Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/fledgeling-co/fledgeling-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/fledgeling-co/fledgeling-plugins/vouch)<a href="https://agentmods.dev/plugins/fledgeling-co/fledgeling-plugins/vouch"><img src="https://agentmods.dev/badge/plugins/fledgeling-co/fledgeling-plugins/vouch/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/fledgeling-co/fledgeling-plugins/vouch"><img src="https://agentmods.dev/badge/plugins/fledgeling-co/fledgeling-plugins/vouch.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
vouch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "vouch",
"description": "Reconcile and substantiate a personal-expense reimbursement claim end to end, repeatably. Vouching is the audit term for tracing a record back to its source document, and that is the whole skill: every claimed charge is keyed to the supplier's own invoice, and every invoice is read for the account it was issued to. Sweeps a personal-accounting MCP (PocketSmith or any equivalent), the Apple Mail index via the Sift MCP, card statement PDFs and a downloads folder; detects the days where the bank feed is silent and backfills them from statements, which is where the charges nobody noticed are hiding. Decides each row on three gates the operator supplies: the invoice must name a company account, the payment must land on a card the claimant owns personally, and the charge must be absent from the prior claim. Drives supplier portals through proctor:proctor when a login is needed, and hands back a wanted-invoices page listing date, supplier, estimated amount, portal link and account address whenever a portal refuses automation. Emits a claim CSV matching the employer's own form, invoices filed by month and named for the invoice number printed inside them, and two unbranded reports, one for the manager approving payment and one for the accountant checking GST. Ships a gate suite that fails on arithmetic, sign convention, date range, duplicate invoice numbers, orphan files and any filename that disagrees with its document. Use whenever someone asks to prepare, reconcile, substantiate or check an expense claim or reimbursement, asks which invoices are still missing, or runs the monthly claim.",
"version": "0.4.1",
"author": {
"name": "Fledgeling",
"email": "[email protected]"
}
}
What it installs
The manifest is a name and a version. 1 skill travel with it, and installing the plugin installs all of them — 301 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed ae18adde021f
- 1mo ago First seen · 10 lines scan A 64a476d9fdd9
vouch is a plugin published in the GitHub repository fledgeling-co/fledgeling-plugins (2 stars, last pushed 4d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other plugins, from other repositories
bankstatemently
Convert PDF bank statements to CSV, Excel, or QBO and query them in Claude. After adding, connect Bankstatemently under Connectors, then attach a statement PDF and ask Claude to convert it. Requires a Bankstatemently account.
mainbook-bank-statement-converter
Convert customer-supplied PDF bank statements to checked JSON, Excel, or CSV with balance validation through MainBook's official MCP server. Sign in with your MainBook account; no API key is copied into the configuration.
dokmatiq-docgen
Document generation with stationery/letterhead overlay, e-invoicing (ZUGFeRD/XRechnung/Factur-X), Excel, PDF signing, and AI receipt recognition for Codex and Claude Code. Bundles the Dokmatiq DocGen MCP server (40 tools) with a triggering skill.
ap-invoice-review
An accounts-payable invoice review tool for checking invoices against related records using Claude OCR, which reads text from document images, and preparing next actions.
slideops
Turn a repository into a slide deck or Markdown docs, then find out the day they stop matching the code. Ships slideops (repo to deck or cited Markdown doc, with citation-based freshness checking) and slides-to-pdf (any hash-navigated HTML deck to a verified PDF).
docuqueue
Generate PDFs, fill forms, and manage documents using DocuQueue API. Works with Claude, ChatGPT, Cursor, and any MCP-compatible client.