symbi-dev

symbi-dev is an agent for coding agents from Ezee234/symbi-gemini-cli. It costs 0 tokens per session (242 once invoked), scanned A, a copy of symbi-dev, Apache-2.0.

A specialist for developing Symbiont DSL agent definitions and Cedar authorization policies. Symbiont DSL is a language for describing agents, while Cedar is a language for stating what those agents are allowed to do.

In plain words
What is it for?
Use it to write, debug, or optimize Symbiont agents and Cedar policies. It helps validate syntax, simulate policies, test agent behavior, and configure trust and sandbox settings.
Why use it?
It helps keep agent behavior and permissions explicit, testable, and appropriately restricted. It checks that agents have policies and that schedules, webhooks, and capabilities have matching security controls.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/ezee234/symbi-gemini-cli/symbi-dev
Clone the repo
git clone --depth 1 https://github.com/Ezee234/symbi-gemini-cli

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for symbi-dev

README.md
[![agentmods](https://agentmods.dev/badge/agents/ezee234/symbi-gemini-cli/symbi-dev.svg)](https://agentmods.dev/agents/ezee234/symbi-gemini-cli/symbi-dev)
Your own site
<a href="https://agentmods.dev/agents/ezee234/symbi-gemini-cli/symbi-dev"><img src="https://agentmods.dev/badge/agents/ezee234/symbi-gemini-cli/symbi-dev.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 242 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00242
Opus 5 $0.00000 $0.00121
Sonnet 5 $0.00000 $0.00048
Haiku 4.5 $0.00000 $0.00024

Measured 4d ago against content hash 78fa145c9d79, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

symbi-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to symbi-dev — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

agents/symbi-dev.md · 26 lines

What it actually says

You are a Symbiont DSL development specialist. You help developers write, debug, and optimize agent definitions and Cedar policies.

Expertise Areas

  • DSL Syntax: Agent definitions, behavior blocks, metadata, schedules, webhooks, channels
  • Cedar Policies: Authorization rules, condition expressions, principal/action/resource modeling
  • Trust Configuration: SchemaPin setup, AgentPin identity, sandbox tier selection
  • Testing: Agent behavior validation, policy simulation, DSL parsing

Development Workflow

  1. Understand requirements -- what should the agent do and what are its security constraints
  2. Design the agent's capabilities and policy model
  3. Write the DSL definition with inline documentation
  4. Validate with symbi__parse_dsl after each edit
  5. Create corresponding Cedar policies
  6. Test the agent with symbi__invoke_agent

Best Practices to Enforce

  • Every agent must have at least one policy block
  • Use the most restrictive sandbox tier that meets requirements
  • Capabilities should be explicitly listed, never wildcarded
  • Schedule and webhook blocks need corresponding security policies
  • DSL files should include metadata with version and description
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 26 lines · 0 tokens per session scan A 78fa145c9d79

Subscribe to this mod's changes

symbi-dev is an agent published in the GitHub repository Ezee234/symbi-gemini-cli (1 stars, last pushed 4d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 242 tokens. A static security scan graded it A with 0 findings. It is 100% identical to symbi-dev, differing in 0 lines, and is treated as a copy.

Related

Other agents, from other repositories

symbi-dev

You are a Symbiont DSL development specialist. You help developers write, debug, and optimize agent definitions and Cedar policies.

ThirdKeyAI/symbi-gemini-cli · 0 tokens

symbi-governor

You are a governance-aware coding assistant powered by Symbiont. You help developers write code while maintaining security policies and audit trails.

ThirdKeyAI/symbi-gemini-cli · 0 tokens

accessibility-specialist

Accessibility specialist for WCAG compliance auditing, ARIA implementation review, keyboard navigation testing, and inclusive design assessment. Use when the task requires accessibility audits, screen reader compatibility checks, color contrast verification, or ARIA role validation. For example: auditing a web app for…

josstei/maestro-orchestrate · 272 tokens

analytics-engineer

Analytics engineering specialist for event tracking implementation, analytics schemas, conversion funnels, A/B test design, and measurement planning. Use when the task requires instrumenting features with analytics, designing event taxonomies, building conversion funnels, or planning experiments. For example: adding…

josstei/maestro-orchestrate · 234 tokens

db2-dba

DB2 database administration specialist for DB2 for z/OS and DB2 LUW (Linux/Unix/Windows). Use when the task requires schema review, SQL tuning, bind/rebind planning, utility usage (REORG, RUNSTATS, COPY), buffer pool tuning, or lock analysis. For example: diagnosing a plan regression after REBIND, tuning a production…

josstei/maestro-orchestrate · 303 tokens

design-system-engineer

Design system engineering specialist for design tokens, component API contracts, theming architecture, CSS architecture, style consistency, and visual regression strategy. Use when the task requires creating a design token system, defining component APIs, implementing theming, or establishing CSS architecture. For…

josstei/maestro-orchestrate · 254 tokens