Environment Inspector

Environment Inspector is an agent for Claude Code from Snowflake-Labs/cocoplus. It costs 41 tokens per session (389 once invoked), scanned A, original, MIT.

A background scanner for a Snowflake environment, which is the collection of databases, schemas, tables, views, procedures, and permissions in Snowflake. It creates a timestamped snapshot when inspector mode is enabled.

In plain words
What is it for?
It is for listing schemas, tables, views, procedures, and current-user grants, then saving the results in a snapshot file.
Why use it?
It provides a saved record of the environment without changing it. This makes the current structure and access permissions easier to inspect later, including any queries that failed.

Agent for Claude Code

Written for Claude Code: background in frontmatter. Also seen: model in frontmatter; mentions AGENTS.md.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/snowflake-labs/cocoplus/environment-inspector
Clone the repo
git clone --depth 1 https://github.com/Snowflake-Labs/cocoplus

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Environment Inspector

README.md
[![agentmods](https://agentmods.dev/badge/agents/snowflake-labs/cocoplus/environment-inspector.svg)](https://agentmods.dev/agents/snowflake-labs/cocoplus/environment-inspector)
Your own site
<a href="https://agentmods.dev/agents/snowflake-labs/cocoplus/environment-inspector"><img src="https://agentmods.dev/badge/agents/snowflake-labs/cocoplus/environment-inspector.svg" alt="Measured on agentmods" height="20"></a>
Per session 41 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 389 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00041 $0.00389
Opus 5 $0.00020 $0.00195
Sonnet 5 $0.00008 $0.00078
Haiku 4.5 $0.00004 $0.00039

Measured 6d ago against content hash 8947a77b945b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

Environment Inspector scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cortex/agents/environment-inspector.agent.md · 43 lines

What it actually says

You are the CocoPlus Environment Inspector background agent.

Your Role

  • Read .cocoplus/modes/ and confirm inspector.on is present before doing any scan.
  • Inspect the current Snowflake environment with the same scope as $inspect.
  • Write exactly one timestamped snapshot file to .cocoplus/snapshots/.

Required Behavior

  1. If .cocoplus/ does not exist or inspector.on is absent, stop without making changes.
  2. Execute the standard environment scan:
    • SHOW SCHEMAS
    • SHOW TABLES IN SCHEMA ...
    • SHOW VIEWS IN SCHEMA ...
    • SHOW PROCEDURES IN SCHEMA ...
    • SHOW GRANTS TO USER CURRENT_USER()
  3. Continue past individual query failures and record them in the snapshot.
  4. Write the result to .cocoplus/snapshots/[timestamp]-env.md.
  5. Do not modify lifecycle artifacts, AGENTS.md, or mode flags.

Constraints

  • Your only write target is .cocoplus/snapshots/.
  • If asked to edit files outside .cocoplus/snapshots/, refuse.
  • Keep the snapshot concise and grouped by schemas, tables, views, procedures, permissions, and scan notes.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 43 lines · 41 tokens per session scan A 8947a77b945b

Subscribe to this mod's changes

Environment Inspector is an agent published in the GitHub repository Snowflake-Labs/cocoplus (720 stars, last pushed 2d ago), licensed MIT. It adds 41 tokens to every session and 389 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.