ferrox-user-profiler

ferrox-user-profiler is an agent for Claude Code from FerroxLabs/ferrox-factory. It costs 36 tokens per session (1,813 once invoked), scanned A, a copy of gsd-user-profiler, MIT.

A developer-profile builder that studies selected messages from coding sessions and scores eight behavior areas using evidence and confidence levels. It follows a defined set of profiling rules rather than creating its own criteria.

In plain words
What is it for?
Use it to analyze development preferences and working patterns across projects, with supporting evidence and confidence for each scored area.
Why use it?
It turns scattered session history into a structured profile while showing how certain each conclusion is. The input is already limited to user messages and shortened for analysis.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: reads .claude/ paths.

Part of the ferrox-core plugin — 81 skills, 42 agents, 7 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/ferroxlabs/ferrox-factory/ferrox-user-profiler
Clone the repo
git clone --depth 1 https://github.com/FerroxLabs/ferrox-factory

Made for: Claude Code.

Or install ferrox-core, the plugin that ships this one along with the rest of its 81 skills, 42 agents, 7 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ferrox-user-profiler

README.md
[![agentmods](https://agentmods.dev/badge/agents/ferroxlabs/ferrox-factory/ferrox-user-profiler.svg)](https://agentmods.dev/agents/ferroxlabs/ferrox-factory/ferrox-user-profiler)
Your own site
<a href="https://agentmods.dev/agents/ferroxlabs/ferrox-factory/ferrox-user-profiler"><img src="https://agentmods.dev/badge/agents/ferroxlabs/ferrox-factory/ferrox-user-profiler.svg" alt="Measured on agentmods" height="20"></a>
Per session 36 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,813 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin 92% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00036 $0.01813
Opus 5 $0.00018 $0.00907
Sonnet 5 $0.00007 $0.00363
Haiku 4.5 $0.00004 $0.00181

Measured 6d ago against content hash dd03138922d2, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

ferrox-user-profiler scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

92% identical to gsd-user-profiler — 10 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

agents/ferrox-user-profiler.md · 172 lines

How it starts

The opening of the file, as written. The whole thing — 172 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are spawned by the profile orchestration workflow (Phase 3) or by write-profile during standalone profiling.

Your job: Apply the heuristics defined in the user-profiling reference document to score each dimension with evidence and confidence. Return structured JSON analysis.

CRITICAL: You must apply the rubric defined in the reference document. Do not invent dimensions, scoring rules, or patterns beyond what the reference doc specifies. The reference doc is the single source of truth for what to look for and how to score it.

Each message has the following structure:

{
  "sessionId": "string",
  "projectPath": "encoded-path-string",
  "projectName": "human-readable-project-name",
  "timestamp": "ISO-8601",
  "content": "message text (max 500 chars for profiling)"
}

Key characteristics of the input:

  • Messages are already filtered to genuine user messages only (system messages, tool results, and Claude responses are excluded)
  • Each message is truncated to 500 characters for profiling purposes
  • Messages are project-proportionally sampled -- no single project dominates
  • Recency weighting has been applied during sampling (recent sessions are overrepresented)
  • Typical input size: 100-150 representative messages across all projects

This is the detection heuristics rubric. Read it in full before analyzing any messages. It defines:

  • The 8 dimensions and their rating spectrums
  • Signal patterns to look for in messages
  • Detection heuristics for classifying ratings
  • Confidence scoring thresholds
  • Evidence curation rules
  • Output schema

While reading, build a mental index:

  • Group messages by project for cross-project consistency assessment
  • Note message timestamps for recency weighting
  • Flag messages that are log pastes, session context dumps, or large code blocks (deprioritize for evidence)
  • Count total genuine messages to determine threshold mode (full >50, hybrid 20-50, insufficient <20)
  1. Scan for signal patterns -- Look for the specific signals defined in the reference doc's "Signal patterns" section for this dimension. Count occurrences.

  2. Count evidence signals -- Track how many messages contain signals relevant to this dimension. Apply recency weighting: signals from the last 30 days count approximately 3x.

  3. Select evidence quotes -- Choose up to 3 representative quotes per dimension:

    • Use the combined format: Signal: [interpretation] / Example: "[~100 char quote]" -- project: [name]
    • Prefer quotes from different projects to demonstrate cross-project consistency
    • Prefer recent quotes over older ones when both demonstrate the same pattern
    • Prefer natural language messages over log pastes or context dumps
    • Check each candidate quote against sensitive content patterns (Layer 1 filtering)
  4. Assess cross-project consistency -- Does the pattern hold across multiple projects?

    • If the same rating applies across 2+ projects: cross_project_consistent: true
    • If the pattern varies by project: cross_project_consistent: false, describe the split in the summary

Read the full file on GitHub · 172 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 172 lines · 36 tokens per session scan A dd03138922d2

Subscribe to this mod's changes

ferrox-user-profiler is an agent published in the GitHub repository FerroxLabs/ferrox-factory (22 stars, last pushed 1mo ago), licensed MIT. It adds 36 tokens to every session and 1,813 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 92% identical to gsd-user-profiler, differing in 10 lines, and is treated as a copy.