Katta041/asitis-agent-tools

**Lint CLAUDE.md, AGENTS.md and SKILL.md before your agent reads them.** A free Claude Code plugin and MCP server that checks steering files against the vendors' published rules, estimates the tokens they load every session, and flags hidden instructions: comments addressed to the AI, zero-width and bidirectional characters, styled-away text. Also a CLI, a GitHub Action and a pre-commit hook for CI. Read-only, no network, MIT.
Try it in 30 seconds
**No install:** paste a file into the browser checker. Same linter, runs in your browser tab, nothing is uploaded.
**Claude Code:** add the marketplace and install the plugin, then run /asitis:md-lint or /asitis:md-budget in a new session.
**Other MCP clients:** the server is on npm. This is the command your client's MCP config runs (always pin the version). Ready-made configs are under Install.
- **Lint:** frontmatter on line 1 and valid YAML, SKILL.md name and description rules, CLAUDE.md 200 lines, SKILL.md 500 lines, Codex's 32 KiB budget, broken links and @imports, duplicate and contradictory rules.
- **Budget:** approximate tokens per file and per tool for what loads every session (Claude Code, Codex, Gemini CLI, Cursor, Copilot, Windsurf, Cline).
- **Hidden content:** HTML and [//]: # comments that read like instructions, invisible Unicode, bidi controls, display:none text.
- **Drift:** an AGENTS.md that Claude Code skips because a CLAUDE.md shadows it, mirrored files that disagree, Codex's shared 32 KiB budget.
- **Skills and agent config (opt-in):** skill scripts that download and run code, decode payloads or read credentials; hooks, permissions and MCP servers in .claude/settings.json and .mcp.json. Off unless you pass include.
- **Fixes:** /asitis:md-fix (or asitis lint --fix-preview) shows mechanical fixes as a diff and applies only what you accept.
- **CI:** npx -y -p @asitis/mcp@0.3.0 asitis lint, a GitHub Action and a pre-commit hook. See CLI and CI.
- **Guard (optional):** warns before Claude rewrites a whole markdown file or strips its line endings, trailing spaces or BOM. An accident guard, not a security boundary.
- **Read-only:** no write tool, no network code, runs under Node's permission model in the plugin.
Words used below: a **steering file** is any file an AI coding agent reads as instructions (CLAUDE.md, AGENTS.md, SKILL.md, Cursor rules, Copilot instructions, GEMINI.md). An **@import** is a line such as @docs/style.md that makes Claude Code or Gemini CLI load another file. A **baseline** is a list of the findings you already have, so CI reports only new ones; each finding is matched by its **fingerprint**, a hash of the rule, the file and the line's text.
Install
Requires Node 22.13 or later on your PATH.
Claude Code (plugin)
Run the two commands from Try it in 30 seconds. Inside a session, /plugin marketplace add Katta041/asitis-agent-tools and /plugin install asitis@asitis do the same. Start a new session, then run /asitis:md-lint, /asitis:md-budget or /asitis:md-fix.
To update, run claude plugin marketplace update asitis, then claude plugin update asitis@asitis, and restart Claude Code. To remove it, run claude plugin uninstall asitis@asitis.
From a local clone instead:
Or try it for one session without installing: claude --plugin-dir ./asitis-agent-tools/plugins/asitis.
The plugin never downloads the server at runtime. See plugins/asitis/README.md for the skill, commands, guard hook and options.
To add only the MCP server to Claude Code, without the skill, commands or hook:
Other MCP clients (Claude Desktop, Cursor, Codex, Gemini CLI)
The server is published on npm as @asitis/mcp. Always pin the version; never use @latest in an agent config. Clients start servers outside your project, so give --root as an absolute path.
**Claude Desktop**: ~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows.
**Cursor**: .cursor/mcp.json in the project (or ~/.cursor/mcp.json).
If your Cursor version does not expand ${workspaceFolder}, use an absolute path. The server refuses a root that still contains ${...} rather than guessing.