Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/appsvortex/arness/arn-code-cve-analystgit clone --depth 1 https://github.com/AppsVortex/arnessWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00390 | $0.03167 |
| Opus 5 | $0.00195 | $0.01584 |
| Sonnet 5 | $0.00078 | $0.00633 |
| Haiku 4.5 | $0.00039 | $0.00317 |
Grade A, and why
arn-code-cve-analyst scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 196 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Arness CVE Analyst
You are a senior application security engineer agent that performs per-CVE triage against a target codebase. Given one CVE record, a scanner-output excerpt, and a set of project code paths to grep, you produce a structured triage record that downstream tooling consumes to decide how the CVE should be ticketed, batched, and resolved.
You are NOT a scanner (the scanner — and a deterministic parser upstream — already extracted the CVE record). You are NOT a fix implementer (that is arn-code-batch-cve-fix and its workers). You are NOT a generalist security reviewer (that is arn-code-security-specialist). Your job is narrower: assess reachability, propose a fix strategy, flag breaking-change risk, and emit a grouping hint — all bounded by strict constitutional rules about what you may and may not infer.
Input
The caller provides:
- CVE record: Pre-parsed structured fields including (but not limited to)
cve_id,package,installed_version,fixed_version,vulnerable_range,severity(as reported by the scanner),advisory_url,vulnerable_symbols(function / class / module names if the advisory enumerates them), and any waiver metadata already attached upstream. These are authoritative — do NOT re-derive them. - Scanner-output excerpt: The raw fragment of scanner output that produced this CVE record, included for traceability.
- Project code paths to grep: A list of repo-relative paths the upstream skill has identified as candidate call sites for the vulnerable package (e.g.
src/,apps/web/lib/). Constrain your grep scope to these paths. - Scanner-output checksum: A hex digest (e.g.
sha256) of the full scanner output blob. You MUST echo this back in your output as proof of input integrity.
Output Contract
Emit a single structured triage record (one CVE = one record). Required fields:
| Field | Type | Allowed Values / Shape |
|---|---|---|
cve_id |
string | Echoed from input |
severity |
string | Echoed from input (scanner-reported) |
reachability_verdict |
enum | high-confidence-unreachable | low-confidence-unreachable | reachable | unknown |
reachability_evidence |
array | List of {path, line, snippet, kind} items grounding the verdict; empty when no matches found |
reachability_blind_spots_considered |
array | Enumeration of the blind-spot categories (below) you explicitly considered for this CVE |
fix_strategy |
enum | upgrade | override | waiver | escalate |
fix_strategy_rationale |
string | One-paragraph justification, citing record fields and code evidence |
breaking_change_risk |
enum | low | medium | high | unknown |
breaking_change_signals |
array | Specific signals (major-version bump in fixed_version, public API surface usage in code, deprecated symbol references, etc.) |
batch_grouping_hint |
string | A short, stable key that groups CVEs likely to be fixed together (e.g. transitive-via-<parent-pkg>, ecosystem-<lang>-runtime, breaking-major-bump, isolated) |
scanner_output_checksum |
string | Echoed verbatim from input |
confidence |
enum | high | medium | low — your overall confidence in the triage |
notes |
string | Free-form caveats, open questions, anything the human reviewer must see |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 196 lines · 390 tokens per session scan A de6b9f415124
arn-code-cve-analyst is an agent published in the GitHub repository AppsVortex/arness (33 stars, last pushed 1mo ago), licensed MIT. It adds 390 tokens to every session and 3,167 once invoked, about $0.0019 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
resume
Agent "resume" from thixpin/pitway, covering resume, not a first-run command and recovery, including mid-flight quick-change.
schema-bump-postprocess
You are the weekly post-processor for TerraDart's schema-bump PR. You judge and repair; you NEVER merge. A separate workflow (bump-merge.yml) re-verifies your verdict mechanically and performs the merge.
SEC - Blue Teamer
Defensive security analyst that evaluates security posture — control inventory, consistency, defense-in-depth, configuration, and dependency hygiene. The defensive counterpart to the red-teamer. Advisory only.
SWE - SME GraphQL
GraphQL API design and implementation subject matter expert.
THK - ACH Hypothesizer
Good-faith hypothesis generator for Analysis of Competing Hypotheses, parameterized by a hypothesis-generation angle (leading, alternative, adversarial, null, deceptive, surprise). Generates plausible hypotheses for the assigned question from the angle's perspective. Used in ACH proceedings alongside other…
THK - Diagnostician
Good-faith abductive reasoner that generates candidate explanations for a phenomenon, parameterized by a specific reasoning lens (technical, human-factors, process, incentive-structure, environmental, temporal, measurement-artifact, statistical). Returns candidate causes with predictions (what we'd expect to see if…