rclone_cryptcheck

rclone_cryptcheck is a command for Claude Code from olorehq/olore. It costs 10 tokens per session (1,417 once invoked), scanned A, original, MIT.

A command that checks whether files in ordinary storage match files in an rclone encrypted remote. It compares checksums while accounting for the remote's encryption.

In plain words
What is it for?
Verify an encrypted backup or remote, report missing and differing files, and optionally check only source files against the destination.
Why use it?
A normal comparison may not work when file data is encrypted, so this checks the encrypted storage's integrity without treating encryption differences as file changes.

Command for Claude Code

Written for Claude Code: a Claude Code command (commands/*.md).

Good fit Verify an encrypted backup or remote, report missing and differing files, and optionally check only source files against the destination.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/olorehq/olore/rclone_cryptcheck
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/olorehq/olore

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for rclone_cryptcheck

README.md
[![agentmods](https://agentmods.dev/badge/commands/olorehq/olore/rclone_cryptcheck/github.svg)](https://agentmods.dev/commands/olorehq/olore/rclone_cryptcheck)
Your own site
<a href="https://agentmods.dev/commands/olorehq/olore/rclone_cryptcheck"><img src="https://agentmods.dev/badge/commands/olorehq/olore/rclone_cryptcheck/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for rclone_cryptcheck

Your own site · 80×15
<a href="https://agentmods.dev/commands/olorehq/olore/rclone_cryptcheck"><img src="https://agentmods.dev/badge/commands/olorehq/olore/rclone_cryptcheck.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 10 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,417 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00010 $0.01417
Opus 5 $0.00005 $0.00709
Sonnet 5 $0.00002 $0.00283
Haiku 4.5 $0.00001 $0.00142

Measured 6d ago against content hash 2c90abd81dea, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

rclone_cryptcheck scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

vault/packages/rclone/1.74.3/contents/commands/rclone_cryptcheck.md · 140 lines

How it starts

The opening of the file, as written. The whole thing — 140 lines — stays where its author put it; the contents beside it link to each section on GitHub.

rclone cryptcheck

Cryptcheck checks the integrity of an encrypted remote.

Synopsis

Checks a remote against an encrypted remote. This is the equivalent of running rclone check, but able to check the checksums of the encrypted remote.

For it to work the underlying remote of the cryptedremote must support some kind of checksum.

It works by reading the nonce from each file on the cryptedremote: and using that to encrypt each file on the remote:. It then checks the checksum of the underlying file on the cryptedremote: against the checksum of the file it has just encrypted.

Use it like this

rclone cryptcheck /path/to/files encryptedremote:path

You can use it like this also, but that will involve downloading all the files in remote:path.

rclone cryptcheck remote:path encryptedremote:path

After it has run it will log the status of the encryptedremote:.

If you supply the --one-way flag, it will only check that files in the source match the files in the destination, not the other way around. This means that extra files in the destination that are not in the source will not be detected.

The --differ, --missing-on-dst, --missing-on-src, --match and --error flags write paths, one per line, to the file name (or stdout if it is -) supplied. What they write is described in the help below. For example --differ will write all paths which are present on both the source and destination but different.

The --combined flag will write a file (or stdout) which contains all file paths with a symbol and then a space and then the path to tell you what happened to it. These are reminiscent of diff files.

  • = path means path was found in source and destination and was identical
  • - path means path was missing on the source, so only in the destination
  • + path means path was missing on the destination, so only in the source
  • * path means path was present in source and destination but different.
  • ! path means there was an error reading or hashing the source or dest.

Read the full file on GitHub · 140 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 140 lines · 10 tokens per session scan A 2c90abd81dea

Subscribe to this mod's changes

rclone_cryptcheck is a command published in the GitHub repository olorehq/olore (103 stars, last pushed today), licensed MIT. It adds 10 tokens to every session and 1,417 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.