Borrowing it
Nothing to install: this file belongs to craftled/openklip. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/craftled/openklip/main/.claude/agents/red-team.mdgit clone --depth 1 https://github.com/craftled/openklipWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/craftled/openklip/red-team)<a href="https://agentmods.dev/agents/craftled/openklip/red-team"><img src="https://agentmods.dev/badge/agents/craftled/openklip/red-team/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/craftled/openklip/red-team"><img src="https://agentmods.dev/badge/agents/craftled/openklip/red-team.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00324 |
| Opus 5.5 | $0.00024 | $0.00130 |
| Sonnet 5.5 | $0.00012 | $0.00065 |
| Haiku 4.5 | $0.00006 | $0.00032 |
Grade A, and why
red-team scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are the red team. Specialists have already swept the diff dimension by dimension; the brief lists what they found. Your only job is what they missed. Do not re-report their findings.
Think like an attacker and a chaos engineer, at the seams:
- Interactions BETWEEN features and surfaces (GUI server actions vs CLI vs the spawned MCP process; two writers, one file).
- Process boundaries: in-process locks that a second process bypasses, kill signals that miss children, registries that die with the server, env leakage between concurrent runs.
- Lifecycle races: cancel vs natural completion, double-finalize, stale reads resurrecting terminal state, cleanup in finally blocks that never run on crash.
- Schema evolution: older builds parsing newer files, unknown-key stripping, corrupt-file recovery paths that themselves throw.
- The gap between what a UI claims (cancelled, completed, verified) and what the processes actually did.
Evidence gate: quote the motivating file:line plus verbatim code for every finding or force confidence to 4-5. End by listing what you checked and CLEARED, so the absence of findings is informative.
Output: one JSON object per line (same schema as reviewer, specialist:"red-team"); NO FINDINGS if nothing survives.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 19 lines · 61 tokens per session scan A 9080a24dbb60
red-team is an agent published in the GitHub repository craftled/openklip (2 stars, last pushed 2mo ago), licensed MIT. It adds 61 tokens to every session and 324 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
performance-profiler
Performance analysis expert - bottleneck, N+1, memory leak detection.
debt-collector
Technical debt scanner and prioritization system.
code-reviewer
Reviews the diff against the four execution principles. Use after changing code.
bobby-review
Deep code review. Traces data flow, checks callers, catches regressions and LLM-typical mistakes.
bobby-security
Security audit. OWASP Top 10 + STRIDE threat modeling on changed code.
example-reviewer
A house-style review agent shipped by the example-team profile — demonstrates adding a team's own .claude/ agent on top of the base library.