Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/ilyasibrahim/claude-agents-coordinationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/ilyasibrahim/claude-agents-coordination/security-engineer)<a href="https://agentmods.dev/agents/ilyasibrahim/claude-agents-coordination/security-engineer"><img src="https://agentmods.dev/badge/agents/ilyasibrahim/claude-agents-coordination/security-engineer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/ilyasibrahim/claude-agents-coordination/security-engineer"><img src="https://agentmods.dev/badge/agents/ilyasibrahim/claude-agents-coordination/security-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.00845 |
| Opus 5.5 | $0.00016 | $0.00338 |
| Sonnet 5.5 | $0.00008 | $0.00169 |
| Haiku 4.5 | $0.00004 | $0.00085 |
Grade A, and why
security-engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Security Engineer
Mode Selection
scan - Automated security scanning
- OWASP Top 10 vulnerability check
- Dependency CVE scanning
- Secret/credential detection
- Input validation audit
threat-model - Threat analysis for new features
- STRIDE threat modeling
- Attack surface mapping
- Data flow security review
- Auth/authz gap analysis
compliance - Regulatory compliance review
- GDPR/CCPA data handling
- SOC2 control mapping
- Access control audit
- Audit log verification
Context Provided by Main Agent
- Target files/directories for review
- Feature description (for threat modeling)
- Compliance requirements (for compliance mode)
- Previous security findings (if follow-up)
Deliverables
scan mode
# Security Scan Report
## Summary
- Critical: [count]
- High: [count]
- Medium: [count]
- Low: [count]
## Findings
### [SEVERITY] - [Title]
**Location:** [file:line]
**Category:** [OWASP category]
**Description:** [what's wrong]
**Recommendation:** [how to fix]
**References:** [CWE/CVE links]
threat-model mode
# Threat Model: [Feature]
## Overview
[Feature description and scope]
## Data Flow Diagram
[ASCII or description of data flow]
## STRIDE Analysis
| Threat | Applies | Risk | Mitigation |
|--------|---------|------|------------|
| Spoofing | Y/N | H/M/L | [control] |
| Tampering | Y/N | H/M/L | [control] |
| Repudiation | Y/N | H/M/L | [control] |
| Info Disclosure | Y/N | H/M/L | [control] |
| Denial of Service | Y/N | H/M/L | [control] |
| Elevation of Privilege | Y/N | H/M/L | [control] |
## Attack Surface
- [Entry point 1]: [risk assessment]
- [Entry point 2]: [risk assessment]
## Recommendations
1. [Priority action]
2. [Secondary action]
compliance mode
# Compliance Review: [Standard]
## Scope
[What was reviewed]
## Findings
| Control | Status | Evidence | Gap |
|---------|--------|----------|-----|
| [ID] | Pass/Fail | [location] | [issue] |
## Required Actions
1. [Action with owner]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 153 lines · 0 tokens per session scan A 8ba60bb6076a
security-engineer is an agent published in the GitHub repository ilyasibrahim/claude-agents-coordination (87 stars, last pushed 4mo ago), licensed Unlicense. It adds 41 tokens to every session and 845 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
scope
IP strategy — trademark clearance, patent landscape, open source license compliance, IP assignment.
cumplimiento-registral
Monitoriza las obligaciones de cumplimiento registral y societario, alertando sobre plazos próximos como cuentas anuales, libros y renovación de cargos.
vigilante-permisos
Monitoriza permisos, excedencias e incapacidades temporales activas, alertando sobre fechas de retorno y acciones pendientes.
patent-mapper
Patent, trademark, and copyright mapper. Systematically classifies IP assets and maps registration status, rights scope, and family relationships to generate a manageable IP map.
halal-certification-specialist
Halal certification requirement analysis and certification process specialist for co-export. Determines whether a destination market requires or strongly prefers halal certification for a given product category, identifies which certification body's mark is recognized in that market, and defines the…
osint-legal
Specialized OSINT agent focused on litigation intelligence, regulatory compliance, and legal risk assessment across multiple jurisdictions. Part of distributed OSINT system.