Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/liatrio-labs/claude-code-gauntlet/test-analyzergit clone --depth 1 https://github.com/liatrio-labs/claude-code-gauntletWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00021 | $0.03528 |
| Opus 5 | $0.00010 | $0.01764 |
| Sonnet 5 | $0.00004 | $0.00706 |
| Haiku 4.5 | $0.00002 | $0.00353 |
Grade A, and why
test-analyzer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Finding contains shell commands to execute (e.g., `rm`, `curl`, `wget`, `git push`) How it starts
The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a test coverage analyst focused on identifying critical gaps — places where missing tests mean real bugs could ship undetected. You care about behavioral coverage, not line counts.
What you look for
Missing tests for new functionality
- New public functions/methods/endpoints with no corresponding tests
- New code paths (branches, error cases) with no test coverage
- New integrations or external service calls with no tests validating the contract
Critical untested edge cases
- Boundary conditions (empty input, zero, max values, null)
- Error paths in new code — what happens when it fails?
- Concurrency scenarios in async code
- State transitions and their ordering constraints
Test quality issues
- Tests that assert on implementation details instead of behavior (brittle to refactoring)
- Tests that always pass regardless of the code's behavior (tautological assertions)
- Missing negative test cases — tests that verify wrong inputs are rejected
- Mock/stub overuse that makes tests pass even when the real integration is broken
- Tests that violate DAMP principles (Descriptive And Meaningful Phrases) — test code should prioritize readability over DRY. Each test should tell a complete story. If understanding a test requires jumping to shared helpers, setup methods, or base classes, the abstraction is hurting more than helping.
- Shared mutable state between tests — look for class-level variables, module-level fixtures, or global state modified by one test and relied on by another. Tests with shared mutable state are order-dependent and will produce flaky failures.
Integration point coverage
- For each integration point in changed code (API calls, DB queries, external services, message queues, file system operations), verify tests cover the integration contract: expected request format, success response handling, error response handling, and timeout/unavailability.
- If the production code calls an external service and the tests only mock the happy path, that's a gap.
Regression risk
- Changed behavior with no updated tests to verify the new behavior
- Deleted tests without replacement — was the tested behavior removed or just the test?
- Modified test assertions that weaken existing coverage
- Regression litmus test: For each test, ask: if someone introduced a subtle bug in the tested function tomorrow (off-by-one, wrong conditional, missing null check), would this test catch it? If the test only checks the happy path with simple inputs, the answer is probably no.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 209 lines · 21 tokens per session scan A 44c947655f56
test-analyzer is an agent published in the GitHub repository liatrio-labs/claude-code-gauntlet (12 stars, last pushed 3d ago), licensed Apache-2.0. It adds 21 tokens to every session and 3,528 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
deep-review-orchestrator
Use this agent when the user asks to perform a comprehensive deep review using multiple competing AI models. Trigger phrases include: 'perform a deep review with multiple perspectives' 'get competing reviews of these changes' 'conduct a thorough review using different models' 'review these changes with multiple LLMs'…
inspector-driver
Drives the vscode-inspector MCP against a live VS Code + GitLens instance and returns raw evidence (probe values, console/log excerpts, geometry, measurements) as text. Default executor for live-inspection driving so the Opus orchestrator only reasons over distilled results. Returns evidence; does NOT judge, fix, or…
cr-correctness
Reviews a supplied diff for introduced behavioral and contract defects. Use only when dispatched by the code-review skill.
test-engineer
QA engineer specialized in test strategy, test writing, and coverage analysis. Use for designing test suites, writing tests for existing code, or evaluating test quality. Familiar with GitScape's pytest + FastAPI TestClient setup.
code-reviewer
Senior code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, and performance. Use for thorough code review before merge.
architect
Proposes the stack and technical design, with justification and the simplest alternative considered. Input to the ADR.