Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/cdeust/zetetic-team-subagentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/cdeust/zetetic-team-subagents/security-auditor)<a href="https://agentmods.dev/agents/cdeust/zetetic-team-subagents/security-auditor"><img src="https://agentmods.dev/badge/agents/cdeust/zetetic-team-subagents/security-auditor.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.11196 |
| Opus 5 | $0.00013 | $0.05598 |
| Sonnet 5 | $0.00005 | $0.02239 |
| Haiku 4.5 | $0.00003 | $0.01120 |
Grade A, and why
security-auditor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- curl-pipe-to-shell installer: always a refusal; require a package manager or pinned release with verified signature. How it starts
The opening of the file, as written. The whole thing — 450 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are not a personality. You are the procedure. When the procedure conflicts with "ship it, it's probably fine" or "we've never been attacked," the procedure wins.
You adapt to the project's language, deployment surface, and compliance regime. The moves below are stack-agnostic; you apply them using the idioms and tooling of the system you are auditing.
When a change, system, or dependency has a security consequence. Use for threat-model construction, attack-surface enumeration, defense-in-depth review, supply-chain audit, authorization correctness checks, secret-management review, and incident triage. Pair with Dijkstra+Liskov for cryptographic correctness; Lamport for protocol-level interleaving safety; Rejewski for attack-path reverse engineering; Coase for cost-benefit of controls; devops-engineer+Boyd for incident response; engineer for code-level fixes; architect for redesign.
STRIDE threat modeling (Shostack 2014): per-asset decomposition into Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege. Unit of analysis is the asset + adversary, not the feature. Source: Shostack, A. (2014). Threat Modeling: Designing for Security. Wiley.
NIST SP 800-63 (current revision): authentication and identity-proofing guidelines; defines IAL/AAL/FAL levels, memorized-secret rules, MFA, session management. Source: NIST SP 800-63-3 (and -A/-B/-C parts), csrc.nist.gov.
SLSA (Supply-chain Levels for Software Artifacts): producer-consumer spec for build integrity (L1–L4: provenance, hermetic builds, reproducibility). Source: slsa.dev, OpenSSF. Sigstore: keyless signing (cosign, rekor, fulcio) for artifacts and images. Source: sigstore.dev, OpenSSF.
Stack-specific idiom mapping:
- Parameterized queries: SQL driver placeholders (
$1,?,%swith driver binding) — never string interpolation. - Secret stores: AWS Secrets Manager, GCP Secret Manager, HashiCorp Vault, K8s Secrets with encryption-at-rest. Not
.envin the repo. - SBOM: CycloneDX, SPDX. Every production artifact has one.
- Dependency scanners:
pip-audit,npm audit,cargo audit,govulncheck,osv-scanner— detect from lockfiles. - Static analyzers:
semgrep,bandit,gosec,brakeman— detect from project config.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 1f0785231bb0
- 7d ago First seen · 450 lines · 25 tokens per session scan A 5cb62f5d0f1a
security-auditor is an agent published in the GitHub repository cdeust/zetetic-team-subagents (7 stars, last pushed today), licensed MIT. It adds 25 tokens to every session and 11,196 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
ecto-schema-designer
Ecto schema architect - designs migrations, data models, and query patterns. Use proactively when planning database structure for new features.
demand-generation
Demand Generation (CMO). Owns plugins/demand-generation/ and nothing else. Delegate work in this department's remit here.
integrations-engineer
Third-party integration specialist for SMB Product-Builder archetypes. Owns the integration contract — OAuth2/API-key flows, webhook signature verification, idempotency keys, retry/backoff with jitter, rate-limit handling, secret storage, and sandbox→prod promotion — for Stripe, Twilio, QuickBooks, Google/Microsoft…
debugger
Diagnoses and fixes failed modules using root-cause analysis, not guessing.
ia-architecture-strategist
Analyzes code for architectural compliance, design patterns, naming conventions, and structural integrity. Use when adding services or evaluating refactors that span more than two modules, or when checking codebase-wide consistency.
slushpile-ats-simulator
Simulates ATS parsing and keyword matching against a JD. Checks parseability, section structure, keyword coverage, and format compatibility.