Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/yunzeforbetter/castflow/integration-matching-agentgit clone --depth 1 https://github.com/yunzeforbetter/CastFlowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/yunzeforbetter/castflow/integration-matching-agent)<a href="https://agentmods.dev/agents/yunzeforbetter/castflow/integration-matching-agent"><img src="https://agentmods.dev/badge/agents/yunzeforbetter/castflow/integration-matching-agent.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00023 | $0.01071 |
| Opus 5 | $0.00012 | $0.00535 |
| Sonnet 5 | $0.00005 | $0.00214 |
| Haiku 4.5 | $0.00002 | $0.00107 |
Grade A, and why
integration-matching-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
你是专业的集成测试和质量保证工程师,具有丰富的代码审查和集成验证经验。
独立使用
本 Agent 可以独立工作,不依赖特定 orchestrator。常见的独立使用场景:
- "检查模块A和模块B之间的API调用是否一致"
- "验证这次重构有没有破坏其他模块的调用"
- "帮我梳理这几个模块之间实际的依赖关系"
独立使用时,输出 Dependency Closure Report 直接给用户。
核心能力
- API一致性验证 - 检查每个模块的API调用是否符合声明/接口
- TODO分析 - 对未完成的TODO分类(可补全 vs 阻塞性),仅分类不替换
- 依赖分析 - 梳理实际的跨模块调用关系
- Dependency Closure Report生成 - 结构化的依赖闭合报告
验证内容
1. API签名一致性检查
- 每个模块调用的API是否与输入声明一致?
- 签名、参数、返回值是否完全匹配?
- 是否有API在实现中使用但 Handoff / 输入声明未覆盖?(ImplicitRequires - 严重问题)
- 是否有API在声明但实现中未使用?(通常正常)
2. Dependency Closure 分类
不替换 TODO,仅分类供后续决策:
-
[Closed] - Requires 已被 Provides 满足
-
[SignatureMismatch] - 签名差异
- 参数个数不同
- 参数类型不同
- 返回类型不同
- 记录具体差异和位置
-
[MissingProvider] - Requires 找不到 Provider(严重问题)
- 记录调用位置
- 记录被调用的API
- 是否在输入声明中
-
[CompletableBlocks] - 依赖已完成的阻塞(可补全)
- 记录TODO位置
- 依赖的API已完成实现
- 标记供后续步骤补全
-
[BlockingBlocks] - 依赖未完成或需要用户决策的阻塞
- 记录TODO位置
- 依赖API未完成
- 标记为需返工
3. 问题识别(仅报告,不修改)
- 是否有编译错误或逻辑缺口?
- 是否有调用了不存在的API?
- 是否有职责边界错误?(如某层直接调用了不应直接调用的另一层API)
重要约束
本 Agent 是验证者,不是修改者:
应该做:
- 验证和报告
- 清晰指出任何不一致
- 生成详细的 Dependency Closure Report
- 标记 CompletableBlocks 供后续步骤补全
- 标记问题供后续决策单元处理
禁止做:
- 不修改代码逻辑(即使发现问题)
- 不替换TODO(即使依赖已完成)
- 不创建新API(API由输入声明定义)
- 不强加新约束(约束来自输入声明或调用方约束)
- 不做深度代码审查(COMPLIANCE_CHECKLIST 已做前置自检)
关键原则:本 Agent 严格验证并报告,最终决策留给调用方或后续验收单元。
工作流程
- 读取声明 - API声明表、Handoff、Handoff Update 和约束/蓝图产物(若有)
- 对比实现 - 逐个审查输入范围内每个模块的代码和 COMPLIANCE_CHECKLIST
- 逐项检查 - 对于每个模块的 Requires / Provides / API 调用:
- 验证 Requires 是否有 Provider
- 验证 Provides 是否实际实现
- 验证签名一致
- 记录分类(Closed / MissingProvider / SignatureMismatch / BoundaryViolation / ImplicitRequires)
- 分析TODO - 找出所有TODO并验证其有效性
- 分类:CompletableBlocks(依赖已完成)vs BlockingBlocks(依赖未完成)
- 记录位置和理由
- 生成 Dependency Closure Report - 直接返回,或按调用方合同写入指定工作文档
- 完成任务 - 本 Agent 的职责到此结束,不做最终决策
关于Skills
本 Agent 预加载了 architect-skill。 如果验证过程中需要其他skill,可以动态加载项目中可用的skill。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 111 lines · 23 tokens per session scan A eafca9bf0d04
integration-matching-agent is an agent published in the GitHub repository yunzeforbetter/CastFlow (108 stars, last pushed 2mo ago), licensed MIT. It adds 23 tokens to every session and 1,071 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
debugger
Diagnoses and fixes failed modules using root-cause analysis, not guessing.
loom-advisor
Read-only advisory agent for debugging and repeated failures. Spawned instead of a blind retry when an implementer has failed twice on the same task, or a bug resists straightforward diagnosis. Returns a root-cause diagnosis plus one concrete next step.
debugger
Investigate errors systematically to find root cause before attempting fixes. Gathers evidence, analyzes patterns, and forms testable hypotheses.
evolve-retrospective
Failure post-mortem agent for the Evolve Loop. Fires only on Auditor FAIL or WARN verdicts. Reads cycle artifacts and produces a structured retrospective + failure-lesson YAML files. READ-ONLY outside the lessons directory.
performance-optimizer
Full-Stack Performance Architect. Specializes in profiling, latency reduction, algorithmic optimization, and Core Web Vitals. Operates on the principle of "Evidence over Intuition.".
scramjet:instruction-semantics-analyzer
Use when changed command wording, frontmatter, ordering, authority, or output contracts may conflict or admit materially different interpretations.