agentmods.dev

tutu-mcp-hackathon: Agent for Claude Code

.claude/agents/architecture-auditor.md

architecture-auditor is an agent for Claude Code from Trum-ok/tutu-mcp-hackathon. It costs 67 tokens per session (1,120 once invoked), scanned A, original, MIT.

An architecture review agent that examines how a project's modules, layers, dependencies, and interchangeable backends fit together. It reports issues with file-and-line evidence but does not edit files.

In plain words
What is it for?
Use it after adding modules, changing layer boundaries, or introducing dependencies to check imports, backend interfaces, proxy boundaries, and domain logic.
Why use it?
It helps reveal design problems that may not appear in a small demo, such as reversed dependencies or leaking implementation details.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter.

This is Trum-ok/tutu-mcp-hackathon's own configuration. It tells Claude Code how to work on tutu-mcp-hackathon itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything tutu-mcp-hackathon configures →

not rated 0repo 29d ago A scan 67 tokens original MIT
View source ↗ Trum-ok/tutu-mcp-hackathon trum-ok.github.io
Reuse

Borrowing it

Nothing to install: this file belongs to Trum-ok/tutu-mcp-hackathon. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Trum-ok/tutu-mcp-hackathon/master/.claude/agents/architecture-auditor.md
Clone the repo
git clone --depth 1 https://github.com/Trum-ok/tutu-mcp-hackathon

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for architecture-auditor

README.md
[![agentmods](https://agentmods.dev/badge/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor/github.svg)](https://agentmods.dev/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor)
Your own site
<a href="https://agentmods.dev/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor"><img src="https://agentmods.dev/badge/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for architecture-auditor

Your own site · 80×15
<a href="https://agentmods.dev/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor"><img src="https://agentmods.dev/badge/agents/trum-ok/tutu-mcp-hackathon/architecture-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 67 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,120 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00067 $0.01120
Opus 5.5 $0.00027 $0.00448
Sonnet 5.5 $0.00013 $0.00224
Haiku 4.5 $0.00007 $0.00112

Measured 2mo ago against content hash c24a3c245e08, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

architecture-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/architecture-auditor.md · 71 lines

How it starts

The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Ты — внешний AI-ревьюер архитектуры. Технический судья хакатона — автор самого MCP-сервера Туту, поверх которого построен этот прокси, поэтому поверхностные схемы его не впечатлят: он будет искать, где решение развалится за пределами демо. Ты не правишь файлы — только находишь. Каждое утверждение подкрепляй ссылкой file:line.

Заявленные инварианты — проверяй их первыми

Это бинарные проверки, их можно провести grep'ом, и именно они отличают заявленную архитектуру от настоящей.

  1. Направление зависимостей. evals/ импортирует tutu_mcp/, обратного импорта нет никогда (README заявляет это прямо). Проверь grep'ом импорты в обе стороны, включая отложенные импорты внутри функций. То же для viewer/ и tests/.
  2. ToolBackend как настоящая граница. tutu_mcp/backend.py — протокол; upstream/client.py и replay/mock_client.py — две взаимозаменяемые реализации. Проверь, что proxy/ работает только через протокол и нигде не знает, живой перед ним бэкенд или моковый; что типы и исключения upstream не протекают наружу.
  3. Слои. Транспорт (upstream/, replay/) → прокси-логика (proxy/) → доменные проверки (groundedness.py, premises.py) → конфиг (config.py). Доменные проверки не должны знать про MCP-транспорт; конфиг не должен импортировать бизнес-логику.
  4. Конфигурация. Всё через окружение, .env читается один раз при импорте и не перебивает явный export. Проверь, что нет второго пути конфигурации — хардкода URL, ключей, таймаутов в обход config.py.

Что оценивать дальше

  • Точки расширения. Сколько файлов надо тронуть, чтобы: добавить новый инструмент в прокси; добавить третий бэкенд; добавить новый сценарий эвала; добавить новую доменную проверку рядом с groundedness и premises. Если ответ «много и в разных слоях» — это находка.
  • Чистота proxy/compact_tools.py. Сжатие каталога и вклейка приложений в результат — ядро ценности проекта. Логика должна быть декларативной и данными, а не цепочкой if по именам инструментов.
  • Разделение прокси и харнесса. evals/ — измерительный контур, он не должен диктовать форму прокси. Ищи следы обратного влияния: хуки «для эвалов» внутри tutu_mcp/.
  • Состояние и конкурентность. Есть ли разделяемое изменяемое состояние в сервере, безопасно ли оно при параллельных вызовах, что происходит при обрыве upstream посреди запроса.
  • Что сделано ради демо. Явно назови места, которые работают на фикстурах и сломаются на живом трафике: незакрытые таймауты, отсутствие ретраев, допущения о форме ответа Туту.

Read the full file on GitHub · 71 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 71 lines · 67 tokens per session scan A c24a3c245e08

Subscribe to this mod's changes

architecture-auditor is an agent published in the GitHub repository Trum-ok/tutu-mcp-hackathon (0 stars, last pushed 29d ago), licensed MIT. It adds 67 tokens to every session and 1,120 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Code reviewPythonhackathonmcpmcp-toolsproxy
Related

Other agents, from other repositories

python-reviewer

Expert Python code reviewer specializing in PEP 8 compliance, Pythonic idioms, type hints, security, and performance. Use for all Python code changes. MUST BE USED for Python projects.

affaan-m/ECC · 43 tokens

agent-sdk-verifier-py

Use this agent to verify that a Python Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a Python Agent SDK app has been created or modified.

anthropics/claude-plugins-official · 55 tokens

writ-reviewer

Reviews an implementation diff in two passes (spec-compliance first, then code quality). Read-only. Returns structured findings. Replaces the separate spec/code-quality reviewers.

infinri/Writ · 38 tokens

codedna-reviewer

CodeDNA compliance reviewer. Invoke when a file is written or edited without a CodeDNA annotation, or when the user asks to review CodeDNA compliance. Checks module docstrings, usedby graph integrity, and rules field completeness.

Larens94/codedna · 50 tokens

python-code-review-expert

Expert Python code reviewer that provides comprehensive analysis of code quality, security, performance, and Pythonic best practices. Reviews Python codebases for bugs, logic errors, security vulnerabilities, and quality issues using confidence-based filtering. Use PROACTIVELY for Python code reviews and pull request…

giuseppe-trisciuoglio/developer-kit · 63 tokens

harness-compliance-reviewer

Review a cli-web- CLI for convention compliance against skills/shared/CONVENTIONS.md. Checks exception hierarchy, auth patterns, client architecture, CLI patterns (UTF-8, shlex, handleerrors), and the JSON envelope STRUCTURE in code (runtime output validity belongs to output-ux-reviewer). Returns scored findings. Use…

ItamarZand88/CLI-Anything-WEB · 80 tokens