Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/firelock-ai/kinWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/firelock-ai/kin/gemini-extension)<a href="https://agentmods.dev/plugins/firelock-ai/kin/gemini-extension"><img src="https://agentmods.dev/badge/plugins/firelock-ai/kin/gemini-extension/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/firelock-ai/kin/gemini-extension"><img src="https://agentmods.dev/badge/plugins/firelock-ai/kin/gemini-extension.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
kin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "kin",
"version": "0.5.27",
"description": "Kin keeps a living map of the software itself so humans and agents can understand what every change touches. Locate, search, context packs, data-flow tracing, and impact analysis without raw file search.",
"contextFileName": "docs/gemini-extension-context.md",
"mcpServers": {
"kin": {
"command": "npx",
"args": ["-y", "@kinlab/kin-mcp"]
}
}
}
What ships with it
60 files beside gemini-extension.json in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/mcp/icon-400.png 24 KB
- assets/mcp/icon-512.png 17 KB
- scripts/abandoned-release-tags.json 22 KB
- scripts/acceptance_red_alarm.py 18 KB runs code
- scripts/acceptance/agent_write_publish_repro.py 76 KB runs code
- scripts/acceptance/blame_attribution_repro.py 25 KB runs code
- scripts/acceptance/bridge_reach_repro.py 55 KB runs code
- scripts/acceptance/brownfield_repro.py 168 KB runs code
- scripts/acceptance/capped_brownfield_init.py 16 KB runs code
- scripts/acceptance/coverage_read_open.py 42 KB runs code
- scripts/acceptance/detached_head_commit_repro.py 32 KB runs code
- scripts/acceptance/diff_content_repro.py 27 KB runs code
- scripts/acceptance/eject_journal_repro.py 48 KB runs code
- scripts/acceptance/first_contact_honesty.py 142 KB runs code
- scripts/acceptance/first_query_readiness_repro.py 40 KB runs code
- scripts/acceptance/gate.py 28 KB runs code
- scripts/acceptance/graph_viz_local_render.py 36 KB runs code
- scripts/acceptance/hydration_semantics_repro.py 89 KB runs code
- scripts/acceptance/init_budget_refusal.py 61 KB runs code
- scripts/acceptance/init_memory_repro.py 28 KB runs code
- scripts/acceptance/language_server_warning.py 12 KB runs code
- scripts/acceptance/magic_repro.py 212 KB runs code
- scripts/acceptance/mcp_revival_readiness_repro.py 12 KB runs code
- scripts/acceptance/mcp_spawn_admission_repro.py 31 KB runs code
- scripts/acceptance/mcp_surface_contract.py 84 KB runs code
- scripts/acceptance/memory_pressure_refusal.py 151 KB runs code
- scripts/acceptance/merge_precedence_repro.py 79 KB runs code
- scripts/acceptance/parse_hole_repro.py 34 KB runs code
- scripts/acceptance/prose_query_parity_repro.py 41 KB runs code
- scripts/acceptance/published_store_upgrade_repro.py 33 KB runs code
- scripts/acceptance/README.md 53 KB
- scripts/acceptance/ref_grammar_repro.py 45 KB runs code
- scripts/acceptance/registry_home_isolation.py 47 KB runs code
- scripts/acceptance/response_budget_elisions.py 103 KB runs code
- scripts/acceptance/same_owner_call_repro.py 26 KB runs code
- scripts/acceptance/scratch_file_commit_repro.py 24 KB runs code
- scripts/acceptance/source_view_authority_opens.py 9.8 KB runs code
- scripts/acceptance/test_brownfield_trace_witness.py 34 KB runs code
- scripts/acceptance/test_capped_brownfield_init.py 9.3 KB runs code
- scripts/acceptance/test_failure_excerpt.py 8.1 KB runs code
- scripts/acceptance/test_fixture_shutdown.py 10 KB runs code
- scripts/acceptance/test_magic_repro_case16.py 16 KB runs code
- scripts/acceptance/test_magic_repro_case19.py 15 KB runs code
- scripts/acceptance/test_magic_repro_conversion_report.py 5.2 KB runs code
- scripts/acceptance/test_reference_diagnostic_contract.py 12 KB runs code
- scripts/acceptance/test_run_root_retention.py 26 KB runs code
- scripts/acceptance/test_trace_pages.py 7.3 KB runs code
- scripts/acceptance/test_verdict_limits_pages.py 5.4 KB runs code
- scripts/acceptance/test_workflow_step_visibility.py 36 KB runs code
- scripts/acceptance/test_working_copy_freshness_contract.py 24 KB runs code
- scripts/acceptance/trace_pages.py 11 KB runs code
- scripts/acceptance/trace_spine_clipping_repro.py 87 KB runs code
- scripts/acceptance/vcs_read_surfaces_repro.py 53 KB runs code
- scripts/acceptance/verdict_limits_repro.py 52 KB runs code
- scripts/acceptance/working_copy_freshness_repro.py 77 KB runs code
- scripts/advisory-sweep.mjs 26 KB runs code
- scripts/advisory-sweep.test.mjs 15 KB runs code
- scripts/assert-windows-init-contract.sh 5.0 KB runs code
- scripts/attest-kin-registry-wave.py 40 KB runs code
- scripts/changed-crate-scope.py 13 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed d6260c620de5
- 1mo ago First seen · 13 lines scan A b346df846ef6
kin is a plugin published in the GitHub repository firelock-ai/kin (68 stars, last pushed 28d ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other plugins, from other repositories
mushroom
Graph memory for agents: entities, rule-derived relationships, explain, time travel, visibility.
code-review
Perform a comprehensive code review of recent changes.
graph-it-live
Dependency, call-graph, impact, and architecture analysis for codebases.
memtrace-skills
Memtrace skills for codebase exploration, code search, relationship analysis, temporal evolution, blast radius impact, code quality, graph algorithms, API topology, GitHub PR code review, multi-agent fleet coordination (branch-scoped intents, conflict classification, and agent-judged Class C resolution), and…
xorio
xorio development toolkit — dev workflows, testing, cleanup, polish, review, security.
tidy
Careful low-risk codebase cleanup across 7 focused tracks: deduplication, type consolidation, dead code removal, circular dependency untangling, type strengthening, error-handling cleanup, and deprecated/AI-slop removal. Each track inspects, writes a critical assessment, ranks proposed changes by confidence, and…