gaesup-world: Agent for Claude Code

.claude/agents/layer-auditor.md

layer-auditor is an agent for Claude Code from jigglypop/gaesup-world. It costs 61 tokens per session (994 once invoked), scanned A, original, MIT.

A read-only architecture checker for a software project, focused on layer boundaries, bridge patterns, frame-loop usage, and coding rules.

In plain words
What is it for?
Use it to audit a diff or domain for forbidden imports, incorrect layer direction, direct system construction, unsuitable frame-loop calls, and disallowed interface or console usage.
Why use it?
It finds structural and style violations in changed code without modifying the files being inspected.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter; mentions AGENTS.md.

This is jigglypop/gaesup-world's own configuration. It tells Claude Code how to work on gaesup-world itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything gaesup-world configures →

Reuse

Borrowing it

Nothing to install: this file belongs to jigglypop/gaesup-world. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/jigglypop/gaesup-world/master/.claude/agents/layer-auditor.md
Clone the repo
git clone --depth 1 https://github.com/jigglypop/gaesup-world

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for layer-auditor

README.md
[![agentmods](https://agentmods.dev/badge/agents/jigglypop/gaesup-world/layer-auditor.svg)](https://agentmods.dev/agents/jigglypop/gaesup-world/layer-auditor)
Your own site
<a href="https://agentmods.dev/agents/jigglypop/gaesup-world/layer-auditor"><img src="https://agentmods.dev/badge/agents/jigglypop/gaesup-world/layer-auditor.svg" alt="Measured on agentmods" height="20"></a>
Per session 61 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 994 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00061 $0.00994
Opus 5 $0.00030 $0.00497
Sonnet 5 $0.00012 $0.00199
Haiku 4.5 $0.00006 $0.00099

Measured today against content hash fc5af6f18e01, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

layer-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/layer-auditor.md · 49 lines

How it starts

The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.

당신은 gaesup-world의 아키텍처 감사관이다. 코드를 수정하지 않는다 — 위반 목록만 보고한다. demo-dist/, dist/, node_modules/, public/은 절대 검색하지 않는다.

검사 규칙 (번호로 보고)

레이어

  1. Layer 1 순수성: src/core/**/core/** 파일의 react, zustand, @react-three/fiber import. React 상태 관리(useState/useEffect/useMemo/스토어 구독)가 core에 들어가면 위반. (three, @dimforge/rapier3d*, @react-three/rapier는 허용.)
    • Grep: from ['"]react['"]|from ['"]zustand|from ['"]@react-three/fiber (glob src/core/**/core/**)
  2. boundaries 방향: Layer 3 → Layer 2 → Layer 1만 허용. components는 controllers/hooks/core만 import 가능. Layer 1 → Layer 2 역방향 import는 즉시 확정 위반.
  3. 브리지 패턴: hooks/components가 Layer 1 System 클래스를 직접 new 하면 위반 — CoreBridge/BridgeFactory.getOrCreate 또는 useManagedEntity 경유가 표준. 브리지 서브클래스가 buildEngine/executeCommand/createSnapshot 외의 public 표면을 늘리는지도 확인.
  4. 프레임 루프: 도메인 코드의 raw useFrame 직접 사용(의심) — useBaseFrame/useManagedEntity/useThrottledFrame(boilerplate/hooks) 경유가 관례. boilerplate 내부는 예외.

스타일 (AGENTS.md 강제 규칙, 변경 파일에만 적용)

  1. interface 선언 (export type만 허용; 예외: src/blueprints/**와 기존 boilerplate 코드는 보고만).
    • Grep: ^\s*(export\s+)?interface\s
  2. console.log|console.warn|console.error 사용 — logger 유틸 경유해야 함.
  3. tsx 파일 안의 type/interface 정의 (types.ts 분리 규칙).
  4. 코드 본문 주석(함수 선언부 JSDoc 제외), 이모지.
  5. 전체 스토어 구독: use<X>Store() 를 selector 없이 호출.
    • Grep: use\w+Store\(\)\s*[;.]
  6. Magic number(반복 사용되는 리터럴 수치가 UPPER_SNAKE_CASE 상수 없이 존재).
  7. 파일 크기 상한 초과: 컴포넌트 200줄 / 엔진·코어 500줄 / 유틸 150줄.

스냅샷/할당

  1. createSnapshot 또는 프레임 경로 안의 new THREE.* / 객체 리터럴 대량 생성 — 스냅샷은 getCachedSnapshot + in-place .set() 갱신, 임시 객체는 클래스 필드(tempQuaternion 패턴)여야 함.

방법

  • 대상이 diff면 git diff --name-only (또는 지정된 base)로 변경 파일을 얻어 그 파일들만 검사한다. 스타일 규칙(5-11)은 기존 코드가 아니라 변경된 줄에만 적용해 소음을 줄인다.
  • 기계적 확인은 Grep, 판단이 필요한 것만 Read. 규칙 3·10·12는 반드시 코드를 읽고 맥락 확인 후 판정한다.

출력 형식

위반 없음이면 "위반 없음" 한 줄. 있으면 확정/의심을 구분해 파일:줄 + 규칙 번호 + 한 줄 근거:

[확정] 규칙1 — src/core/foo/core/Bar.ts:12 — zustand import (Layer 1)
[의심] 규칙12 — src/core/baz/bridge/BazBridge.ts:88 — createSnapshot 내 new Vector3, 프레임당 할당 가능성

Read the full file on GitHub · 49 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 49 lines · 61 tokens per session scan A fc5af6f18e01

Subscribe to this mod's changes

layer-auditor is an agent published in the GitHub repository jigglypop/gaesup-world (22 stars, last pushed yesterday), licensed MIT. It adds 61 tokens to every session and 994 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.

Related

Other agents, from other repositories

cpp-reviewer

Expert C++ code reviewer specializing in memory safety, modern C++ idioms, concurrency, and performance. Use for all C++ code changes. MUST BE USED for C++ projects.

affaan-m/ECC · 41 tokens

reviewer

Read-only reviewer for an SDD implementation — checks that the change satisfies the acceptance criteria it claims (stage 1) and meets quality/convention/edge-case bars (stage 2). Use after a task (or the whole feature) reaches GREEN, before it's considered done. It reads the diff and the upstream artifacts and reports…

genkovich/sdd · 81 tokens

atomic-auditor

Final gate for a finished implementation. Dispatched exactly once after the implement-review loop goes green, never per iteration. Never touches the repo; its one write is the audit report into the task scratchpad. Audits the delivered work as a whole: cumulative spec compliance, cross-iteration coherence…

damusix/atomic-claude · 169 tokens

bt6-pr-auditor

Reviews one pull request in a BT6 codebase for correctness, research integrity, security, verification quality, and merge readiness.

elder-plinius/T3MP3ST · 32 tokens

Reviewer

Mandatory fast reviewer: validates every agent delegation output before acceptance. Checks acceptance criteria, file partitions, regressions, type safety, security basics.

monkilabs/opencastle · 30 tokens

security-auditor

Use this agent when reviewing local code changes or pull requests to identify security vulnerabilities and risks. This agent should be invoked proactively after completing security-sensitive changes or before merging any PR.

NeoLabHQ/context-engineering-kit · 40 tokens