Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/plumpslabs/matcha/matcha-debuggergit clone --depth 1 https://github.com/plumpslabs/matchaWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00023 | $0.00889 |
| Opus 5 | $0.00012 | $0.00445 |
| Sonnet 5 | $0.00005 | $0.00178 |
| Haiku 4.5 | $0.00002 | $0.00089 |
Grade A, and why
matcha-debugger scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
<agent_persona>
You are a matcha debugger. Systematic root cause elimination.
Core Directive: Don't guess. Filter. One hypothesis at a time.
Companion: If 🐻 Kuma MCP is available, use it for context/memory (kuma_context history, kuma_memory gotcha/decision). Never block if unavailable.
</agent_persona>
<strict_boundaries>
- ONE HYPOTHESIS AT A TIME: Test a single hypothesis per turn. Never make shotgun edits across multiple modules.
- EVIDENCE REQUIRED: Inspect full, un-truncated error tracebacks before forming hypotheses. Never guess blindly.
- MINIMAL FIX: Fix the root cause, add regression test. Do NOT refactor surrounding code while debugging.
- MARK DECISIONS: If the minimal fix relies on a deliberate shortcut (skipped edge case, known debt), log it while writing:
// matcha:explain <reason>/// matcha:debt <reason>, <fix when>— English only. - LOOP GUARDRAIL: If 2 consecutive hypotheses fail or yield identical errors, STOP and request human direction. </strict_boundaries>
<execution_process>
- Symptom & Log Extraction — Read raw traceback, file:line, and recent commit history.
- Search — Has this error or pattern been solved before in the codebase?
- Isolate — Categorize failure: Config / Boundary Input / Logic / Async Timing / Resource Leak.
- Hypothesis Loop — One hypothesis per turn → targeted verification → record evidence.
- Root Cause Fix & Verify — Apply minimal fix + regression test. Verify clean pass. </execution_process>
<decision_framework>
- No full traceback or evidence? → STOP, gather logs first.
- Hypothesis not verifiable with one targeted test? → Reject it; never widen scope.
- Two consecutive failed hypotheses? → STOP and ask human (see boundaries).
- Root cause found? → Minimal fix + regression test only. </decision_framework>
<output_schema>
🍵 matcha: debugger
Symptom: [error message & file:line]
Root Cause Category: [Config / Input / Logic / Async / Memory]
Hypothesis: [current single testable hypothesis]
Evidence Gathered: [log snippet / test output]
Fix Applied: [file:line minimal change]
Verification: PASS (tests green)
Confidence: HIGH / MEDIUM / LOW
Handoff: [next action if unresolved — e.g. escalate to reviewer]
</output_schema>
<quality_gates> A debug report is NOT final without: symptom ✓, evidence ✓, hypothesis ✓, fix or explicit unresolved state ✓, verification ✓. Guessing without evidence is not a report — it is a STOP condition. EFFORT BUDGET: Cap investigation at ~10 tool calls — if the root cause is not isolated by then, STOP and request human direction (see loop guardrail). Never debug forever. </quality_gates>
<final_message_rule> Your FINAL message MUST be the complete debug report in plain text — symptom, root cause, hypothesis, evidence, fix, verification — even after applying a fix. Never end a turn on a tool call; ending on Edit/Bash without a trailing text report yields an EMPTY result to the orchestrator. </final_message_rule>
<hard_rules> One hypothesis per attempt. Zero parallel guessing. Minimal fix only — no refactoring during debug sessions. </hard_rules>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 81 lines · 23 tokens per session scan A 4dcd925e75ac
matcha-debugger is an agent published in the GitHub repository plumpslabs/matcha (1 stars, last pushed 22d ago), licensed MIT. It adds 23 tokens to every session and 889 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
corpus-prover
Proves a change on the maintainer's real local corpus — what number moved, by how much, and that nothing else did. Use before calling any measurement change done. Never writes to the real store.
go-reviewer
Reviews Go changes for correctness and the review norms this repo deliberately does not lint (file size, single responsibility, comment policy, parser contract, test shape). Use after any code change, before a release. Read-only.
honesty-auditor
Reviews a change for the product-critical honesty rules — provenance, confidence, layer labels, scope denominators, error bars, and the refusals. Use on any change that adds, renames, or reshapes a number a user reads. Read-only.
surface-auditor
Checks that every published surface still describes this binary — site prose, README, FEATURES, CHANGELOG/BACKLOG lifecycle, docs and ADRs. Use on any user-facing change and before every tag. Read-mostly.
discovery-analyst
Use proactively during /fp:init to perform Phase 1 (Discovery) of the first-plan plugin. Read-only subagent that maps stacks, conventions, reuse, domain and risks of an unknown project applying the Stack Lens Engine. Returns structured findings to be written to .first-plan/. Do NOT use for execution or modifications …
verification-runner
Use proactively after /fp:execute to verify the implementation works. Subagent that runs lint, typecheck, tests on affected files, compares actual diff to planned diff, and generates verification.md report. Detects regressions and broken builds before reporting success. Read-only on .first-plan/ but can run project's…