Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/motlin/claude-code-plugins/openrewrite-analyze-recipesnpx skills add motlin/claude-code-plugins --skill openrewrite-analyze-recipesgit clone --depth 1 https://github.com/motlin/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/motlin/claude-code-plugins/openrewrite-analyze-recipes)<a href="https://agentmods.dev/skills/motlin/claude-code-plugins/openrewrite-analyze-recipes"><img src="https://agentmods.dev/badge/skills/motlin/claude-code-plugins/openrewrite-analyze-recipes.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00057 | $0.00563 |
| Opus 5 | $0.00028 | $0.00282 |
| Sonnet 5 | $0.00011 | $0.00113 |
| Haiku 4.5 | $0.00006 | $0.00056 |
Grade A, and why
openrewrite-analyze-recipes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Analyze OpenRewrite Recipes
Inspect the repository before choosing commands. Follow the Maven CLI skill whenever invoking Maven.
Discover the invocation
- Read the
rewrite-maven-pluginconfiguration and record<activeRecipes>and<activeStyles>. - Prefer repository-provided
justrecipes when they configure profiles, dependencies, or toolchains. - Prefix commands with
mise exec --when the repository uses mise, and trust the checked-in config first when required. - When calling Maven directly, activate any profile that contains the rewrite plugin.
- Never use Maven offline mode for this workflow.
Capture the dry run
Create .llm/ when needed and capture the complete output rather than only the terminal tail. Use the repository command or the equivalent Maven goal:
mvn rewrite:dryRun 2>&1 | tee .llm/rewrite-dryrun.log
Treat OpenRewrite's "Applying recipes would make changes" result as a successful violation report. If the run fails with a RocksdbMavenPomCache serialization error, rerun with -Drewrite.pomCacheEnabled=false; clearing the cache alone does not prevent recurrence.
Copy target/rewrite/rewrite.patch to .llm/rewrite-dryrun.patch when the patch exists.
Rank violations
Parse the recipe tree associated with every changed file. Count the most specific named leaf recipe in each branch. Prefer a named wrapper over a raw parameterized child recipe because a child displayed with inline options cannot be activated by name alone.
Save a two-column count and fully qualified recipe report in .llm/rewrite-violations-per-rule.txt. Report:
- Total changed files
- Patch line count
- Total violations
- Unique triggered recipes
- Every recipe ranked by count
Mark composite recipes only when the log provides enough tree context to distinguish them reliably.
Optionally run one recipe
Present the highest-ranked leaf recipes and ask the user which recipe, if any, to apply. Before applying it, require a clean working tree; do not stash or discard changes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 55 lines · 57 tokens per session scan A 9d153315d2e4
openrewrite-analyze-recipes is a skill published in the GitHub repository motlin/claude-code-plugins (15 stars, last pushed today), licensed Apache-2.0. It adds 57 tokens to every session and 563 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
wxjava-api-contributor
按 WxJava 的 Maven 多模块、Java 8、公共 API 兼容性和 TestNG 约定,为微信官方接口新增或维护 SDK 支持。适用于新增 Service API、请求响应 Bean、序列化、HTTP 实现、Starter 配置或回归测试时。.
azure-security-keyvault-secrets-java
Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.
azure-ai-anomalydetector-java
Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.
azure-communication-chat-java
Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.
azure-communication-common-java
Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.
azure-data-tables-java
Build table storage applications with Azure Tables SDK for Java. Use when working with Azure Table Storage or Cosmos DB Table API for NoSQL key-value data, schemaless storage, or structured data at scale.