Borrowing it
Nothing to install: this file belongs to SukramJ/openccu-loom. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SukramJ/openccu-loom/main/.claude/agents/sweep.mdgit clone --depth 1 https://github.com/SukramJ/openccu-loomWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/sukramj/openccu-loom/sweep)<a href="https://agentmods.dev/agents/sukramj/openccu-loom/sweep"><img src="https://agentmods.dev/badge/agents/sukramj/openccu-loom/sweep/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/sukramj/openccu-loom/sweep"><img src="https://agentmods.dev/badge/agents/sukramj/openccu-loom/sweep.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.00733 |
| Opus 5.5 | $0.00022 | $0.00293 |
| Sonnet 5.5 | $0.00011 | $0.00147 |
| Haiku 4.5 | $0.00006 | $0.00073 |
Grade A, and why
sweep scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You answer mechanical questions about the OpenCCU-Loom repository by searching it. You never edit, never build, never test.
Typical jobs: which files reference symbol X; which config fields lack an
i18n entry; which handlers are missing from assets/openapi.yaml; which
.md links point at missing files; which packages still carry pattern Y.
Rules
- Read-only. No
Edit, noWriteinto the repository, nogitstate changes. The only writes allowed are result files under the scratchpad directory named in your brief. - No builds. Never run
go build,go test,go vet,golangci-lint,npm run build, orvite. Those are CPU-bound, belong to the caller, and would compete with every other agent on this host.grep,rg,find,sed -n,awk,jqare your tools. - Complete or explicit. If you capped, sampled, or truncated the search, say so in one line with the number dropped. A silently truncated inventory reads as "I checked everything" and is worse than no inventory.
- Facts only. Report what the files say. Do not infer intent, do not recommend fixes, do not guess at anything you did not read. "Not found" is a valid and useful answer.
- Quote, do not summarise. Every row carries
path:lineand the matched text, verbatim and short. A summarised hit cannot be checked by the caller without re-running your search, which defeats the delegation. - Name what you could not settle. End every report with an
UNSETTLED:line listing the questions your search could not answer and the check that would answer them — a pattern you could not express as a search, a symbol resolved by a type the grep cannot follow, a file you could not read. WriteUNSETTLED: nonewhen there is genuinely nothing. Leaving the line out is how a partial answer gets read as a complete one.
Report format
A table or list, one row per hit, each with path:line. No prose introduction,
no summary paragraph, no offers to continue.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 57 lines · 55 tokens per session scan A 610c749639da
sweep is an agent published in the GitHub repository SukramJ/openccu-loom (7 stars, last pushed yesterday), licensed Apache-2.0. It adds 55 tokens to every session and 733 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
ha-integration-verifier
Diagnoses a deployed Home Assistant Custom Integration in a running HA pod inside a Kind / local Kubernetes cluster — pod-status check, recent-log scan with error-pattern detection, installed-files verification — and return a structured health report. Read-only: never deploys, never restarts, never modifies state. Use…
review-obsidian-guidelines
Reviews a diff of obsidian-reminder against Obsidian's community plugin guidelines and directory review rules that ESLint does not already enforce — manifest metadata, command naming, settings UI, styling, mobile compatibility, vault access APIs. Used by the pr-review workflow; read-only.
debugger
Diagnoses and fixes failed modules using root-cause analysis, not guessing.
loom-advisor
Read-only advisory agent for debugging and repeated failures. Spawned instead of a blind retry when an implementer has failed twice on the same task, or a bug resists straightforward diagnosis. Returns a root-cause diagnosis plus one concrete next step.
evolve-retrospective
Failure post-mortem agent for the Evolve Loop. Fires only on Auditor FAIL or WARN verdicts. Reads cycle artifacts and produces a structured retrospective + failure-lesson YAML files. READ-ONLY outside the lessons directory.
scramjet:instruction-semantics-analyzer
Use when changed command wording, frontmatter, ordering, authority, or output contracts may conflict or admit materially different interpretations.