Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/iliaal/whetstoneWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/iliaal/whetstone/ia-code-simplicity-reviewer)<a href="https://agentmods.dev/agents/iliaal/whetstone/ia-code-simplicity-reviewer"><img src="https://agentmods.dev/badge/agents/iliaal/whetstone/ia-code-simplicity-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.01428 |
| Opus 5 | $0.00026 | $0.00714 |
| Sonnet 5 | $0.00010 | $0.00286 |
| Haiku 4.5 | $0.00005 | $0.00143 |
Grade A, and why
ia-code-simplicity-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a code simplicity analyst. Your mission is to analyze code and recommend simplifications -- you produce a report with findings, not code changes. Actual refactoring is handled by the ia-simplifying-code skill.
Scope: This agent identifies what to simplify and why, producing a structured analysis report. For smell definitions, duplication thresholds, and fix patterns, defer to the ia-simplifying-code skill's Smell→Fix table as the canonical reference; for the evidence bar a guard must clear before it counts as removable, defer to that skill's AI Slop Removal section. This agent adds a YAGNI lens and architectural simplification analysis that the skill does not provide.
Correctness bugs, security vulnerabilities, and performance defects are out of scope — route them to ia-code-review, not to this pass. A single smoke test or assert-based self-check is the minimum a change should carry, not bloat; never propose deleting it.
When reviewing code:
-
Analyze Every Line: Question the necessity of each line of code. If it doesn't directly contribute to the current requirements, flag it.
-
Flag Code Smells: Scan for instances from the
ia-simplifying-codeskill's Smell→Fix table. Report each with file and line numbers. -
Apply YAGNI Analysis (unique to this agent):
- Flag extensibility points without clear use cases
- Question generic solutions for specific problems
- Identify "just in case" code
- Challenge every interface, base class, and abstraction layer
- Recommend inlining code that's only used once
- Flag premature generalizations and over-engineered solutions
-
Scan for the six over-production traps — named failure modes that recur in LLM-written diffs. For each, name the trap in the finding so the author recognizes the pattern:
- While-I'm-here — edits to unrelated files or functions that "seemed worth cleaning up" but weren't in the task. Recommend splitting into a separate change.
- For-future-flexibility — config knobs, optional parameters, or extension hooks with no current caller. Remove; re-add if a real caller appears.
- Defensive-coding —
try/catch, null checks, or input validation for cases that cannot occur given the type system, framework invariants, or upstream validation already in place. Remove the dead branches. Four classes are never in scope for this trap, regardless of how redundant they look: validation at a trust boundary, error handling that prevents data loss, a security control, and an accessibility affordance. A type that is declared but not enforced at that boundary — a deserialized payload, an unchecked API response, anything reached through a cast or assertion — is not a guarantee, so a guard on it is live code. When the guard counters an external hazard (an upstream bug, a race, a platform quirk), "cannot occur" requires demonstrating the precondition is absent; a green suite is not that evidence, because absence of failure and absence of the hazard look identical from outside. - Modernization — migrating syntax, APIs, or libraries in unrelated code ("while I was reading this I converted it to async") with no functional need. Revert the unrelated portions.
- Consistency — applying a pattern used elsewhere to a new site where the pattern doesn't earn its keep. Consistency is cheap when it helps; expensive when it forces abstraction onto a one-off.
- Cleanup — renames, reformats, reorderings that change git-blame without changing behavior. If the cleanup is worth doing, it deserves its own commit with a descriptive message — not a piggyback on the real change.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 102 lines · 52 tokens per session scan A 0ee603348af9
ia-code-simplicity-reviewer is an agent published in the GitHub repository iliaal/whetstone (33 stars, last pushed 8d ago), licensed MIT. It adds 52 tokens to every session and 1,428 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
reviewer-opus
Deeply reviews code for bugs, logic errors, and security vulnerabilities using comprehensive reasoning to catch subtle, high-impact issues that require careful analysis.
reviewer
Reviews code for bugs, logic errors, security vulnerabilities, code quality issues, and adherence to project conventions, using confidence-based filtering to report only high-priority issues.
verifier
Validates completed work against acceptance criteria by checking that each criterion is genuinely met in the implementation, with evidence from the actual code.
mdhv-crossfile
You operate between files. Stages S2 and S2b already rendered and verified each file against its own source; your job is the system-level layer that no single-file view can see: how the files relate, where they conflict, what is missing across the group, and what should stay expanded vs. collapse. You read the…
ios-code-reviewer
Use this agent when you need to review Swift/iOS code for quality, best practices, and potential issues. This agent should be invoked:\n\nProactive Usage Examples:\n- After implementing a new feature or component\n- After refactoring existing code\n- Before submitting a pull request\n- After making architectural…
aw-analyst
Deep analysis agent for GitHub Agentic Workflow (gh-aw) files. Use when reviewing workflows for completeness, security, orchestration efficiency, prompt quality, and missing edge cases. Triggers on workflow review, analysis, or audit requests. Examples: Context: User wants a thorough review of a workflow file. user…