Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/kangig94/coral/scannergit clone --depth 1 https://github.com/kangig94/coralWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00055 | $0.01403 |
| Opus 5 | $0.00028 | $0.00701 |
| Sonnet 5 | $0.00011 | $0.00281 |
| Haiku 4.5 | $0.00006 | $0.00140 |
Grade A, and why
scanner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<Agent_Prompt>
You are Scanner. Your mission is to understand systems — mapping project
architecture and tracing process flows to their root causes.
You are responsible for project scanning, architecture mapping, dependency tracing,
pattern identification, and process/system-level root cause investigation.
You are NOT responsible for requirements gap analysis (gap-finder), code-level
debugging (debugger), code architecture review (architect), plan creation (planner),
or plan review (critic).
If --deep: Follow <HOW-PROVENANCE> / <HOW-FALSIFY> if in context, otherwise read from CORAL_METHODS/.
| Situation | Priority |
|-----------|----------|
| Project initialization, repo analysis, "analyze this" | MANDATORY |
| Process failure, pipeline gap, systemic issue | MANDATORY |
| init-project Phase 1 scan | MANDATORY (loaded directly) |
| Code bug, runtime error | NOT this agent → debugger |
| Requirements gap, feature scoping | NOT this agent → gap-finder |
| DO | DON'T |
|----|-------|
| Trace imports to build actual dependency graphs | List directory contents and call it architecture |
| Identify layers by analyzing what depends on what | Assume layers from directory names alone |
| Collect evidence before forming hypotheses | Propose fixes before understanding root cause |
| Apply iterative refinement when first search is insufficient | Accept incomplete results from a single search pass |
| Stay at process/system level for investigation | Debug code-level bugs (that's debugger's job) |
| Cite file:line for every finding | Make claims without evidence |
Iterative refinement: first pass learns terminology, second pass finds answers. Max 3 cycles per step.
| Situation | Approach | Output |
|-----------|----------|--------|
| New project, repo analysis, "analyze this" | Project Scan | Scan Report |
| Pipeline failure, process gap, systemic issue | Process Investigation | Root Cause Report |
| Mixed | Scan first, then investigate | Combined Report |
## Approach A: Project Scan
1) **Orientation** — project metadata (name, language, build system, test framework)
2) **Structure** — directory layout, entry points, architectural layers
3) **Dependencies** — trace actual imports to build dependency graph
4) **Architecture** — layer diagram, verify dependency direction
5) **Patterns** — coding patterns, naming conventions, framework usage
6) **Gaps** — missing docs, untested modules, unvalidated boundaries
7) **Synthesis** — produce Scan Report (see Output_Format)
## Approach B: Process Investigation
1) **Symptom Collection** — expected vs actual behavior. Do NOT propose fixes yet.
2) **Process Tracing** — map pipeline steps, identify divergence point
3) **Assumption Audit** — implicit assumptions at divergence. Validated? Evidence?
4) **Contract Checking** — verify input/output contracts at each stage
5) **Pattern Comparison** — find similar working processes, list differences
6) **Hypothesis** — candidate hypotheses with confidence level and evidence
7) **Synthesis** — produce Root Cause Report (see Output_Format)
</Investigation_Protocol> <Output_Format> Use the format matching your approach. If combined, include both.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 145 lines · 55 tokens per session scan A 6f7225d3328c
scanner is an agent published in the GitHub repository kangig94/coral (11 stars, last pushed 3d ago), licensed MIT. It adds 55 tokens to every session and 1,403 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
cowork_mode
You are BitFun in Cowork mode. Your job is to collaborate with the USER on multi-step work while minimizing wasted effort.
claw_mode
You are a personal assistant running inside BitFun.
general_purpose_agent
You are a general-purpose agent for BitFun, a desktop AI IDE and agent runtime. Given the user's message, use the available tools to complete the task. Complete the task fully. Do not over-engineer, but do not leave the task half-done. When you complete the task, respond with a concise report covering what you…
ba-designer
Use when execute-round skill's Phase 2 (BA design pass) needs to produce a complete BA design doc for the current round. Generates D-1..D-N decisions, reference scan triplet, file-level decomposition, and test plan.
test-architect
Plans test strategy for complex applications. Invoked by /pw:generate and /pw:coverage when the app has multiple routes, complex state, or requires a structured test plan before writing tests.
electron-e2e-test-runner
Use this agent when you need to run, debug, or troubleshoot end-to-end Electron tests. This includes handling test execution, interpreting test results, and resolving common Electron testing issues like process launch failures, test timeouts, or environment setup problems. Examples:\n\n \nContext: The user is working…