client-scanner

client-scanner is an agent for coding agents from martineserios/thebrana. It costs 44 tokens per session (1,009 once invoked), scanned B, original, MIT.

A diagnostic agent that scans an unfamiliar client project, identifies its programming stack and structure, and checks alignment with a 28-item project checklist.

In plain words
What is it for?
Use it to inspect manifests, source and test directories, configuration, continuous integration files, Git setup, project instructions, and related checklist items without changing files.
Why use it?
It gives a structured view of what the project contains and which expected practices or files are present, partial, or missing.

Agent

Part of the brana plugin — 18 skills, 4 commands, 14 agents, 13 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/martineserios/thebrana/client-scanner
Clone the repo
git clone --depth 1 https://github.com/martineserios/thebrana

Or install brana, the plugin that ships this one along with the rest of its 18 skills, 4 commands, 14 agents, 13 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for client-scanner

README.md
[![agentmods](https://agentmods.dev/badge/agents/martineserios/thebrana/client-scanner.svg)](https://agentmods.dev/agents/martineserios/thebrana/client-scanner)
Your own site
<a href="https://agentmods.dev/agents/martineserios/thebrana/client-scanner"><img src="https://agentmods.dev/badge/agents/martineserios/thebrana/client-scanner.svg" alt="Measured on agentmods" height="20"></a>
Per session 44 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,009 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00044 $0.01009
Opus 5 $0.00022 $0.00504
Sonnet 5 $0.00009 $0.00202
Haiku 4.5 $0.00004 $0.00101

Measured 4d ago against content hash 1a55b209204f, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

client-scanner scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

Fallback: grep `~/.claude/projects/*/memory/MEMORY.md` and `~/.claude/memory/portfolio.md` for tech matches.
system/agents/client-scanner.md · 129 lines

How it starts

The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Client Scanner

You are a project diagnostic agent. Your job is to scan a project's structure, detect its tech stack, assess brana alignment, and recall relevant portfolio patterns. You do NOT modify files — you return a structured diagnostic to the main context.

Step 1: Detect tech stack

Read manifest files to identify technologies:

for f in package.json pyproject.toml Cargo.toml go.mod composer.json Gemfile build.gradle pom.xml; do
    [ -f "$f" ] && echo "Found: $f"
done

Read the manifest to extract: language, framework, test runner, linter, bundler.

Step 2: Scan project structure

List key directories, entry points, and config files. Note:

  • Source directory layout (src/, lib/, app/, etc.)
  • Test directory (test/, tests/, tests/, spec/)
  • Config files (.eslintrc, tsconfig, pytest.ini, etc.)
  • CI/CD (.github/workflows/, .gitlab-ci.yml, etc.)

Step 3: Alignment checklist (28 items)

Check each item and classify as present / partial / missing:

Foundation (F1-F4):

  • F1: Git repo (.git/ exists)
  • F2: .claude/CLAUDE.md exists and has project description
  • F3: .claude/rules/ has relevant rules
  • F4: Conventional commits (check recent git log --oneline -5)

SDD (S1-S5):

  • S1: docs/decisions/ exists
  • S2: At least one ADR in docs/decisions/
  • S3: PreToolUse hook configured
  • S4: /decide skill available
  • S5: Spec-first convention documented

TDD (T1-T4):

  • T1: Test framework configured
  • T2: Test runner works (npm test / pytest / etc.)
  • T3: TDD-Guard installed (command -v tdd-guard)
  • T4: Coverage configured

Quality (Q1-Q4):

  • Q1: Linter configured
  • Q2: Formatter configured
  • Q3: CI pipeline exists
  • Q4: Security scanning

PM & Memory (P1-P5):

  • P1: GitHub Issues or PM integration
  • P2: ReasoningBank patterns stored
  • P3: Portfolio entry in ~/.claude/memory/portfolio.md
  • P4: Pattern recall works
  • P5: MEMORY.md hygiene (under 200 lines, no directives)

Verification (V1-V3):

  • V1: Build passes
  • V2: Tests pass
  • V3: Hooks fire correctly

Read the full file on GitHub · 129 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 129 lines · 44 tokens per session scan B 1a55b209204f

Subscribe to this mod's changes

client-scanner is an agent published in the GitHub repository martineserios/thebrana (3 stars, last pushed 2d ago), licensed MIT. It adds 44 tokens to every session and 1,009 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

archcore-auditor

Read-only documentation auditor. Use proactively for reviewing documentation health: missing relations, orphaned documents, stale statuses, coverage gaps, and consistency checks across the .archcore/ knowledge base.

archcore-ai/plugin · 43 tokens

mojiemoji-selector

Agent ツール専用: Agent(subagenttype: "mojiemoji-github:mojiemoji-selector") で呼ぶ (環境により bare "mojiemoji-selector" のみ解決する場合あり — エラー時はもう一方の形を試す)。Skill ツールではどちらの形も呼べない。GitHub markdown 用 mojiemoji スタンプのフォント・色・アニメーション・速度を選定し、貼り付け なスニペットを する。.

jozobeer/mojiemoji-plugin · 266 tokens

hub-persona-auditor

Use when an external-facing draft (briefing, card, guide) is ready for pre-publication audit. Returns 3+ persona reader simulation, 4-axis (resonance/confusion/resistance/supplement) review, and 3-tier revision proposals (mandatory/strong/recommended). Do not use for internal memos, CATALOG entries, memory files, code…

chrono-meta/forge-harness · 89 tokens

source-ingester

Специализированный агент по ингесту внешних источников (статья, книга, видео, доклад, транскрипт, конспект лекции, экспорт цитат) в персональную базу знаний Obsidian. Делегируй сюда, когда пользователь хочет «обработать статью», «положить книгу в базу», «выжать знания из видео», «обработай конспект лекции», «разбери…

jtprogru/bear-skills · 181 tokens

brain-keeper

Maintains Agentic SEO project authorial brain pages, append-only log, source provenance, and Obsidian-compatible links.

agencia-conversion/agentic-seo-skills · 29 tokens

code-explorer

Fast, read-only code search and exploration subagent. Locates files by pattern, greps for symbols or keywords, answers "where is X defined / which files reference Y" with file:line citations and short excerpts. Spawn it to protect the orchestrator's context window from large search results — it reads excerpts, not…

ggemba/squad-mcp · 116 tokens