agentmods.dev

nuget-opensrc

nuget-opensrc is a command for Claude Code from ANcpLua/ancplua-claude-plugins. It costs 16 tokens per session (512 once invoked), scanned A, original, MIT.

A command that resolves a NuGet package to the GitHub repository and exact source commit used to build it, then fetches that source through opensrc.

In plain words
What is it for?
Use it to fetch source for a NuGet package, inspect package metadata, or search for a class or symbol in the exact code behind a .NET dependency.
Why use it?
It avoids inspecting a repository's moving default branch instead of the code shipped in the package. This makes dependency investigations reproducible for a named package version.

Command for Claude Code

Written for Claude Code: argument-hint in frontmatter.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the nuget-opensrc plugin — 1 skill, 1 command shipped together

not rated 6repo 2d ago A scan 16 tokens original MIT

Good fit Use it to fetch source for a NuGet package, inspect package metadata, or search for a class or symbol in the exact code behind a .NET dependency.

Compare 6 commands from other repositories ↓
View source ↗ ANcpLua/ancplua-claude-plugins
Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add ANcpLua/ancplua-claude-plugins
Claude Code
/plugin install nuget-opensrc

Made for: Claude Code.

Or install nuget-opensrc, the plugin that ships this one along with the rest of its 1 skill, 1 command.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for nuget-opensrc

README.md
[![agentmods](https://agentmods.dev/badge/commands/ancplua/ancplua-claude-plugins/nuget-opensrc/github.svg)](https://agentmods.dev/commands/ancplua/ancplua-claude-plugins/nuget-opensrc)
Your own site
<a href="https://agentmods.dev/commands/ancplua/ancplua-claude-plugins/nuget-opensrc"><img src="https://agentmods.dev/badge/commands/ancplua/ancplua-claude-plugins/nuget-opensrc/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for nuget-opensrc

Your own site · 80×15
<a href="https://agentmods.dev/commands/ancplua/ancplua-claude-plugins/nuget-opensrc"><img src="https://agentmods.dev/badge/commands/ancplua/ancplua-claude-plugins/nuget-opensrc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 16 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 512 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00016 $0.00512
Opus 5.5 $0.00006 $0.00205
Sonnet 5.5 $0.00003 $0.00102
Haiku 4.5 $0.00002 $0.00051

Measured 1mo ago against content hash b2a2f67cc50e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

nuget-opensrc scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/nuget-opensrc/commands/nuget-opensrc.md · 51 lines

What it actually says

/nuget-opensrc

Resolve a NuGet package → GitHub repo + commit → fetch with opensrc.

Without this wrapper, opensrc path dotnet/aspnetcore returns the default branch (main) which drifts daily. With this wrapper, you grep the exact commit the package on NuGet was built from.

Execution

"${CLAUDE_PLUGIN_ROOT}/bin/nuget-opensrc" path $ARGUMENTS

Examples

# Latest published version
/nuget-opensrc Microsoft.Extensions.Logging

# Specific version (commit-pinned to what that version shipped)
/nuget-opensrc [email protected]

# Inspect metadata without fetching
"${CLAUDE_PLUGIN_ROOT}/bin/nuget-opensrc" info Newtonsoft.Json

Typical follow-up

After the command prints a path, grep into it:

rg "JwtBearerEvents" "$("${CLAUDE_PLUGIN_ROOT}/bin/nuget-opensrc" path Microsoft.AspNetCore.Authentication.JwtBearer)"

When this fails

Error Meaning Action
no <repository> metadata Publisher omitted the <repository> tag in nuspec Source not accessible via this path — try opensrc path <owner/repo> directly if you know the repo
repository.url is not github.com Package is on GitLab / Azure DevOps / etc. Not supported (opensrc is GitHub-only)
version not found Version doesn't exist in either NuGet feed (semver1 + gz-semver2 both checked) Check spelling, drop @version for latest

SemVer2-only versions (dotted prerelease like 9.0.0-preview.9.24556.5, or +-build-metadata versions) are resolved transparently — the wrapper falls through from registration5-semver1 to registration5-gz-semver2 when needed.

The wrapper never falls back to projectUrl — that field lies for Microsoft packages (points at https://dot.net/). Failures are surfaced explicitly so you don't silently get wrong source.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 51 lines · 16 tokens per session scan A b2a2f67cc50e

Subscribe to this mod's changes

nuget-opensrc is a command published in the GitHub repository ANcpLua/ancplua-claude-plugins (6 stars, last pushed 2d ago), licensed MIT. It adds 16 tokens to every session and 512 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-01.

C# and .NETLanguagesResearchancplua-fleet
Related

nuget-opensrc compared with commands from other repositories

nuget-opensrc next to 6 commands from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
nuget-opensrcANcpLua/ancplua-claude-pluginsCommand62d agoMITA16Claude Code
scriptsAmaniDawn/DGameCommand1782d agoMITA0Claude Code
abp-background-workersmss123/ABP-ai-skillsCommand611d agoGPL-3.0A0Claude Code
testpeterblazejewicz/claude-pluginsCommand85mo agoMITA30Claude Code
azure-graph-dotnet:deploy-azureTheLobbi/Claude-mCommand191mo agononeA57Claude Code
csharp-exercise-clearaleksei-perchukov/coding-exercise-generator-ide-pluginCommand56mo agononeA15Claude Code
checklistgithub/spec-kitCommand149ktodayMITA13Claude Code