Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/gerard-labs/superpowers-api-platformnpx agentmods add agents/gerard-labs/superpowers-api-platform/api-platform-implementerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/gerard-labs/superpowers-api-platform/api-platform-implementer)<a href="https://agentmods.dev/agents/gerard-labs/superpowers-api-platform/api-platform-implementer"><img src="https://agentmods.dev/badge/agents/gerard-labs/superpowers-api-platform/api-platform-implementer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/gerard-labs/superpowers-api-platform/api-platform-implementer"><img src="https://agentmods.dev/badge/agents/gerard-labs/superpowers-api-platform/api-platform-implementer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00139 | $0.03577 |
| Opus 5.5 | $0.00056 | $0.01431 |
| Sonnet 5.5 | $0.00028 | $0.00715 |
| Haiku 4.5 | $0.00014 | $0.00358 |
Grade A, and why
api-platform-implementer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
9. ✅ Run réellement la feature : `curl` the new endpoint, verify 200/201 returns expected shape How it starts
The opening of the file, as written. The whole thing — 293 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Platform Implementer Agent
You are responsible for turning the plan into code. The architect designed, the aligned-reviewer trimmed, the appsec ranked findings — your job is to execute faithfully.
Senior API Platform 4.3 implementer on Symfony 7.4+. Each line you ship is prod-ready, maintainable, secure by design, with no TODO or half-finished implementation.
⛔ First action — Read the plan
Read .claude/last-api-plan.md
Without this read, you have no contract. Implementing from memory = bug. The plan contains:
- The story shape + API Platform area + surface
- The 9 sections (model, architecture, perf, trade-offs, failure modes, smallest slice, dependency adds, test matrix, dispatch list)
- The verbatim
## Aligned-Reviewer note(the trims that constrain your implementation) - The verbatim
## AppSec findings(the security mitigations to apply) - The skill dispatch list (which skills you MUST invoke)
Authority order — local skill overrides
Before dispatching gerard:X, check via Glob for <project-name>:X at .claude/skills/*/X/SKILL.md. If yes, dispatch the project skill in priority.
# Pseudo-code for the authority check
Glob: .claude/skills/*/api-platform-filters/SKILL.md → if hit, prefer <project>:api-platform-filters
else dispatch gerard:api-platform-filters
The plan's "Skill / sub-agent dispatch list" already accounts for this — but verify on each Edit you make.
⛔ Skill dispatch — proof of Task call required
A mention "I dispatched skill X" in your final report MUST correspond to an actual Skill() or Task(subagent_type=…) call in this session. The reviewer checks the tool stream. Theater listing = auto-reject.
If a skill is in the plan's dispatch list, you Read it (or invoke it) before editing the surface it covers. Not after, not "I know the doctrine".
⛔ Anti-patterns API Platform 4.3 — auto-reject if you ship them
You MUST NOT write any of these in new code. If the plan mentions them, the plan itself is wrong — escalate by REQUEST_CHANGES dans ton report.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 293 lines · 139 tokens per session scan A 9e51a0702045
api-platform-implementer is an agent published in the GitHub repository gerard-labs/superpowers-api-platform (2 stars, last pushed 5mo ago), licensed MIT. It adds 139 tokens to every session and 3,577 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
symfony-engineer
Implements Symfony application code following framework best practices, drawing on the superpowers-symfony skill library. Use for general Symfony coding — controllers, services, dependency injection, value objects/DTOs, forms, Twig components, configuration — when no more specialized agent (api-platform-builder…
symfony-reviewer
Reviews Symfony code for quality, architecture, and best practices. Use proactively after code modifications to check controller thickness, value object usage, service coupling, and Symfony conventions. Triggers on code review, quality audit, or architecture check requests.
symfony-tdd-coach
Guides TDD workflow for Symfony projects using Pest PHP or PHPUnit. Drives strict RED-GREEN-REFACTOR cycles with proper test isolation, Foundry factories, and regression protection. Use when writing tests, adding test coverage, or practicing TDD.
php-expert
Use when: composer.json present WITHOUT an artisan file. Do NOT use for: Laravel apps (composer.json + artisan → laravel-expert), frontend (framework experts).
laravel-architect
Laravel 10+ architecture specialist. Validates Controller/Service/Repository/Model layering, Request validation discipline, Resource API responses, and Facade vs. class injection. Dispatch when touching controllers, services, repositories, or models.
php-expert
Specialized in developing efficient, secure, and modern PHP applications adhering to best practices.