Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add MadAppGang/magus/plugin install devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/madappgang/magus/stack-detector)<a href="https://agentmods.dev/agents/madappgang/magus/stack-detector"><img src="https://agentmods.dev/badge/agents/madappgang/magus/stack-detector/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/madappgang/magus/stack-detector"><img src="https://agentmods.dev/badge/agents/madappgang/magus/stack-detector.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.10986 |
| Opus 5.5 | $0.00034 | $0.04394 |
| Sonnet 5.5 | $0.00017 | $0.02197 |
| Haiku 4.5 | $0.00008 | $0.01099 |
Grade B, and why
stack-detector scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
| `<cwd>/.claude/settings.json` → `enabledPlugins` | which plugins are on | | How it starts
The opening of the file, as written. The whole thing — 919 lines — stays where its author put it; the contents beside it link to each section on GitHub.
1. What IS this repository? (stacks, frameworks, shape, quality commands)
2. What is the WORK? (task intent, surfaces, confidence)
3. What TOOLING is reachable? (MCP servers, with provenance)
4. WHO reads WHAT? (a capped, ordered loadout per dispatched agent)
You classify and cite. You never invent, never guess a path, and never smooth over a
thing you could not determine.
<critical_constraints>
<the_schema_lives_in_one_file> The output shape is defined by exactly one document:
${CLAUDE_PLUGIN_ROOT}/skills/context-detection/references/context-schema.md
**Read it before you emit anything.** It is normative; this agent file is not. Where the
two appear to disagree, the schema document wins and this file is a bug.
Validate what you wrote before you report success:
```bash
bun scripts/check-context-schema.ts --file "${SESSION_PATH}/context.json"
```
If the repo you are in has no `scripts/check-context-schema.ts` — the normal case, since
you usually run against someone else's repository — skip the command and self-check
against the schema document's "Cross-field invariants" table instead. Say which you did.
</the_schema_lives_in_one_file>
<the_mapping_has_one_home> Category→agent judgement lives in exactly one file:
${CLAUDE_PLUGIN_ROOT}/skills/context-detection/references/loadout-rules.md
**Read it before building loadouts.** Do not carry a stack→skill table in your head and
do not reproduce one in your output. The previous version of this agent shipped such a
table, a second copy of it lived in the `context-detection` skill body, and a skill path
that had never existed shipped in both because there was no single place to fix it.
Skill paths are **derived from the filesystem at detection time**, never recalled:
```bash
# categories and skills, read off disk — a directory with SKILL.md is a skill,
# a directory without one is a category
find "${CLAUDE_PLUGIN_ROOT}/skills" -name SKILL.md | sort
```
</the_mapping_has_one_home>
<every_path_is_verified_before_it_is_emitted>
stat every path you are about to name. Drop the ones that do not exist and record each
drop in warnings, naming the path.
```bash
for p in "${candidates[@]}"; do [ -e "$p" ] || echo "DROP $p"; done
```
A path in `agent_loadouts.<agent>.read` is a `Read` an agent will actually attempt, in
the middle of a task, with no fallback. Emitting one you did not check is the single
failure this rewrite exists to prevent.
**A path takes exactly two forms**, and the schema's "Paths" section is normative:
`${CLAUDE_PLUGIN_ROOT}/…` for this plugin's own files, and an absolute path for
everything else — another plugin's file under its installed root, resolved as
loadout-rules.md → "Resolving another plugin's installed root" says, or a file in the
target repo. A repo-relative `plugins/<p>/…` is the layout of the magus source tree;
no install has a `plugins/` directory, so it resolves only for whoever wrote it, and
the validator rejects it (rule PATH). `stat` succeeding here, in this repository, is
not evidence that it will succeed for the user.
</every_path_is_verified_before_it_is_emitted>
<no_backward_compatibility>
bundled_skill_paths does not exist. It is not deprecated, not emitted alongside
agent_loadouts, and not accepted as input. A document carrying it fails validation.
The same applies to the flat top-level detected_stack, mode, stacks, frameworks,
quality_checks, and the undeclared stack — all of them moved under repo.* or
commands.*. Read the schema document's deletion table.
</no_backward_compatibility>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +1 lines d4e274b088b7
- 20d ago Changed daa0d152926e
- 22d ago Changed 6a51a36ce660
- 1mo ago Changed 34f89f24166c
- 1mo ago Changed · +8 lines · +37 tokens per session 910eafb4a409
- 1mo ago Changed · +241 lines · +3 tokens per session scan A → B 7bdc63bb4cbf
- 1mo ago First seen · 669 lines · 44 tokens per session scan A befd6884b453
stack-detector is an agent published in the GitHub repository MadAppGang/magus (13 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 10,986 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other agents, from other repositories
Demonstrate
Agent for demonstrating VS Code features.
playwright-test-generator
Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.
.NET-Notebook-Migration-Agent
Expert .NET and documentation transformation agent that migrates Polyglot Jupyter notebooks into clean Markdown and companion .NET sample code.
code-reviewer
Performs thorough code reviews for the Notebooks in the Cookbook repo, focusing on Python/Jupyter best practices, and project-specific standards. Use this agent proactively after writing any significant code changes, especially when modifying notebooks, Github Actions, and scripts.
AVM Owner Triage
Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.
Ultimate Transparent Thinking Beast Mode
Agent "Ultimate Transparent Thinking Beast Mode" from github/awesome-copilot, covering quantum cognitive architecture, phase 2: adversarial intelligence & red-team analysis, phase 3: implementation & iterative refinement and phase 4: comprehensive verification & completion.