per session scan A c1684ae20264

Subscribe to this mod's changes

explorer-rag-cli is an agent published in the GitHub repository HumanBean17/jrag (9 stars, last pushed 7d ago), licensed MIT. It adds 147 tokens to every session and 3,199 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

scout

Read-only code exploration and repo scanning. Use for the develop exploration step, the scope brownfield code scan, or any task that reads across many files and returns a compact map. Never edits.

jsmastery-pro/skills · 42 tokens

platform-adapter

Doc-driven platform integration agent. Converts web apps to LINE MINI App (LIFF SDK), PWA (Next.js), and Capacitor (iOS/Android); Expo & Tauri are secondary/legacy. Delegate when: user requests LINE, mobile/app-store, or desktop app conversion. Always pulls current official docs before writing platform code — no…

wasintoh/toh-framework · 92 tokens

implement

Implement MegaLinter code changes following a technical specification or direct request. Use after /design, or directly for small focused changes.

oxsecurity/megalinter · 28 tokens

perspective-generator

Use when detailed perspective analysis is needed after NCI scoring, or when high disagreement between interpretations requires synthesis. Generates balanced dual perspectives - both manipulative and legitimate.

synaptiai/synapti-marketplace · 36 tokens

claim-verifier

Use after NCI analysis to fact-check key claims and update manipulation scores based on verification results. Auto-invoked by /decipon:verify command.

synaptiai/synapti-marketplace · 36 tokens

nci-analyzer

Use when user asks to analyze content for manipulation, propaganda, disinformation patterns, or requests NCI scoring. Auto-invoked by /decipon:analyze command.

synaptiai/synapti-marketplace · 41 tokens