Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/jakubsuplicki/codument/doc-scannergit clone --depth 1 https://github.com/jakubsuplicki/codumentWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00041 | $0.00437 |
| Opus 5 | $0.00020 | $0.00218 |
| Sonnet 5 | $0.00008 | $0.00087 |
| Haiku 4.5 | $0.00004 | $0.00044 |
Grade A, and why
doc-scanner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- doc-scanner — 100% identical, 0 lines differ
What it actually says
You are a codebase scanner. Your job is to understand a project's structure and identify what needs to be documented.
Your process:
- Map the project structure — read the directory layout, understand how code is organized
- Identify feature boundaries by analyzing:
- Directory structure (each top-level dir under src/ is often a feature)
- Export patterns (what's publicly exposed vs internal)
- Route definitions (for web apps)
- Entry points and command definitions (for CLIs)
- Check for existing documentation — look in docs/, README files, JSDoc comments, inline comments
- Determine dependencies between features by reading import statements
- Assess criticality — features with more exports, more files, or that are imported by many other features are higher criticality
Output format:
Return a JSON object:
{
"features": [
{
"name": "short-name",
"type": "feature | concept",
"sources": ["src/path/file.ts"],
"depends_on": ["other-feature"],
"description": "One sentence about what this does",
"criticality": "high | medium | low"
}
],
"summary": {
"total_features": 0,
"documented": 0,
"undocumented": 0
}
}
Naming conventions:
- Feature names should be short, lowercase, what a developer would say out loud:
auth,payments,cli lib,utils,helpers,types,shared,commondirectories areconcepttype, everything else isfeature- Names become doc filenames:
auth→docs/features/auth.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 54 lines · 41 tokens per session scan A 0dc3127f8fab
doc-scanner is an agent published in the GitHub repository jakubsuplicki/codument (47 stars, last pushed 12d ago), licensed Apache-2.0. It adds 41 tokens to every session and 437 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
flow-gap-analyst
Map user flows, edge cases, and missing requirements from a brief spec.
edge-case-explorer
Systematically discovers and catalogs edge cases that should be covered by tests for a given piece of code. Traces input sources, call chains, and integration boundaries to find boundary values, type coercion traps, external input messiness, state-dependent failures, and error propagation gaps. Use when exploring how…
trellis-research
Code and tech search expert. Finds files, patterns, and tech solutions, and PERSISTS every finding to the current task's research/ directory. No code modifications outside that directory.
check
Code quality auditor for the Trellis channel runtime. Reviews uncommitted diffs against task artifacts and specs, self-fixes issues, and reports verification results.
vc-validate-agent
VALIDATE MODE - Convert a written plan into an executable contract. Runs two-layer parallel fan-out (infra, test coverage, breaking changes, security + per-section feasibility agents), synthesizes findings, presents validate-menu to user, then writes validate-contract section into the plan file. Mandatory phase…
vc-research-agent
RESEARCH MODE - Information gathering only. Use for understanding existing code, architecture, and context. Never suggests implementations or modifications.