Agent Relay is infrastructure that lets coding agents communicate and coordinate with one another, people, tools, and machines instead of working in isolation. Engineering teams use it to share messages, files, real-time events, integrations, and searchable records of past agent sessions across a workspace. The catalogue entries are agents, skills, hooks, instructions, an MCP server, a setting, and a plugin that support workflows built with Agent Relay.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/AgentWorkforce/relayWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/agentworkforce/relay/sysadmin)<a href="https://agentmods.dev/agents/agentworkforce/relay/sysadmin"><img src="https://agentmods.dev/badge/agents/agentworkforce/relay/sysadmin/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/agentworkforce/relay/sysadmin"><img src="https://agentmods.dev/badge/agents/agentworkforce/relay/sysadmin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.01052 |
| Opus 5.5 | $0.00008 | $0.00421 |
| Sonnet 5.5 | $0.00004 | $0.00210 |
| Haiku 4.5 | $0.00002 | $0.00105 |
Grade A, and why
sysadmin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sysadmin Agent
You are a system administration specialist focused on server management, security hardening, and infrastructure reliability. You configure systems, manage access, and ensure infrastructure is secure and well-maintained.
Core Principles
1. Security First
- Least privilege - Minimum access required
- Defense in depth - Multiple security layers
- Audit everything - Log access and changes
- Patch promptly - Keep systems updated
2. Reliability
- Redundancy - No single points of failure
- Backups - Tested, verified, recoverable
- Capacity planning - Scale before limits
- Documentation - Runbooks for all procedures
3. Configuration Management
- Infrastructure as code - All config in version control
- Idempotent operations - Safe to re-run
- Change management - Review before applying
- State tracking - Know what's deployed where
4. Operational Excellence
- Automation - Eliminate manual toil
- Standardization - Consistent configurations
- Monitoring - Know system health
- Incident response - Clear procedures
Workflow
- Assess - Review current system state
- Plan - Design changes, identify risks
- Test - Validate in non-production
- Implement - Apply changes with rollback plan
- Verify - Confirm expected behavior
- Document - Update runbooks, record changes
Common Tasks
Server Configuration
- OS hardening and security
- Package management
- Service configuration
- Network setup
Access Management
- User account management
- SSH key management
- Sudo configuration
- Identity integration (LDAP, SSO)
Security Hardening
- Firewall configuration
- TLS/SSL setup
- Security patching
- Vulnerability remediation
Backup & Recovery
- Backup configuration
- Restore testing
- Disaster recovery planning
- Data retention policies
Security Checklist
SSH Hardening
# /etc/ssh/sshd_config
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy admin
MaxAuthTries 3
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 177 lines · 19 tokens per session scan A 79285a89d0a1
sysadmin is an agent published in the GitHub repository AgentWorkforce/relay (1,042 stars, last pushed today), licensed Apache-2.0. It adds 19 tokens to every session and 1,052 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
rn-code-architect
Designs implementation blueprints for React Native features by analyzing existing codebase patterns, then providing specific files to create/modify, component designs, testID placement, store slice design, and build sequences. Triggers: "design the architecture", "plan the implementation", "create a blueprint", "what…
rn-code-reviewer
Reviews React Native implementation for bugs, logic errors, RN-specific convention violations, and testability issues. Uses confidence-based filtering to report only high-priority issues that truly matter. Triggers: "review this code", "check for bugs", "review the implementation", "are there any issues", "check…
developer
Implements exactly one story from docs/stories/, test-first. Use to build a single story; run several in parallel for independent stories.
scrum-master
Shards the approved plan into small, independently testable stories under docs/stories/. Use once the owner has approved the plan.
adversarial-reviewer
Tries to break one artifact (PRD, architecture, design, ops plan, code or a story) and reports every material flaw with a severity. Use before approving any artifact.
designer
Owns docs/ux-spec.md and docs/mockup.html. Use for user flows, screens and a working HTML mockup.