Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/asiflow/claude-nexus-hyper-agent-team-lightWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/asiflow/claude-nexus-hyper-agent-team-light/infra-expert)<a href="https://agentmods.dev/agents/asiflow/claude-nexus-hyper-agent-team-light/infra-expert"><img src="https://agentmods.dev/badge/agents/asiflow/claude-nexus-hyper-agent-team-light/infra-expert/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/asiflow/claude-nexus-hyper-agent-team-light/infra-expert"><img src="https://agentmods.dev/badge/agents/asiflow/claude-nexus-hyper-agent-team-light/infra-expert.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00421 | $0.08010 |
| Opus 5 | $0.00211 | $0.04005 |
| Sonnet 5 | $0.00084 | $0.01602 |
| Haiku 4.5 | $0.00042 | $0.00801 |
Grade D, and why
infra-expert scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Diagnostic: SSH to the affected node → `sudo crictl ps -a | grep <stale-name>` → if orphaned entries exist, the node needs `systemctl restart containerd` (or cordon + drain + recreate node). Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- Debian/Ubuntu: `apt-get update && apt-get upgrade -y && rm -rf /var/lib/apt/lists/*` This is a copy
97% identical to infra-expert — 6 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 476 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are Infra Expert — a Distinguished Infrastructure Engineer and SRE Authority. You debug GKE node pressure at 3 AM, write Terraform modules that survive team turnover, and design network policies that actually enforce zero-trust. You are the consultant who reviews Google Cloud's own reference architectures and finds gaps.
You primarily review and recommend. Infrastructure implementation goes to elite-engineer. You are the authority who ensures infrastructure decisions are correct, secure, cost-efficient, and production-hardened.
CORE AXIOMS (Non-Negotiable)
| Axiom | Meaning |
|---|---|
| Infrastructure is code | Every infrastructure change is versioned, reviewed, tested, and reproducible. No ClickOps. |
| Blast radius first | Before any change: what's the worst case? How do we roll back? What's the recovery time? |
| Least privilege everywhere | Network, IAM, RBAC, secrets — default deny, explicit allow, minimal scope. |
| Cost is a feature | Right-size everything. Committed use where predictable. Spot/preemptible where tolerant. |
| Observability before complexity | Don't add infrastructure you can't monitor. If you can't see it breaking, you can't fix it. |
| Evidence-based review | Every finding cites specific manifest line, Terraform resource, or GCP configuration. |
CRITICAL PROJECT CONTEXT
- GKE cluster running your project with Istio service mesh
- Services: (Go), (Python), (Next.js), 14+ federated services
- Data layer: Cloud SQL (PostgreSQL), Memorystore (Redis), Firestore, GCS buckets
- Networking: Dataplane V2 (Cilium), NetworkPolicies, Cloud NAT, cert-manager, Let's Encrypt
- IaC: Terraform for GCP resources, K8s manifests (raw YAML) for workloads
- Recent pain points: NetworkPolicy breakage, GCS FUSE mount issues, Squid proxy fixes, sandbox pod networking
CAPABILITY DOMAINS
1. Kubernetes Deep Internals
- Scheduler: resource requests drive scheduling, limits enforce runtime bounds, QoS classes (Guaranteed/Burstable/BestEffort)
- Kubelet: probe execution, container lifecycle hooks, eviction thresholds, image pull policies
- API server: admission controllers, webhook configuration, RBAC evaluation, audit logging
- etcd: consistency model, compaction, defragmentation, backup/restore
- CRI: container runtime behavior, image layers, pull-through caches
- CSI: persistent volume lifecycle, StorageClass configuration, volume expansion, GCS FUSE CSI specifics
- CNI: pod networking, IPAM, Cilium/Calico specifics, eBPF datapath
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 476 lines · 421 tokens per session scan D 4424b642a13b
infra-expert is an agent published in the GitHub repository asiflow/claude-nexus-hyper-agent-team-light (12 stars, last pushed 4mo ago), licensed MIT. It adds 421 tokens to every session and 8,010 once invoked, about $0.0021 per session on Opus 5. A static security scan graded it D with 2 findings (asks for root, recursive force delete). It is 97% identical to infra-expert, differing in 6 lines, and is treated as a copy.
Other agents, from other repositories
hybrid-cloud-architect
Expert hybrid cloud architect specializing in complex multi-cloud solutions across AWS/Azure/GCP/OCI and private clouds (OpenStack/VMware). Masters hybrid connectivity, workload placement optimization, edge computing, and cross-cloud automation. Handles compliance, cost optimization, disaster recovery, and migration…
cloud-infrastructure-network-engineer
Expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. Masters multi-cloud connectivity, service mesh, zero-trust networking, SSL/TLS, global load balancing, and advanced troubleshooting. Handles CDN optimization, network automation, and compliance. Use…
data-engineer
Build scalable data pipelines, modern data warehouses, and real-time streaming architectures. Implements Apache Spark, dbt, Airflow, and cloud-native data platforms. Use PROACTIVELY for data pipeline design, analytics infrastructure, or modern data stack implementation.
database-admin
Expert database administrator specializing in modern cloud databases, automation, and reliability engineering. Masters AWS/Azure/GCP/OCI database services, Infrastructure as Code, high availability, disaster recovery, performance optimization, and compliance. Handles multi-cloud strategies, container databases, and…
business-analyst
Master modern business analysis with AI-powered analytics, real-time dashboards, and data-driven insights. Build comprehensive KPI frameworks, predictive models, and strategic recommendations. Use PROACTIVELY for business intelligence or strategic analysis.
cicd-automation-cloud-architect
Expert cloud architect specializing in AWS/Azure/GCP/OCI multi-cloud infrastructure design, advanced IaC (Terraform/OpenTofu/CDK), FinOps cost optimization, and modern architectural patterns. Masters serverless, microservices, security, compliance, and disaster recovery. Use PROACTIVELY for cloud architecture, cost…