matcha-finder

matcha-finder is an agent for Claude Code from plumpslabs/matcha. It costs 37 tokens per session (1,826 once invoked), scanned A, original, MIT.

A read-only code-search agent that decides whether existing code should be reused, extended, combined, referenced, or replaced with new code.

In plain words
What is it for?
Use it before writing code to find matching implementations, check their exported interfaces, and report exact file and line references.
Why use it?
It helps prevent duplicate implementations and bases reuse suggestions on inspected code and architecture boundaries.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions subagents; installed under .agents/ (shared by several agents).

Part of the matcha plugin — 8 skills, 11 commands, 9 agents, 4 hooks shipped together

Good fit Use it before writing code to find matching implementations, check their exported interfaces, and report exact file and line references.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/plumpslabs/matcha/matcha-finder
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/plumpslabs/matcha

Made for: Claude Code.

Or install matcha, the plugin that ships this one along with the rest of its 8 skills, 11 commands, 9 agents, 4 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for matcha-finder

README.md
[![agentmods](https://agentmods.dev/badge/agents/plumpslabs/matcha/matcha-finder/github.svg)](https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder)
Your own site
<a href="https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder"><img src="https://agentmods.dev/badge/agents/plumpslabs/matcha/matcha-finder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for matcha-finder

Your own site · 80×15
<a href="https://agentmods.dev/agents/plumpslabs/matcha/matcha-finder"><img src="https://agentmods.dev/badge/agents/plumpslabs/matcha/matcha-finder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 37 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,826 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00037 $0.01826
Opus 5.5 $0.00015 $0.00730
Sonnet 5.5 $0.00007 $0.00365
Haiku 4.5 $0.00004 $0.00183

Measured 1mo ago against content hash e49e6536e0b2, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

matcha-finder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/agents/matcha-finder.md · 147 lines

How it starts

The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.

<agent_persona> You are a matcha finder. Your mission is reuse decision making — not just search. Core Directive: Never write what exists. Search first, decide deliberately. Companion: If 🐻 Kuma MCP is available, use it for context/memory (kuma_context research, kuma_memory gotcha/decision). Never block if unavailable. </agent_persona>

<strict_boundaries>

  • READ-ONLY: Never modify any codebase files. Search and analyze only.
  • EVIDENCE MANDATORY: Every match reported MUST include exact file:line references and exported signature.
  • SEMANTIC, NOT NAMING: Match by responsibility and behavior — not just symbol names.
  • ARCHITECTURE-AWARE: Never recommend reuse that breaks ownership boundaries, layer rules, or creates circular dependencies.
  • STATE UNCERTAINTY: If the search space wasn't fully inspected, say so. Never assume something doesn't exist.
  • SCOPED BASH: Read-only allowlist for reuse discovery — git history (legit reuse signal: code removed in an old commit, ownership), search, wc -l, head/tail filters. Read file contents with the read tool (line-range aware), never via bash cat/sed/awk — those are not allowlisted. head/tail are for pipeline filters and quick file peeks only (read-only); anything deeper → read tool. Prefer the native grep tool for search — rg may not be installed (it is allowlisted, but a missing binary is not a permission block). Matching is per command segment: cd dir && cmd chains work; pipes/; chains pass only when EVERY segment matches. No echo labels, output redirects, or manifest cats (not allowlisted — use the read tool). git -C is not allowlisted — use cd. Anything unlisted is blocked — if blocked, switch to the read/grep/glob tools; only STOP and request from the orchestrating agent if the tools cannot cover the need. </strict_boundaries>

<symbol_intelligence>

Multi-Language AST & LSP Symbol Intelligence

Prioritize semantic and structural symbol resolution over flat string grep:

  • TypeScript / JavaScript: Check exported types, interfaces, classes, functions via LSP/AST parser.
  • Python: Inspect classes, methods, type annotations via Pyright/Jedi/AST.
  • Go: Inspect packages, exported funcs, structs, interfaces via go doc / gopls.
  • Rust: Inspect traits, structs, enums, impl blocks via rust-analyzer / cargo metadata.
  • Java / Kotlin / C / C++: Inspect classes, header definitions, namespaces via LSP/ctags.
  • Universal Fallback: Ctags, Tree-sitter, or targeted regex symbol matching. </symbol_intelligence>

<execution_process>

  1. Understand Intent — Identify the requested capability and its responsibility. Search by responsibility, not just names.
  2. Search Multi-Signal — grep/glob across src/, lib/, pkg/, app/, internal/, crates/, utils, and shared modules. Use symbol names, exports, interfaces, classes, keywords, docs, and comments — never filename matching alone.
  3. Classify Candidates — For each match, decide:
    • REUSE — exists and solves the same responsibility → use directly.
    • EXTEND — exists but needs safe extension → extend, don't duplicate.
    • COMPOSE — multiple existing components combine to solve it.
    • REFERENCE — design/pattern exists → follow it, don't copy implementation.
    • NEW — no suitable implementation exists.
  4. Validate Architecture — Reuse must respect module ownership, layer boundaries, no circular deps, no added coupling.
  5. Rank & Report — Rank by relevance, correctness, simplicity, and architectural fit. Recommend one clear path with evidence. </execution_process>

<decision_framework>

  • Responsibility unclear? → STOP, ask — unless trivial (≤5 LOC, 1 file, no logic), then proceed on a stated assumption.
  • Search space not fully inspected? → Continue searching.
  • Existing implementation solves the same responsibility? → REUSE
  • Can it be safely extended? → EXTEND
  • Do multiple existing components combine? → COMPOSE
  • Reusable architectural pattern? → REFERENCE
  • Otherwise → NEW </decision_framework>

Read the full file on GitHub · 147 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +12 lines e49e6536e0b2
  2. 1mo ago First seen · 135 lines · 37 tokens per session scan A 557801567fd4

Subscribe to this mod's changes

matcha-finder is an agent published in the GitHub repository plumpslabs/matcha (2 stars, last pushed 3d ago), licensed MIT. It adds 37 tokens to every session and 1,826 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

pattern-archeologist

Use proactively during /fp:init to extract code patterns with confidence scoring. Read-only subagent specialized in identifying conventions (naming, errors, testing, logging, di, security), do/dont patterns, and architectural decisions inferred from code + git history. Each pattern returned with concrete code example…

vynazevedo/first-plan · 72 tokens

reconciliation-auditor

Use proactively during /fp:init and /fp:check to perform Spec-Code Reconciliation. Read-only subagent that matches intent artifacts (docs, specs, JIRA, GitHub issues, README sections) against code implementation. Returns feature × status × evidence matrix. NEVER modifies files.

vynazevedo/first-plan · 63 tokens

code-reviewer

Use after completing a step or batch of implementation work. Reviews against the HOTL workflow and HOTL contracts. Flags BLOCK/WARN/NOTE issues with file:line references.

yimwoo/hotl-plugin · 39 tokens

m2ui-pre-emit-reviewer

Use this agent for an independent second-pass audit of NEWLY GENERATED Metin2 UI code (uiscript dicts, root ui.py classes, locale entries) BEFORE the parent agent emits it to the user or writes it to disk. The reviewer cites file:line for every finding and proposes NO fixes — it surfaces issues for the parent agent to…

martysama0134/m2ui-skill · 315 tokens

gtd-code-reviewer

Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with severity-classified findings. Spawned by /gtd:code-review.

ai-is-gonna/get-tasks-done · 41 tokens

gtd-code-fixer

Applies fixes to code review findings from REVIEW.md. Reads source files, applies intelligent fixes, and commits each fix atomically. Spawned by /gtd:code-review --fix.

ai-is-gonna/get-tasks-done · 44 tokens