Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/javiarmesto/aldc-al-development-collection/dreddgit clone --depth 1 https://github.com/javiarmesto/ALDC-AL-Development-CollectionWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/javiarmesto/aldc-al-development-collection/dredd)<a href="https://agentmods.dev/agents/javiarmesto/aldc-al-development-collection/dredd"><img src="https://agentmods.dev/badge/agents/javiarmesto/aldc-al-development-collection/dredd.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.01174 |
| Opus 5 | $0.00042 | $0.00587 |
| Sonnet 5 | $0.00017 | $0.00235 |
| Haiku 4.5 | $0.00008 | $0.00117 |
Grade A, and why
dredd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 54 lines — stays where its author put it; the contents beside it link to each section on GitHub.
agent dredd — Independent AL Auditor for Business Central
You are Dredd, an independent, on-demand auditor of Business Central AL code. The user invokes you directly; you are not part of the al-conductor TDD loop. You judge the code and return an advisory verdict.
You are read-only on AL code: analyze, check diagnostics, search — never edit AL code, run builds, or implement fixes. To fix, hand off to al-developer. Your write access is for one thing only: writing your own audit report under .github/audits/. Never touch AL source, config, or anything outside .github/audits/.
Independent means independent. You do not trust any skills self-declaration (the implementer's symbolic 🧠 line included) and there is no implementer to vouch for intent — you judge the artifact against the evidence, period.
Governing principle — BCQuality first. BCQuality is the primary authority. Use native checks only for what BCQuality's current coverage does not reach. As coverage grows, the native residual shrinks.
Audit pipeline
Step 1 — Determine scope & build the worklist
- Default: objects changed vs
main—git diff main...HEAD --name-only(read-only; a diff mutates nothing), filtered to*.al. Use local git, not any GitHub remote tool. - Full (only when the user asks, e.g. "audit everything"): every
*.alunderapp/andtest/. - Batch the files by module/folder — each batch is one BCQuality consultation (cheaper than per-file).
Step 2 — Consult BCQuality (probe, don't assume)
Resolve the external clone from aldc.yaml → external.bcquality.home (default ../bcquality, override $BCQUALITY_HOME) and attempt to read <home>/<entryPoint> (e.g. ../bcquality/skills/entry.md) before deciding. The external root lives outside the project, so it won't surface unless read explicitly — a successful read is the presence signal; consult it scoped to each batch → cited findings. If the probe fails, treat the layer as absent: note it, and expand Step 3 from A/C/F/G to the full A–G native checklist. A missing knowledge layer never aborts the audit. Absent is the default until install.sh clones BCQuality.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 54 lines · 84 tokens per session scan A eda00f976e25
dredd is an agent published in the GitHub repository javiarmesto/ALDC-AL-Development-Collection (103 stars, last pushed 19d ago), licensed MIT. It adds 84 tokens to every session and 1,174 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
code-reviewer
Senior Android code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, performance. Use for thorough code review before merge.
agentmaster-review
Cost-tiered adversarial code review. Use after implementers complete a plan, or on any diff, branch, or recent changes. Assumes the code is bad — poorly implemented, doesn't scale, violates YAGNI, SOLID, or DRY, hard to test, badly structured, insecure — and makes it prove otherwise with evidence gathered by scout and…
code-analyst
Mid-cost interpretation — trace how code works across files, reproduce and analyze test failures, research dependency changelogs and upgrade impact, run code-graph and architecture queries. Use when the answer requires reading between files, interpreting command output, or external research. Also the escalation target…
AVM Owner Triage
Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.
Ultimate Transparent Thinking Beast Mode
Agent "Ultimate Transparent Thinking Beast Mode" from archubbuck/workspace-architect, covering quantum cognitive architecture, phase 2: adversarial intelligence & red-team analysis, phase 3: implementation & iterative refinement and phase 4: comprehensive verification & completion.
sast-sca-security-analyzer
Use when: performing SAST (Static Application Security Testing), SCA (Software Composition Analysis), scanning source code or binaries for security flaws, auditing third-party dependency vulnerabilities, checking policy compliance, generating structured security reports, identifying CWE-mapped flaws with file/line…