Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/kochetkov-ma/claude-brewcodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/kochetkov-ma/claude-brewcode/brewtools)<a href="https://agentmods.dev/plugins/kochetkov-ma/claude-brewcode/brewtools"><img src="https://agentmods.dev/badge/plugins/kochetkov-ma/claude-brewcode/brewtools/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/kochetkov-ma/claude-brewcode/brewtools"><img src="https://agentmods.dev/badge/plugins/kochetkov-ma/claude-brewcode/brewtools.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
brewtools scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "brewtools",
"version": "6.10.0",
"description": "Brewtools - Claude Code utilities: text optimization and humanization, secrets scanning, SSH and GitHub Actions deploy, manager hard-wall guard, subagent deadline/return-size/routing guards, task board, context slimming, plugin updates, alternative API providers",
"author": {
"name": "Maksim Kochetkov",
"email": "[email protected]",
"url": "https://github.com/kochetkov-ma"
},
"homepage": "https://github.com/kochetkov-ma/claude-brewcode",
"repository": "https://github.com/kochetkov-ma/claude-brewcode.git",
"license": "MIT",
"keywords": [
"brewtools",
"text-optimization",
"humanize",
"secrets-scan",
"deploy",
"ssh",
"subagents",
"developer-tools"
],
"skills": "./skills/"
}
What it installs
The manifest is a name and a version. 9 skills, 3 agents travel with it, and installing the plugin installs all of them — 455 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill context-slim A 69 tokens
- Skill plugin-update C 43 tokens
- Skill secrets-scan A 30 tokens
- Skill agent-deadline-setup B 58 tokens
- Skill agent-return-setup B 57 tokens
- Skill agent-router-setup B 52 tokens
- Skill deploy B 29 tokens
- Skill provider-switch B 35 tokens
- Skill ssh D 19 tokens
- Agent text-optimizer A 25 tokens
- Agent ssh-admin B 29 tokens
- Agent deploy-admin C 25 tokens
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 61b82f1b0801
- yesterday Changed ac720b4950b9
- 2d ago Changed 470d156e3d1b
- 3d ago Changed 03ae18bcafca
- 4d ago Changed · +4 lines fa2f0e7cfe27
- 11d ago Changed f9ae9bfd14c7
- 16d ago Changed 9030ef777aaa
- 1mo ago Changed 2a092278cce3
- 1mo ago First seen · 21 lines scan A cb4fa218d7e6
brewtools is a plugin published in the GitHub repository kochetkov-ma/claude-brewcode (33 stars, last pushed today), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
context-optimizer
Spend less of your Claude usage on re-reading. In chat: a fresh-start handoff, token checks and prompt sharpening. In Claude Code and Cowork: Haiku 5.5 subagents do the reading and test runs so the expensive model's context stays small, plus read dedup, budget and cache-break warnings, and /cco-audit of your own…
skill-creator-plus
Create, test, evaluate, and iteratively improve Claude Code skills with built-in benchmarking, blind A/B comparison, and description optimization.
deep-research
Deep Research (/deep-research or /dr) — exhaustive, evidence-based investigation of any topic. ICD 203 (9/9), GRADE, NIST reproducibility, CRAAP. 89 runs, 85+ domains, 24.3/25 judge score.
zAI-Skills marketplace
Development marketplace for AI-Toolkit, consulting-toolkit, real-estate-investment, career-coach, and plugin-forge plugins.
consulting-toolkit
Multi-agent consulting system with an /engagement orchestration command, an Engagement Manager quality gate, and Research, Finance, Deck, and Due Diligence agents. Includes 17 consulting slash commands, deliverable templates, strategy frameworks, and an 8-tool Financial Intelligence MCP server for real-time financial…
real-estate-investment
Comprehensive real estate investment analysis plugin with financial modeling, market data APIs, deal analysis agents, and tax-aware structuring. Covers all property types: residential, commercial, multifamily, short-term rentals, and land development.