mitigation_writer

mitigation_writer is an agent for coding agents from elvismusli/onlyharness. It costs 0 tokens per session (48 once invoked), scanned A, original, no licence file.

A written decision about whether a permission should be granted, together with a plan to limit that permission to what is necessary.

In plain words
What is it for?
Use it to write permission verdicts and least-privilege mitigation plans.
Why use it?
It helps turn access decisions into clear rules that reduce unnecessary privileges.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/elvismusli/onlyharness/mitigation_writer
Clone the repo
git clone --depth 1 https://github.com/elvismusli/onlyharness

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mitigation_writer

README.md
[![agentmods](https://agentmods.dev/badge/agents/elvismusli/onlyharness/mitigation_writer.svg)](https://agentmods.dev/agents/elvismusli/onlyharness/mitigation_writer)
Your own site
<a href="https://agentmods.dev/agents/elvismusli/onlyharness/mitigation_writer"><img src="https://agentmods.dev/badge/agents/elvismusli/onlyharness/mitigation_writer.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 48 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00048
Opus 5 $0.00000 $0.00024
Sonnet 5 $0.00000 $0.00010
Haiku 4.5 $0.00000 $0.00005

Measured 3d ago against content hash 5c063562756a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mitigation_writer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

seed-harnesses/security-permission-auditor/agents/mitigation_writer.md · 7 lines

The source is not reproduced here

No licence file

A repository with no LICENSE is all rights reserved by default, so the body is not copied here. The metadata, the measurements and the link are.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 7 lines · 0 tokens per session scan A 5c063562756a

Subscribe to this mod's changes

mitigation_writer is an agent published in the GitHub repository elvismusli/onlyharness (0 stars, last pushed 1mo ago), with no licence file. It costs nothing until one of its globs matches a file; then it loads 48 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

charter

You are one subagent in an autonomous browser-game agent — a durable operator that builds a single game and then runs it like a real studio: bug fixes, new features, gameplay and balance iteration, new content, and polish. Operate autonomously: don't pause to ask the operator questions, request permission, or wait to…

kyh/vibedgames · 0 tokens

merge-conflict-resolver

Use this agent when you encounter Git merge conflicts that need intelligent resolution, whether they are simple line-based conflicts, complex semantic conflicts involving behavioral changes, or structural conflicts from refactoring. This agent should be used proactively when merge operations fail due to conflicts, or…

module-federation/core · 0 tokens

feature-reviewer

Engineering scrutiny subagent for a bounded validation-review question. Reviews current implementation, evidence surfaces, shortcut risk, responsibility drift, and contract satisfaction for assigned contract targets. Parent validator decides.

Intelligent-Internet/zenith · 40 tokens

docs-app-builder

Use this agent to build a documentation application as a React app — from a repo's README, docs folder, or code. Trigger on "build a docs site", "documentation app for this project", "turn these docs into a website", "docs portal with navigation", or requests to make existing docs browsable/interactive. Returns a…

aayushostwal/nexus · 97 tokens

broadcasting-agent

Creates WebSocket broadcasting infrastructure (NestJS backend) and real-time consumption on the frontend (Next.js or React). Use when adding real-time event broadcasting to a bounded context, creating Socket.IO gateways, or implementing frontend event listeners. Dispatched after infrastructure layer is complete.

Softtor/nestjs-hexagonal · 58 tokens

finding-verifier

Per-finding verification judge for the review pipeline — a FRESH context that receives exactly ONE candidate review finding and scores how real it is (confidence 0-100). Spawned in parallel by /review's synthesis step for findings only one ensemble pass raised. Utility agent (no author pair, read-only, never edits…

saeedkolivand/ai-job-hunter-app · 92 tokens