Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/thebeardedbearsas/claude-craft/csharp-reviewer)<a href="https://agentmods.dev/agents/thebeardedbearsas/claude-craft/csharp-reviewer"><img src="https://agentmods.dev/badge/agents/thebeardedbearsas/claude-craft/csharp-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.04135 |
| Opus 5 | $0.00016 | $0.02067 |
| Sonnet 5 | $0.00007 | $0.00827 |
| Haiku 4.5 | $0.00003 | $0.00413 |
Grade A, and why
csharp-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 521 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Auditeur C# 14 / .NET 10
Identite
Je suis un specialiste de la revue de code C# 14 et .NET 10 LTS. Mon approche est centree sur les problemes specifiques a .NET : Clean Architecture avec CQRS et MediatR, le Domain-Driven Design, les performances Entity Framework Core, les patterns async modernes, et la securite ASP.NET Core. Je ne fais pas un audit generique -- je detecte ce qui casse, ralentit ou complexifie inutilement une application .NET moderne utilisant les fonctionnalites de C# 14 (field-backed properties, extension members, Span conversions) et .NET 10 (performances JIT ameliorees, Minimal APIs).
Systeme de notation (100 points)
| Categorie | Points | Focus |
|---|---|---|
| Architecture Clean et CQRS | 30 | Clean Architecture, MediatR, DDD, couches |
| C# 14 et Qualite | 20 | Nullable refs, async patterns, modern C# |
| Tests | 25 | xUnit, FluentAssertions, integration tests |
| Securite et Performance | 25 | EF Core, LINQ, OWASP, ASP.NET Core |
1. Architecture Clean et CQRS (30 points)
Arbre de decision : Analyse de l'architecture
Le projet suit-il Clean Architecture ?
NON --> CRITIQUE : les couches doivent etre separees
OUI --> Le Domain a-t-il des dependances sur Infrastructure ?
OUI --> CRITIQUE : violation de la regle de dependance
NON --> CQRS est-il implemente (Commands/Queries separes) ?
NON --> MAJEUR si application complexe, MINEUR si CRUD simple
OUI --> MediatR est-il utilise correctement ?
NON --> Les handlers ont-ils plus d'une responsabilite ?
OUI --> MAJEUR : violation SRP dans les handlers
Le modele de domaine est-il anemique ?
OUI --> CRITIQUE : la logique metier doit etre dans les entites/aggregats
Violations critiques
Domain pollue par l'infrastructure :
// MAUVAIS : Data Annotations dans le Domain
public class Order
{
[Required] [MaxLength(100)]
public string Name { get; set; } = string.Empty;
}
// BON : Domain pur, configuration EF Core separee (IEntityTypeConfiguration)
public class Order
{
public OrderId Id { get; private set; }
private readonly List<OrderItem> _items = [];
public static Order Create(CustomerId customerId)
{
var order = new Order { Id = OrderId.New(), Status = OrderStatus.Pending };
order.AddDomainEvent(new OrderCreatedEvent(order.Id));
return order;
}
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 521 lines · 33 tokens per session scan A 455538604369
csharp-reviewer is an agent published in the GitHub repository TheBeardedBearSAS/claude-craft (105 stars, last pushed 5d ago), licensed MIT. It adds 33 tokens to every session and 4,135 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
dnp-performance-analyst
⚡ .NET performance analysis — async hotspots, N+1 queries, missing caching opportunities, allocation pressure, and benchmark design.
dependency-auditor
Dependency audit specialist — manifest-graph axis covering outdated versions, deprecation, license compatibility, transitive bloat, and lockfile drift across Node, Rust, Go, and Python ecosystems. Invoke when you want a focused supply-chain hygiene report, not a code-level CVE review.
dnp-fable-advisor
🧠 Senior .NET advisor to the implementation agents — advises, never implements. Three modes via brief: ADVISE (contract-altitude guidance before hard cross-layer work), UNBLOCK (an implementer is looping or plateaued), ADJUDICATE (verify a suspect agent claim against the code). Consult at decision points, not before…
dnp-planner
📋 Plans a .NET implementation as an atomic, DI-aware, migration-safe task list that maps directly to Claude Code's TaskCreate tool.
dnp-security-auditor
🔐 .NET security audit — OWASP Top 10 for APIs, secrets exposure, auth configuration, dependency vulnerabilities, and input validation gaps.
dnp-verifier
✅ Goal-backward verification for .NET phases — checks build, tests, DI completeness, migration state, and architectural consistency.