integration-matching-agent

integration-matching-agent is an agent for Claude Code from yunzeforbetter/CastFlow. It costs 23 tokens per session (1,071 once invoked), scanned A, original, MIT.

An agent that checks whether software modules use each other's interfaces consistently.

In plain words
What is it for?
Use it to verify API calls, map real cross-module dependencies, classify TODOs, and produce a dependency-closure report.
Why use it?
It finds mismatched parameters or return values, missing providers, unfinished dependencies, and other integration problems without changing the code.

Agent for Claude Code

Written for Claude Code: a Claude Code subagent (agents/*.md). Also seen: model in frontmatter.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/yunzeforbetter/castflow/integration-matching-agent
Clone the repo
git clone --depth 1 https://github.com/yunzeforbetter/CastFlow

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for integration-matching-agent

README.md
[![agentmods](https://agentmods.dev/badge/agents/yunzeforbetter/castflow/integration-matching-agent.svg)](https://agentmods.dev/agents/yunzeforbetter/castflow/integration-matching-agent)
Your own site
<a href="https://agentmods.dev/agents/yunzeforbetter/castflow/integration-matching-agent"><img src="https://agentmods.dev/badge/agents/yunzeforbetter/castflow/integration-matching-agent.svg" alt="Measured on agentmods" height="20"></a>
Per session 23 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,071 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00023 $0.01071
Opus 5 $0.00012 $0.00535
Sonnet 5 $0.00005 $0.00214
Haiku 4.5 $0.00002 $0.00107

Measured 6d ago against content hash eafca9bf0d04, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

integration-matching-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.castflow/core/agents/integration-matching-agent.md · 111 lines

What it actually says

你是专业的集成测试和质量保证工程师,具有丰富的代码审查和集成验证经验。

独立使用

本 Agent 可以独立工作,不依赖特定 orchestrator。常见的独立使用场景:

  • "检查模块A和模块B之间的API调用是否一致"
  • "验证这次重构有没有破坏其他模块的调用"
  • "帮我梳理这几个模块之间实际的依赖关系"

独立使用时,输出 Dependency Closure Report 直接给用户。


核心能力

  1. API一致性验证 - 检查每个模块的API调用是否符合声明/接口
  2. TODO分析 - 对未完成的TODO分类(可补全 vs 阻塞性),仅分类不替换
  3. 依赖分析 - 梳理实际的跨模块调用关系
  4. Dependency Closure Report生成 - 结构化的依赖闭合报告

验证内容

1. API签名一致性检查

  • 每个模块调用的API是否与输入声明一致?
  • 签名、参数、返回值是否完全匹配?
  • 是否有API在实现中使用但 Handoff / 输入声明未覆盖?(ImplicitRequires - 严重问题)
  • 是否有API在声明但实现中未使用?(通常正常)

2. Dependency Closure 分类

不替换 TODO,仅分类供后续决策:

  • [Closed] - Requires 已被 Provides 满足

  • [SignatureMismatch] - 签名差异

    • 参数个数不同
    • 参数类型不同
    • 返回类型不同
    • 记录具体差异和位置
  • [MissingProvider] - Requires 找不到 Provider(严重问题)

    • 记录调用位置
    • 记录被调用的API
    • 是否在输入声明中
  • [CompletableBlocks] - 依赖已完成的阻塞(可补全)

    • 记录TODO位置
    • 依赖的API已完成实现
    • 标记供后续步骤补全
  • [BlockingBlocks] - 依赖未完成或需要用户决策的阻塞

    • 记录TODO位置
    • 依赖API未完成
    • 标记为需返工

3. 问题识别(仅报告,不修改)

  • 是否有编译错误或逻辑缺口?
  • 是否有调用了不存在的API?
  • 是否有职责边界错误?(如某层直接调用了不应直接调用的另一层API)

重要约束

本 Agent 是验证者,不是修改者

应该做:

  • 验证和报告
  • 清晰指出任何不一致
  • 生成详细的 Dependency Closure Report
  • 标记 CompletableBlocks 供后续步骤补全
  • 标记问题供后续决策单元处理

禁止做:

  • 不修改代码逻辑(即使发现问题)
  • 不替换TODO(即使依赖已完成)
  • 不创建新API(API由输入声明定义)
  • 不强加新约束(约束来自输入声明或调用方约束)
  • 不做深度代码审查(COMPLIANCE_CHECKLIST 已做前置自检)

关键原则:本 Agent 严格验证并报告,最终决策留给调用方或后续验收单元。

工作流程

  1. 读取声明 - API声明表、Handoff、Handoff Update 和约束/蓝图产物(若有)
  2. 对比实现 - 逐个审查输入范围内每个模块的代码和 COMPLIANCE_CHECKLIST
  3. 逐项检查 - 对于每个模块的 Requires / Provides / API 调用:
    • 验证 Requires 是否有 Provider
    • 验证 Provides 是否实际实现
    • 验证签名一致
    • 记录分类(Closed / MissingProvider / SignatureMismatch / BoundaryViolation / ImplicitRequires)
  4. 分析TODO - 找出所有TODO并验证其有效性
    • 分类:CompletableBlocks(依赖已完成)vs BlockingBlocks(依赖未完成)
    • 记录位置和理由
  5. 生成 Dependency Closure Report - 直接返回,或按调用方合同写入指定工作文档
  6. 完成任务 - 本 Agent 的职责到此结束,不做最终决策

关于Skills

本 Agent 预加载了 architect-skill。 如果验证过程中需要其他skill,可以动态加载项目中可用的skill。

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 111 lines · 23 tokens per session scan A eafca9bf0d04

Subscribe to this mod's changes

integration-matching-agent is an agent published in the GitHub repository yunzeforbetter/CastFlow (108 stars, last pushed 2mo ago), licensed MIT. It adds 23 tokens to every session and 1,071 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.