Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jhlee0409/claude-plugins --skill pattern-detectorgit clone --depth 1 https://github.com/jhlee0409/claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jhlee0409/claude-plugins/pattern-detector)<a href="https://agentmods.dev/skills/jhlee0409/claude-plugins/pattern-detector"><img src="https://agentmods.dev/badge/skills/jhlee0409/claude-plugins/pattern-detector/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jhlee0409/claude-plugins/pattern-detector"><img src="https://agentmods.dev/badge/skills/jhlee0409/claude-plugins/pattern-detector.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00016 | $0.01924 |
| Opus 5.5 | $0.00006 | $0.00770 |
| Sonnet 5.5 | $0.00003 | $0.00385 |
| Haiku 4.5 | $0.00002 | $0.00192 |
Grade A, and why
pattern-detector scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| axios | `import axios` or `import { } from 'axios'` | `axios.get()`, `axios.create()` | How it starts
The opening of the file, as written. The whole thing — 275 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Pattern Detector
Analyze ANY codebase to learn existing API patterns. Works with any framework, structure, or convention.
EXECUTION INSTRUCTIONS
When this skill is invoked, Claude MUST perform these steps in order:
Step 1: Read package.json
- Use
Readtool to readpackage.jsonin project root - Extract dependency information:
dependenciesdevDependencies
- If package.json not found → Report error and abort
Step 2: Detect Framework Stack
From package.json, identify:
| Category | Check for | Result |
|---|---|---|
| Framework | react, vue, @angular/core, svelte |
Set framework |
| HTTP Client | axios, ky, got |
Set httpClient |
| Data Fetching | @tanstack/react-query, swr, @reduxjs/toolkit |
Set dataFetching |
| Language | typescript in devDeps |
Set language to typescript or javascript |
Report findings:
📦 package.json analysis:
Framework: <framework> + <language>
HTTP Client: <httpClient or "fetch (native)">
Data Fetching: <dataFetching or "none detected">
Step 3: Search for Existing API Code
Use Glob tool with these patterns in order:
1. src/**/api/**/*.{ts,js,tsx,jsx}
2. src/**/services/**/*.{ts,js}
3. src/**/hooks/**/*{api,query,fetch}*.{ts,js}
4. lib/api/**/*.{ts,js}
5. api/**/*.{ts,js}
If NO files found:
- Report:
🔍 No existing API code found - Skip to Step 6 (Interactive Fallback)
If files found:
- Report:
🔍 Found <count> potential API files - Continue to Step 4
Step 4: Analyze Sample Files
For each discovered file (max 5 files):
- Use
Readtool to read file content - Extract patterns:
- Import patterns: What modules are imported, how (named, default, namespace)
- Export patterns: Named exports, default exports, barrel exports
- Function patterns: Arrow vs declaration, async, parameter style
- HTTP call patterns: How HTTP requests are made
- Type patterns: Interface vs type, naming conventions
- Hook patterns: If React Query/SWR hooks present
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 275 lines · 16 tokens per session scan A 9edd90042612
pattern-detector is a skill published in the GitHub repository jhlee0409/claude-plugins (4 stars, last pushed 9mo ago), licensed MIT. It adds 16 tokens to every session and 1,924 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
printing-press-output-review
Internal sub-skill: agentic review of a printed CLI's sampled command output for plausibility issues that rule-based checks can't encode (substring-match relevance, format bugs, silent source drops, ranking failures). Invoked via the Skill tool by the main printing-press skill at Phase 4.85 and printing-press-polish…
datamodel-code-generator
Use this skill when the user wants Python data models, Pydantic models, dataclasses, TypedDicts, msgspec structs, or type-safe Python classes generated from OpenAPI, AsyncAPI, JSON Schema, GraphQL, JSON/YAML/CSV sample data, MCP tool schemas, Protocol Buffers, XML Schema, Apache Avro, or existing Python model objects.…
security-architecture-review
Reviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it. Use this to review an architecture or pull request for security, set secure coding standards, choose or tune SAST and DAST tooling, assess a…
ork-review-pr
Review a pull request or branch for correctness, regressions, security, operational risk, and missing evidence. Use when a request asks to review a PR, review a diff, find real bugs, assess merge risk, or provide evidence-backed review findings. Do not use for implementation or style-only cleanup.
ork-verify
Verify that existing work is ready to merge, release, or hand off using an explicit evidence contract. Use when a request asks to verify, validate, prove, check readiness, run the relevant tests, or distinguish a claimed result from an observed one. Do not use to write missing tests or fix failures.
ork-assess
Assess a code change, design, architecture, workflow, or competing options against explicit criteria and evidence. Use when a request asks to assess, rate, compare, identify trade-offs, evaluate readiness, or decide whether an approach is good enough. Do not use for a full pull-request review or to implement a chosen…