Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add IBazylchuk/paparats-mcp --skill paparats-searchgit clone --depth 1 https://github.com/IBazylchuk/paparats-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ibazylchuk/paparats-mcp/paparats-search)<a href="https://agentmods.dev/skills/ibazylchuk/paparats-mcp/paparats-search"><img src="https://agentmods.dev/badge/skills/ibazylchuk/paparats-mcp/paparats-search/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ibazylchuk/paparats-mcp/paparats-search"><img src="https://agentmods.dev/badge/skills/ibazylchuk/paparats-mcp/paparats-search.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.00520 |
| Opus 5.5 | $0.00024 | $0.00208 |
| Sonnet 5.5 | $0.00012 | $0.00104 |
| Haiku 4.5 | $0.00006 | $0.00052 |
Grade A, and why
paparats-search scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Searching code with Paparats
Paparats indexes the user's repositories into chunks (functions, classes, blocks) with a symbol graph between them. Its tools find code by meaning, not by exact text.
Which tool
- "Where is the code that does X?" / "How does X work?" —
search_codewith a plain-language question. Thenget_chunkon the best hits instead of reading whole files. - "Who calls this?" / "What uses this?" —
find_usageson a chunk from a search result. It follows real symbol edges, not name matches. - An exact identifier, error string or file name you already know — a text
search (
git grep -n,rg) is usually faster and complete.
Results are a ranking, not a complete list
search_code returns the best matches, capped by limit. It never proves that
something does not exist, and it does not list every occurrence. For questions
that need a complete answer — "every place that reads this env var", "all
callers of X" — use the search to learn the right names, then confirm the full
set with find_usages or a text search.
Reading the scores
Each result carries a relevance score. Treat 60% and above as a confident match; 40–59% as a lead to verify; below 40% as a sign the index has nothing close — rephrase once, then fall back to a text search.
Recent edits may not be indexed yet
The index is refreshed on a schedule (by default the indexer checks for changes
about every 10 minutes), not on every save. For code the user has just written
or changed, read the file or use a text search instead of relying on
search_code.
When the tools are missing
The tools come from a Paparats server running on the user's machine (default
http://localhost:9876/mcp). If they are unavailable, tell the user to check
the stack with paparats status rather than guessing at the code.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 47 lines · 60 tokens per session scan A ca893a15b13c
paparats-search is a skill published in the GitHub repository IBazylchuk/paparats-mcp (11 stars, last pushed today), licensed MIT. It adds 60 tokens to every session and 520 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
Other skills, from other repositories
Sverklo Code Intelligence
Gives you deep codebase understanding — semantic search, blast-radius analysis, PR review, and health audits.
cartograph
Explore a codebase through Cartograph v2's native RocksDB code graph: intent-aware context, exact/BM25/hybrid search, callers/callees/impact, affected tests, live source, review, freshness, and bounded index administration.
copilot-mcp-server
Direct access to GitHub Copilot MCP server tools for AI-powered development assistance.
doubt-driven-development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceeding, when stress-testing a plan for hidden failure modes, when correctness matters more than speed, when working in unfamiliar code, when stakes are high…
systemic-issue-triage
Trigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.
issue-root-resolution
Trigger: root audit, atacar la raíz, issue roots, backlog roots, mechanism map, deletion-driven fix, resolver issues de raíz, close outdated issues. Audit and resolve issue clusters by verified root cause.