investigator

investigator is an agent for coding agents from makigjuro/cloudstack-ai-plugins. It costs 18 tokens per session (756 once invoked), scanned A, original, MIT.

An evidence-gathering agent for diagnosing software problems. It collects facts from errors, logs, code, configuration, recent changes, and tests without deciding the cause.

In plain words
What is it for?
Use it to search for related errors, inspect affected code and history, check configuration, and find relevant tests.
Why use it?
It gives the main investigator organized evidence to compare possible explanations instead of relying on guesses.

Agent

Part of the dev-workflow plugin — 14 skills, 4 agents, 2 hooks, 1 MCP server shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/makigjuro/cloudstack-ai-plugins/investigator
Clone the repo
git clone --depth 1 https://github.com/makigjuro/cloudstack-ai-plugins

Or install dev-workflow, the plugin that ships this one along with the rest of its 14 skills, 4 agents, 2 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for investigator

README.md
[![agentmods](https://agentmods.dev/badge/agents/makigjuro/cloudstack-ai-plugins/investigator.svg)](https://agentmods.dev/agents/makigjuro/cloudstack-ai-plugins/investigator)
Your own site
<a href="https://agentmods.dev/agents/makigjuro/cloudstack-ai-plugins/investigator"><img src="https://agentmods.dev/badge/agents/makigjuro/cloudstack-ai-plugins/investigator.svg" alt="Measured on agentmods" height="20"></a>
Per session 18 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 756 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00018 $0.00756
Opus 5 $0.00009 $0.00378
Sonnet 5 $0.00004 $0.00151
Haiku 4.5 $0.00002 $0.00076

Measured 3d ago against content hash e5ef1c25c8a5, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

investigator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dev-workflow/agents/investigator.md · 125 lines

How it starts

The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Investigator Agent

Evidence gatherer for diagnosing problems. Collects facts systematically — does not draw conclusions.

When to Use

Run as an agent from /diagnose. Gathers evidence from multiple sources so the main agent can form and test hypotheses.

Evidence Sources

1. Error Messages & Logs

Search for error patterns in the codebase and any available logs.

# Recent git history
git log --oneline -20

# Search for related errors
grep -rn "ERROR_CODE" src/

# Search log patterns (if --logs flag)
grep -rn "{error pattern}" logs/

2. Code Analysis

Find the code related to the problem and check recent changes.

# Find related code
grep -rn "{symptom keyword}" src/

# Recent changes to affected area
git log -p --since="1 week ago" -- {affected paths}

# Find usages and dependencies
grep -rn "{function/class name}" src/

3. Configuration

Check for misconfigurations that could cause the issue.

# Check configuration files
grep -ri "{related config}" src/**/appsettings*.json src/**/*.config

# Check environment variables in code
grep -rn "GetEnvironmentVariable\|GetValue<\|process\.env\." src/

4. Tests

Find related tests and check their status.

# Find related tests
grep -rn "{feature}" tests/

# Run related tests
dotnet test --filter "{test pattern}" --no-build
# or: npm test -- --grep "{test pattern}"

5. Git History

Check for recent changes that might have introduced the problem.

# Recent commits
git log --oneline -20

# Changes to specific files
git log --oneline -- {file path}

# Blame specific lines
git blame {file} -L {start},{end}

6. Library Documentation (context7)

When the error involves a specific library, look up its docs:

  1. mcp__context7__resolve-library-id with the library name
  2. mcp__context7__query-docs with the library ID and the error message or pattern

Use this for any library in your project's dependency tree — EF Core, Express, Django, Spring Boot, React, etc.

Read the full file on GitHub · 125 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 125 lines · 18 tokens per session scan A e5ef1c25c8a5

Subscribe to this mod's changes

investigator is an agent published in the GitHub repository makigjuro/cloudstack-ai-plugins (1 stars, last pushed 1mo ago), licensed MIT. It adds 18 tokens to every session and 756 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

context-analyzer

Analyzes context usage patterns, identifies waste, and provides optimization recommendations. Use when the user asks about token usage, context efficiency, or wants to optimize their Claude Code workflow.

egorfedorov/claude-context-optimizer · 39 tokens

ia-database-guardian

Reviews database schema, constraints, and migration code for safety. Use when PRs touch migrations, data models, ID mappings, enum conversions, backfills, or persistent data.

iliaal/whetstone · 41 tokens

ia-best-practices-researcher

Researches external framework docs, version-specific constraints, and industry conventions for any technology. Use when you need authoritative external documentation.

iliaal/whetstone · 34 tokens

reviewer-opus

Deeply reviews code for bugs, logic errors, and security vulnerabilities using comprehensive reasoning to catch subtle, high-impact issues that require careful analysis.

Joncik91/ucai · 32 tokens

code-explorer

Read-only codebase explorer — searches, maps, and explains code structure. Use when a skill needs to delegate codebase exploration without risk of modification.

harnessprotocol/harness-kit · 34 tokens

financial-modeler

Use this agent for building financial models, business cases, ROI/NPV analysis, sensitivity analysis, benchmarking, and any quantitative analysis that requires structured modeling. Invoke when the task requires building or validating a financial model. Examples: "build an NPV model for the Acme acquisition", "run…

Aznatkoiny/zAI-Skills · 83 tokens