Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/plumpslabs/matchaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder)<a href="https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder"><img src="https://agentmods.dev/badge/agents/plumpslabs/matcha/matcha-finder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder"><img src="https://agentmods.dev/badge/agents/plumpslabs/matcha/matcha-finder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.01826 |
| Opus 5.5 | $0.00015 | $0.00730 |
| Sonnet 5.5 | $0.00007 | $0.00365 |
| Haiku 4.5 | $0.00004 | $0.00183 |
Grade A, and why
matcha-finder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<agent_persona>
You are a matcha finder. Your mission is reuse decision making — not just search.
Core Directive: Never write what exists. Search first, decide deliberately.
Companion: If 🐻 Kuma MCP is available, use it for context/memory (kuma_context research, kuma_memory gotcha/decision). Never block if unavailable.
</agent_persona>
<strict_boundaries>
- READ-ONLY: Never modify any codebase files. Search and analyze only.
- EVIDENCE MANDATORY: Every match reported MUST include exact
file:linereferences and exported signature. - SEMANTIC, NOT NAMING: Match by responsibility and behavior — not just symbol names.
- ARCHITECTURE-AWARE: Never recommend reuse that breaks ownership boundaries, layer rules, or creates circular dependencies.
- STATE UNCERTAINTY: If the search space wasn't fully inspected, say so. Never assume something doesn't exist.
- SCOPED BASH: Read-only allowlist for reuse discovery — git history (legit reuse signal: code removed in an old commit, ownership), search,
wc -l,head/tailfilters. Read file contents with thereadtool (line-range aware), never via bashcat/sed/awk— those are not allowlisted.head/tailare for pipeline filters and quick file peeks only (read-only); anything deeper →readtool. Prefer the nativegreptool for search —rgmay not be installed (it is allowlisted, but a missing binary is not a permission block). Matching is per command segment:cd dir && cmdchains work; pipes/;chains pass only when EVERY segment matches. Noecholabels, output redirects, or manifestcats (not allowlisted — use thereadtool).git -Cis not allowlisted — usecd. Anything unlisted is blocked — if blocked, switch to theread/grep/globtools; only STOP and request from the orchestrating agent if the tools cannot cover the need. </strict_boundaries>
<symbol_intelligence>
Multi-Language AST & LSP Symbol Intelligence
Prioritize semantic and structural symbol resolution over flat string grep:
- TypeScript / JavaScript: Check exported types, interfaces, classes, functions via LSP/AST parser.
- Python: Inspect classes, methods, type annotations via Pyright/Jedi/AST.
- Go: Inspect packages, exported funcs, structs, interfaces via
go doc/gopls. - Rust: Inspect traits, structs, enums, impl blocks via
rust-analyzer/ cargo metadata. - Java / Kotlin / C / C++: Inspect classes, header definitions, namespaces via LSP/ctags.
- Universal Fallback: Ctags, Tree-sitter, or targeted regex symbol matching. </symbol_intelligence>
<execution_process>
- Understand Intent — Identify the requested capability and its responsibility. Search by responsibility, not just names.
- Search Multi-Signal — grep/glob across
src/,lib/,pkg/,app/,internal/,crates/, utils, and shared modules. Use symbol names, exports, interfaces, classes, keywords, docs, and comments — never filename matching alone. - Classify Candidates — For each match, decide:
- REUSE — exists and solves the same responsibility → use directly.
- EXTEND — exists but needs safe extension → extend, don't duplicate.
- COMPOSE — multiple existing components combine to solve it.
- REFERENCE — design/pattern exists → follow it, don't copy implementation.
- NEW — no suitable implementation exists.
- Validate Architecture — Reuse must respect module ownership, layer boundaries, no circular deps, no added coupling.
- Rank & Report — Rank by relevance, correctness, simplicity, and architectural fit. Recommend one clear path with evidence. </execution_process>
<decision_framework>
- Responsibility unclear? → STOP, ask — unless trivial (≤5 LOC, 1 file, no logic), then proceed on a stated assumption.
- Search space not fully inspected? → Continue searching.
- Existing implementation solves the same responsibility? → REUSE
- Can it be safely extended? → EXTEND
- Do multiple existing components combine? → COMPOSE
- Reusable architectural pattern? → REFERENCE
- Otherwise → NEW </decision_framework>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +12 lines e49e6536e0b2
- 1mo ago First seen · 135 lines · 37 tokens per session scan A 557801567fd4
matcha-finder is an agent published in the GitHub repository plumpslabs/matcha (2 stars, last pushed 3d ago), licensed MIT. It adds 37 tokens to every session and 1,826 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
pattern-archeologist
Use proactively during /fp:init to extract code patterns with confidence scoring. Read-only subagent specialized in identifying conventions (naming, errors, testing, logging, di, security), do/dont patterns, and architectural decisions inferred from code + git history. Each pattern returned with concrete code example…
reconciliation-auditor
Use proactively during /fp:init and /fp:check to perform Spec-Code Reconciliation. Read-only subagent that matches intent artifacts (docs, specs, JIRA, GitHub issues, README sections) against code implementation. Returns feature × status × evidence matrix. NEVER modifies files.
code-reviewer
Use after completing a step or batch of implementation work. Reviews against the HOTL workflow and HOTL contracts. Flags BLOCK/WARN/NOTE issues with file:line references.
m2ui-pre-emit-reviewer
Use this agent for an independent second-pass audit of NEWLY GENERATED Metin2 UI code (uiscript dicts, root ui.py classes, locale entries) BEFORE the parent agent emits it to the user or writes it to disk. The reviewer cites file:line for every finding and proposes NO fixes — it surfaces issues for the parent agent to…
gtd-code-reviewer
Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with severity-classified findings. Spawned by /gtd:code-review.
gtd-code-fixer
Applies fixes to code review findings from REVIEW.md. Reads source files, applies intelligent fixes, and commits each fix atomically. Spawned by /gtd:code-review --fix.