Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/lukacf/meerkat/b-checklistgit clone --depth 1 https://github.com/lukacf/meerkatWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/lukacf/meerkat/b-checklist)<a href="https://agentmods.dev/agents/lukacf/meerkat/b-checklist"><img src="https://agentmods.dev/badge/agents/lukacf/meerkat/b-checklist.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00488 |
| Opus 5 | $0.00000 | $0.00244 |
| Sonnet 5 | $0.00000 | $0.00098 |
| Haiku 4.5 | $0.00000 | $0.00049 |
Grade A, and why
B-checklist scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Lane B Checklist
-
B-01DOGMA-11Rename RPC session-control catalog entries and handlers to the fixed public nouns. Done when the public RPC surface uses onlystatus,submit,retire,reset,submission, andsubmissions. -
B-02DOGMA-11Rename REST session-control routes and handlers to the fixed public nouns. Done when the REST route table and route tests use the renamed paths only. -
B-03DOGMA-27Addconnection_refto REST, RPC, MCP-facing create-session helpers, and SDK create-session options. Done when all listed surfaces accept and forwardconnection_ref. -
B-04DOGMA-21Remove raw runtime incarnation handles from public mob MCP results. Done when public spawn/member-send results expose onlymember_ref. -
B-05DOGMA-10Finish late-cancel parity on public surfaces. Done when the request-executor result is the only late-cancel decision source. -
B-06DOGMA-11DOGMA-27Update SDK public wrappers and parity tests to the renamed session-control surface andconnection_ref. Done when TS, Python, and Web wrappers align with the renamed public surface. -
B-07DOGMA-26Unify realtime status semantics afterEG1a. Done when RPC and websocket projection expose the sameattempt_countsemantics. -
B-08DOGMA-11Add or extend a whole-tree scan banning the old session-control names. Done when the scan is checked in and wired for lane/final gating. -
B-09Self static review. Done when no compatibility shim remains in any reviewable commit. -
B-10Handoff note. Done when milestone boundaries, handoff commit, and risks are recorded in B-plan.md. -
B-11Generated-output request. Done when schema/catalog/SDK regen needs are recorded explicitly, or markednone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 14 lines · 0 tokens per session scan A b9acbc06e84f
B-checklist is an agent published in the GitHub repository lukacf/meerkat (20 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 488 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
generate_agent
Generates a customized agent based on user-defined parameters.
external-system-integration-expert
你负责把当前项目与外部 API、API 网关及业务系统安全地连接起来：识别集成边界、整理接口与环境差异、验证请求和响应、定位认证或数据契约问题。.
ba-designer
Use when execute-round skill's Phase 2 (BA design pass) needs to produce a complete BA design doc for the current round. Generates D-1..D-N decisions, reference scan triplet, file-level decomposition, and test plan.
vc-innovate-agent
INNOVATE MODE - Brainstorming and exploring implementation approaches. Discusses possibilities without making decisions. Use after research is complete.
design-reviewer
Design lead + expert design critic. Two modes: Mode A — authors the project's root DESIGN.md (design identity) at project start. Mode B — reviews built UI against DESIGN.md + AVOID-LIST + usability floor, fixes violations autonomously, verifies premium quality. Delegate when: a UI project has no DESIGN.md yet, UI…
Audit
Deep security + performance audit of a specific diff. Wraps /skill:security-hardening and /skill:performance-optimization (analysis phase only). Use when a change touches auth, untrusted input, secrets, webhooks, PII, or a latency/throughput budget — a focused, read-only risk pass that returns findings the parent…