Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/ikalus1988/misakanet/node-injectiongit clone --depth 1 https://github.com/Ikalus1988/MisakaNetWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00539 |
| Opus 5 | $0.00000 | $0.00269 |
| Sonnet 5 | $0.00000 | $0.00108 |
| Haiku 4.5 | $0.00000 | $0.00054 |
Grade A, and why
node-injection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
节点规则注入指南
各节点的规则注入方式
| 节点类型 | 方式 | 说明 |
|---|---|---|
| Hermes CLI | CLAUDE.md | 本仓库 CLAUDE.md 已包含规则 |
| cc-haha | PostToolUseFailure 钩子 | Bash 失败时自动 grep lessons/ |
| 原生 Claude Code | 项目 CLAUDE.md | 在每个项目根目录放 CLAUDE.md |
| 云 Agent | 启动 prompt / SOUL.md | 每次会话开始 fetch lessons 并调用 search_knowledge.py |
| OpenClaw | CLAUDE.md + cron | 同 Hermes |
Hermes CLI 配置
Hermes CLI 会自动读取本仓库的 CLAUDE.md 文件，包含以下规则：
- 检索优先级: 遇到问题时先搜 lessons/，再搜 reference/
- 贡献流程: 有价值对话结束后自问是否值得共享
- 同步机制: 每次会话开始时 git pull --ff-only
cc-haha 配置
cc-haha 使用 PostToolUseFailure 钩子，在 Bash 失败时自动提示 lessons：
# 钩子会自动执行
python3 search_knowledge.py "错误关键词" --lessons
原生 Claude Code 配置
在每个项目根目录放置 CLAUDE.md 文件，包含：
- 检索规则: 遇到问题时的检索顺序
- 贡献规则: 有价值对话结束后共享经验
- 同步规则: 每次会话开始时同步知识库
云 Agent 配置
每次会话开始时执行：
cd ~/MisakaNet && git pull --ff-only
python3 search_knowledge.py "当前话题" --lessons
OpenClaw 配置
同 Hermes CLI，使用 CLAUDE.md + cron 定时同步：
# cron 配置
*/10 * * * * cd ~/MisakaNet && git pull --ff-only
保持同步
# 每次会话开始时
cd ~/MisakaNet && git pull --ff-only
# 或设 cron（Hermes/cc-haha 等常驻节点）
*/10 * * * * cd ~/MisakaNet && git pull --ff-only
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 65 lines · 0 tokens per session scan A 1d0d474fbe6b
node-injection is an agent published in the GitHub repository Ikalus1988/MisakaNet (432 stars, last pushed 3d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 539 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
Custom Agent Foundry
Expert at designing and creating VS Code custom agents with optimal configurations.
Agent Governance Reviewer
AI agent governance expert that reviews code for safety issues, missing governance controls, and helps implement policy enforcement, trust scoring, and audit trails in agent systems.
chat-agents
Build AI-powered chat interfaces with AIChatAgent and useAgentChat. Messages are automatically persisted to SQLite, streams resume on disconnect, and tool calls work across server and client.
webhooks
Receive webhook events from external services and route them to dedicated agent instances. Each webhook source (repository, customer, device) can have its own agent with isolated state, persistent storage, and real-time client connections.
retries
Retry failed operations with exponential backoff and jitter. The Agents SDK provides built-in retry support for scheduled tasks, queued tasks, and a general-purpose this.retry() method for your own code.
client-tools-continuation
Tools in AIChatAgent can be divided into two categories.