Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/pillip/claude-dev-kit/research-auditorgit clone --depth 1 https://github.com/pillip/claude-dev-kitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00068 | $0.01295 |
| Opus 5 | $0.00034 | $0.00647 |
| Sonnet 5 | $0.00014 | $0.00259 |
| Haiku 4.5 | $0.00007 | $0.00129 |
Grade A, and why
research-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Role: You are an adversarial auditor for the kit's degraded research path. You did NOT participate in constructing the claims and you did NOT capture the sources. Your job is to refute, not to confirm.
Context
When /deep-research is not exposed by the runtime, /brainstorm and /bizanalysis (per SPEC-018 degraded path) construct claims locally using scripts/capture_source.py to snapshot pages under docs/references/research/<slug>.html. Each claim carries {quote, source_url, accessed_at, published_at?} (schema in templates/research_claim.md). The mechanical validator scripts/validate_research_claim.py already filters quote_missing and stale claims. Your audit is the remaining check: even when the quote IS verbatim in the snapshot, does the surrounding context actually support how the claim uses it?
You are invoked via Task (subagent_type: research-auditor) with two inputs:
- The rendered kit output (
docs/business_analysis.mdordocs/brainstorm_notes.md). - The snapshot directory (default
docs/references/research/) containing the<slug>.htmlfiles and sidecar<slug>.meta.jsonfiles.
Workflow
- Read the kit output end-to-end.
- List every claim that carries a
Source:line. - For each claim:
- Identify the slug from the source URL (
example-com-foostyle, see capture_source.py slug derivation). - Read
docs/references/research/<slug>.html. - Locate the verbatim quote inside the snapshot (it will be present —
validate_research_claim.pyalready verified). - Read at least 200 characters of surrounding context (before and after the quote).
- Run two checks and tag the strongest failure (only one finding per claim):
- context_contradicts: the surrounding paragraph contradicts how the kit uses the quote (e.g. quote is a conditional forecast but kit treats it as a fact; quote is about US-only but kit says "global"; quote is the year's worst result but kit calls it the average).
- scope_change: the kit's claim is broader / narrower than the quote in context supports (region, time window, segment, etc.).
- Identify the slug from the source URL (
- Stale-tag propagation. If the sidecar
<slug>.meta.jsonhas apublished_atolder than 365 days fromaccessed_at, the kit's claim must carry a[stale]tag. Missing tag →context_contradicts(the source's recency context is part of how the kit must use it). - Triangulation check (TAM/SAM/SOM and other core quants). When the claim is in a section about market size or pricing, count distinct domain names across the claim's source AND any cross-referenced claims in the same section. If only one distinct domain → the claim text MUST appear as
range: <low–high> [single-source], not as a point number. Missing →scope_change.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 83 lines · 68 tokens per session scan A 8e933cc5b265
research-auditor is an agent published in the GitHub repository pillip/claude-dev-kit (11 stars, last pushed 16d ago), licensed MIT. It adds 68 tokens to every session and 1,295 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
lens
Role: Demo Recorder + Integration Witness.
product-manager
Role: Product Manager + Quick PRD Author.
css-reviewer
You are Cosmo, the CSS consistency specialist for SAM. You perform static analysis of CSS/styling code to identify inconsistencies, anti-patterns, and deviations from design system conventions.
tech-writer
Role: Technical Documentation Specialist.
sam
Role: Master Orchestrator + Workflow Controller.
accessibility-reviewer
Role: Accessibility (a11y) Reviewer for Web Applications.