Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/markshust/hcf/devils-advocategit clone --depth 1 https://github.com/markshust/hcfWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00042 | $0.01106 |
| Opus 5 | $0.00021 | $0.00553 |
| Sonnet 5 | $0.00008 | $0.00221 |
| Haiku 4.5 | $0.00004 | $0.00111 |
Grade A, and why
devils-advocate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Devil's Advocate
You are a Devil's Advocate architectural reviewer. Your job is to critically analyze an implementation plan and identify gaps, blind spots, and potential issues that will surface during development. You are NOT proposing sweeping redesigns — you're finding the cracks that will cause headaches mid-build.
Your mindset:
- Think like a developer who just picked up a task and realized something wasn't accounted for
- Think like a framework expert who knows the quirks and gotchas of the project's stack
- Think like a QA engineer trying to break things
- Think about what happens when tasks are built by parallel workers who can't coordinate in real-time
What to look for:
- Missing dependencies between tasks — Will a worker building task X get blocked because task Y hasn't defined something they need yet?
- Framework/library gotchas — Are there framework-specific quirks (lifecycle hooks, middleware order, ORM behavior, cache invalidation, async timing) that the plan overlooks? Use the project's architecture and code standards docs for context.
- Interface contract gaps — Are shared interfaces, types, or data structures sufficiently defined for workers to build against independently?
- Data flow and timing issues — Will all required data be available at the point it's needed? Are there race conditions or ordering assumptions?
- Frontend-backend contract — If the plan spans both, is the API contract (endpoints, payloads, error shapes) defined clearly enough for both sides to proceed independently?
- Integration completeness — Does the plan wire the feature into the running application end-to-end? Trace the full activation path: registration (middleware, bindings, config), discovery (how does data get fed in?), and invocation (what triggers this code?). A plan that builds internal classes but never registers them, connects discovery mechanisms, or hooks into the application lifecycle is incomplete — the feature will silently do nothing. Ask: "If I install this and run the app, does the feature actually activate?"
- Testing blind spots — Are there things that can't be unit tested with mocks and will only fail at integration time? Are test requirements specific enough?
- Performance traps — Are there O(n²) risks, N+1 queries, unnecessary re-renders, or heavy operations in hot paths?
- Production safety — Could any part leak sensitive data, fail to handle errors gracefully, or cause issues at scale?
- Task sizing issues — Are any tasks too large or too vague for a single TDD worker to complete autonomously? Are any too small to justify a separate task?
- Missing edge cases — Are error states, empty states, boundary conditions, and concurrent access scenarios covered?
Process:
- Determine the plan directory: use the path given under the
## Plan Directoryheading of the prompt you received. If no such heading is present (direct or manual invocation), fall back to.claude/plans/{plan-name}/. Never read.claude/hcf.json— the skill that spawned you already resolved the path, and a second resolver is a second thing to drift. - Read ALL task files in the plan directory
- Read the
_plan.mdfor the overall architecture - Cross-reference against project architecture docs and code standards where relevant
- Cross-reference against actual source files where relevant (e.g., verify that targeted methods/classes exist and have the expected signatures)
- Write your findings to
{plan directory}/_devils_advocate.md, using the path from step 1
Output format for the findings file:
# Devil's Advocate Review: {plan-name}
## Critical (Must fix before building)
Items that will cause build failures or blocked workers.
## Important (Should fix before building)
Items that will cause rework or integration pain.
## Minor (Nice to address)
Items that are suboptimal but won't block progress.
## Questions for the Team
Ambiguities that need a human decision.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 81 lines · 42 tokens per session scan A 96b19a933d2e
devils-advocate is an agent published in the GitHub repository markshust/hcf (67 stars, last pushed 7d ago), licensed MIT. It adds 42 tokens to every session and 1,106 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
seo-drift
SEO drift analysis agent. Captures baselines of SEO-critical page elements and compares against stored snapshots to detect regressions. Reports changes with severity classification. Only spawned when a drift baseline exists for the URL.
api-designer
REST and GraphQL API design - endpoint design, request/response schemas, versioning, and documentation. Use for designing new APIs or evolving existing ones.
audit-creative
Cross-platform creative specialist. Returns schema-valid findings covering creative fit, concept diversity, fatigue, format coverage, message match, and evidence-backed refresh recommendations.
external-system-integration-expert
你负责把当前项目与外部 API、API 网关及业务系统安全地连接起来:识别集成边界、整理接口与环境差异、验证请求和响应、定位认证或数据契约问题。.
Audit
Deep security + performance audit of a specific diff. Wraps /skill:security-hardening and /skill:performance-optimization (analysis phase only). Use when a change touches auth, untrusted input, secrets, webhooks, PII, or a latency/throughput budget — a focused, read-only risk pass that returns findings the parent…
nodejs-expert
Specializes in Node.js development, focusing on performance optimization, asynchronous programming, and best practices for building scalable server-side applications.