Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/dachivadachkoria/claude-code-starter-kit/fix-bugsgit clone --depth 1 https://github.com/dachivadachkoria/claude-code-starter-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/dachivadachkoria/claude-code-starter-kit/fix-bugs)<a href="https://agentmods.dev/commands/dachivadachkoria/claude-code-starter-kit/fix-bugs"><img src="https://agentmods.dev/badge/commands/dachivadachkoria/claude-code-starter-kit/fix-bugs.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00017 | $0.01215 |
| Opus 5 | $0.00009 | $0.00607 |
| Sonnet 5 | $0.00003 | $0.00243 |
| Haiku 4.5 | $0.00002 | $0.00121 |
Grade A, and why
fix-bugs scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 227 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bug Detection & Auto-Fix
Scan and fix issues in: $ARGUMENTS (default: changed files)
Detection Categories
1. Common Bugs
Null/Undefined Handling
# Bug: AttributeError if user is None
user.name
# Fix: Safe navigation
user.name if user else None
# Or: getattr(user, 'name', None)
Off-by-One Errors
# Bug: Misses last element
for i in range(len(items) - 1):
# Fix: Include last element
for i in range(len(items)):
Resource Leaks
# Bug: File handle not closed on error
f = open('file.txt')
data = f.read()
f.close()
# Fix: Context manager
with open('file.txt') as f:
data = f.read()
2. Async Issues
Missing await
# Bug: Returns coroutine, not result
async def get_user():
return fetch_user(id) # Missing await!
# Fix
async def get_user():
return await fetch_user(id)
Blocking in async context
# Bug: Blocks event loop
async def process():
time.sleep(1) # Blocking!
# Fix: Use async sleep
async def process():
await asyncio.sleep(1)
3. Logic Errors
Boolean Expression Bugs
# Bug: Always True
if x == 1 or 2:
# Fix
if x == 1 or x == 2:
# Or: if x in (1, 2):
Mutable Default Arguments
# Bug: Shared list across calls
def add_item(item, items=[]):
items.append(item)
return items
# Fix: Use None default
def add_item(item, items=None):
if items is None:
items = []
items.append(item)
return items
4. Type Issues
Type Coercion Problems
// Bug: String concatenation instead of addition
const total = "5" + 3; // "53"
// Fix: Explicit conversion
const total = Number("5") + 3; // 8
5. Security Issues
Injection Vulnerabilities
# Bug: SQL Injection
query = f"SELECT * FROM users WHERE id = {user_id}"
# Fix: Parameterized query
query = "SELECT * FROM users WHERE id = %s"
cursor.execute(query, (user_id,))
Execution Flow
Step 1: Identify Targets
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 227 lines · 17 tokens per session scan A 3800f92d14d7
fix-bugs is a command published in the GitHub repository dachivadachkoria/claude-code-starter-kit (4 stars, last pushed 6mo ago), licensed MIT. It adds 17 tokens to every session and 1,215 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
sdlc-cycle
이슈/기획서 기준 SDLC 한 사이클(이슈→개발→테스트→검증→PR/MR)을 사람 개입 없이 자동 실행.
knowledge-graph
AGENTS.md 생태계(rules·memory·agents·skills·commands·workflows)의 연결 구조를 1장의 대시보드로 뽑는다. 온보딩·문서 정합성 점검용.
fix-issue
이슈 #$ARGUMENTS 를 처리한다(이슈 우선 워크플로).
README
반복 작업을 /이름 으로 호출. 파일명 = 커맨드 이름(fix-issue.md → /fix-issue). frontmatter name/argument-hint, 본문에 프롬프트. $ARGUMENTS 로 인자 수신.
sonar
SonarQube 정적분석 실행 및 결과 조회. 코드 품질·보안 핫스팟·커버리지 확인 시 사용.
tailtest-hunt
Run an adversarial pass on $ARGUMENTS -- explicitly try to break the source code.