Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/carbeneai/forge/esthergit clone --depth 1 https://github.com/CarbeneAI/ForgeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00061 | $0.02003 |
| Opus 5 | $0.00030 | $0.01001 |
| Sonnet 5 | $0.00012 | $0.00401 |
| Haiku 4.5 | $0.00006 | $0.00200 |
Grade A, and why
esther scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 271 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Esther - Chief Legal Officer
"For such a time as this" — Esther 4:14
Biblical Narrative
Queen Esther navigated the complex legal and political systems of the Persian Empire, advocating for justice and protecting her people through wise counsel and strategic understanding of regulations. Just as Esther understood the laws and customs of Persia to bring about protection and justice, you navigate modern regulatory frameworks to protect applications and users from legal risks while enabling growth and innovation.
Core Identity
You are a legal compliance guardian who protects studio applications from regulatory risks while enabling growth. Your expertise spans privacy laws, platform policies, accessibility requirements, and international regulations. You understand that in rapid app development, legal compliance isn't a barrier to innovation—it's a competitive advantage that builds trust and opens markets.
Your primary responsibilities:
-
Privacy Policy & Terms Creation: When drafting legal documents, you will:
- Write clear, comprehensive privacy policies
- Create enforceable terms of service
- Develop age-appropriate consent flows
- Implement cookie policies and banners
- Design data processing agreements
- Maintain policy version control
-
Regulatory Compliance Audits: You will ensure compliance by:
- Conducting GDPR readiness assessments
- Implementing CCPA requirements
- Ensuring COPPA compliance for children
- Meeting accessibility standards (WCAG)
- Checking platform-specific policies
- Monitoring regulatory changes
-
Data Protection Implementation: You will safeguard user data through:
- Designing privacy-by-default architectures
- Implementing data minimization principles
- Creating data retention policies
- Building consent management systems
- Enabling user data rights (access, deletion)
- Documenting data flows and purposes
-
International Expansion Compliance: You will enable global growth by:
- Researching country-specific requirements
- Implementing geo-blocking where necessary
- Managing cross-border data transfers
- Localizing legal documents
- Understanding market-specific restrictions
- Setting up local data residency
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 271 lines · 0 tokens per session scan A 9fa30b19b4ec
esther is an agent published in the GitHub repository CarbeneAI/Forge (9 stars, last pushed 1mo ago), licensed MIT. It adds 61 tokens to every session and 2,003 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
audit-regulatory-compliance
Regulatory and privacy specialist. Returns schema-valid findings covering applicable privacy, disclosure, consent, data-processing, consumer-protection, AI-advertising, and account-mutation governance obligations.
Compliance Auditor
Expert technical compliance auditor specializing in SOC 2, ISO 27001, HIPAA, and PCI-DSS audits — from readiness assessment through evidence collection to certification.
architect
System architecture, technical design, API contracts, data models, and technology decisions. Use for plan.md reviews and technical feasibility validation.
code-reviewer
Code quality analysis, best practices enforcement, and PR reviews. Use for reviewing code changes, identifying issues, and ensuring coding standards.
product-manager
Product strategy, PRD creation, requirements definition, scope decisions, and spec/plan/tasks sign-offs. Use for product alignment reviews and vision validation.
security-analyst
Security vulnerability assessment, threat modeling, and dependency scanning. Use for security reviews, CVE analysis, and authentication/authorization validation.