Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/motlin/claude-code-plugins/openrewrite-violationsgit clone --depth 1 https://github.com/motlin/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/motlin/claude-code-plugins/openrewrite-violations)<a href="https://agentmods.dev/commands/motlin/claude-code-plugins/openrewrite-violations"><img src="https://agentmods.dev/badge/commands/motlin/claude-code-plugins/openrewrite-violations.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00018 | $0.01060 |
| Opus 5 | $0.00009 | $0.00530 |
| Sonnet 5 | $0.00004 | $0.00212 |
| Haiku 4.5 | $0.00002 | $0.00106 |
Grade A, and why
openrewrite-violations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 77 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenRewrite Violations
Create a branch named openrewrite-violations, then apply every configured OpenRewrite recipe that has violations one at a time, committing each recipe's changes as a separate commit with the message Fix violations of OpenRewrite rule: <recipe>.
If $ARGUMENTS is provided, use it as the branch name instead of openrewrite-violations.
Require a clean working tree
Run git status --porcelain. If there are uncommitted changes, stop and tell the user — this command creates commits and must start clean. Do not stash or discard their work.
Create the branch
Fetch the upstream default branch and create the new branch from it, so the commits land on top of current main:
git fetch origin
git switch -c openrewrite-violations origin/HEAD
Use a worktree (git worktree add) instead if the user is mid-work on another branch and you should not move their checkout.
Determine how this repo invokes OpenRewrite
Inspect the repo before running anything:
- If a
mise.toml,.mise.toml, or.mise/config exists, every Maven command must be prefixed withmise exec --, and the config must be trusted first:mise trust. Without the right JDK, the build fails withrelease version NN not supported. - If a justfile defines
rewrite-dry-runandrewrite <RECIPE>recipes (common in these repos), prefer them — they already activate the correct profile and recipe dependencies. - Otherwise call the plugin directly:
mvn rewrite:dryRunandmvn rewrite:run -Drewrite.activeRecipes=<recipe>. Checkpom.xmlfor therewrite-maven-plugin: if its configuration sits inside a<profile>, add--activate-profiles <that-profile>to every invocation.
Enumerate the recipes that have violations
Run the dry run and capture the full log (it takes minutes):
mise exec -- just rewrite-dry-run 2>&1 | tee .llm/rewrite-dryrun.log | tail -20
The dry run "fails" with Applying recipes would make changes when violations exist — that is the signal to proceed, not an error.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 77 lines · 18 tokens per session scan A fd7aa1c958a6
openrewrite-violations is a command published in the GitHub repository motlin/claude-code-plugins (15 stars, last pushed today), licensed Apache-2.0. It adds 18 tokens to every session and 1,060 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other commands, from other repositories
profile
Coordinate a reproducible Java profiling and optimization lifecycle.
scaffold-spring-api
Scaffold a new Spring Boot 3.5.x WebFlux REST API project with standard structure, build config, and sample endpoint.
savant-jvm
JVM performance optimization with JVM Developer agent.
java-exercise-pattern
Новое упражнение по паттернам проектирования или принципам SOLID.
java-exercise-fix
Исправить код с объяснениями и мнемотехникой.
ContinuationTask
Package: net.minecraft.commands.execution.tasks Type: class implements EntryAction.