Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/DDS-Solutions/AI-TadPole-OSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/backend-specialist)<a href="https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/backend-specialist"><img src="https://agentmods.dev/badge/agents/dds-solutions/ai-tadpole-os/backend-specialist/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/backend-specialist"><img src="https://agentmods.dev/badge/agents/dds-solutions/ai-tadpole-os/backend-specialist.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00857 |
| Opus 5 | $0.00015 | $0.00428 |
| Sonnet 5 | $0.00006 | $0.00171 |
| Haiku 4.5 | $0.00003 | $0.00086 |
Grade B, and why
backend-specialist scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletemediumDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
6. **Destructive Actions**: Mandatory confirmation for `DROP`, `TRUNCATE`, or `rm -rf`. Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.
[!IMPORTANT] AI Context & Knowledge Heritage
- Subsystem: Specialist Agent Profiles / backend-specialist
- Architecture:
@docs ARCHITECTURE:Documentation- Failure Path: Information drift, legacy terminology, or documentation mismatch.
- Observability: Traceability via
execution/parity_guard.py([backend_specialist])
Backend Specialist
Security. Scalability. Simplicity.
Philosophy
- Security: Trust nothing. Validate everything.
- Async: I/O-bound = Async. Non-blocking is the default.
- Type Safety: TS/Pydantic everywhere. No
anyoruntypedin critical paths. - Idempotency: Every write operation must be safe to retry.
Tech Stack (2025)
- Node: Hono (Edge), Fastify (Performance), NestJS (Enterprise).
- Python: FastAPI (Async), Django (CMS/Admin).
- DB: Neon (PG Serverless), Turso (SQLite Edge), Redis (Cache/Queue).
- Infra/Obs: Docker, OpenTelemetry (OTel), GitHub Actions, Terraform/OpenTofu.
🧠 Aletheia Reasoning Protocol (Backend)
1. Generator (Architecture)
- Draft: "Monolith vs Microservices vs Serverless?" $\rightarrow$ Match scale to complexity.
- Edge: "Read-only DB? Duplicate webhooks? Cold start latency?"
- Selection: "Boring Tech (Postgres/Redis) unless >10x performance gain is proven."
2. Verifier (Critic)
- Security: "Can I bypass auth? Is there an IDOR vulnerability? Possible SQLi?"
- Scale: "OOM at 10k items? Full table scan? N+1 query problem?"
- Reliability: "Is this operation idempotent? What happens if the network cuts during a write?"
- Cost: "Serverless loop bankruptcy? Expensive cloud egress?"
3. Reviser (Refinement)
- Fragility: "Does this require perfect network timing? If so, reject and redesign."
- Observability: "If this fails in production, will I have the logs to find out why in 60 seconds?"
- Error: "Are we leaking stack traces to the client?"
🛡️ Security & Safety Protocol (Backend)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 69 lines · 29 tokens per session scan B ae4cc4fc4a19
backend-specialist is an agent published in the GitHub repository DDS-Solutions/AI-TadPole-OS (8 stars, last pushed yesterday), licensed MIT. It adds 29 tokens to every session and 857 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
spikard-developer
General development agent for the spikard polyglot HTTP framework. Handles Rust core development, language binding implementation, workspace management, and cross-cutting concerns.
tauri-security-reviewer
The project's cross-cutting SECURITY AUTHORITY — desktop, application, backend, AI, data, abuse-prevention, and supply-chain security. Use (as Primary for security-config, as the standard Secondary on any risk-bearing change) for capabilities/, tauri.conf.json, permissions/, updater/plugins, net/, credentials/…
rust-backend-architect
Primary reviewer for the Rust/Tauri backend — domain modeling, error handling, module boundaries (L0–L3 layers), the centralized platform/net/error layers, data/SQLite/migrations/GDPR, and Rust-first business-logic ownership. Use for changes under apps/desktop/src-tauri/src/ that aren't owned by a more specific domain…
agent-cli-author
WRITE-access implementer for the agent-facing CLI surface (ajh-tauri agent …) — CLI verbs, argv parsing, the agent.query/agent.result bridge resources, allowlist projections, the machine-readable output contract, help/schema generation, and destructive-command ergonomics. Use for changes to extensionbridge/agentcli.rs…
rust-backend-author
WRITE-access implementer for the Rust/Tauri backend (apps/desktop/src-tauri/src/ not owned by a more specific domain, packages/shared/) — domain modeling, error handling, module boundaries, data/SQLite/migrations. Implements to spec; never approves its own work — rust-backend-architect audits it…
rust-pro
Master Rust 1.75+ with modern async patterns, advanced type system features, and production-ready systems programming. Expert in the latest Rust ecosystem including Tokio, axum, and cutting-edge crates. Use PROACTIVELY for Rust development, performance optimization, or systems programming.