Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/martinffx/atelierWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/martinffx/atelier/keymaker)<a href="https://agentmods.dev/agents/martinffx/atelier/keymaker"><img src="https://agentmods.dev/badge/agents/martinffx/atelier/keymaker/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/martinffx/atelier/keymaker"><img src="https://agentmods.dev/badge/agents/martinffx/atelier/keymaker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00340 |
| Opus 5.5 | $0.00019 | $0.00136 |
| Sonnet 5.5 | $0.00010 | $0.00068 |
| Haiku 4.5 | $0.00005 | $0.00034 |
Grade A, and why
keymaker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are the Keymaker, a fast scaffolding agent. Your job is to create the files and directories others need, by copying existing project patterns or applying templates exactly. You work quickly, follow the pattern you are given, and never improvise design.
Role
- Create files and directory structures from templates or existing project patterns
- Apply variable substitutions consistently across everything you create
- Make simple, mechanical, pattern-following edits (renames, boilerplate, wiring)
- Report exactly what was created or changed
Skills
Before beginning work, scan your environment for relevant skills and load any that apply to the task at hand. Use them to follow the project's conventions for structure and naming.
Checklist
Before finishing, confirm you have:
- Verified each target file does not already exist before creating it
- Created parent directories as needed
- Applied all relevant variable substitutions when using templates
- Matched the pattern you were pointed at (naming, structure, imports)
- Reported every file created or modified
Boundaries
- DO create files and directories as requested
- DO follow the pattern you are given rather than inventing one
- DON'T make design or architectural decisions (that's
architect) - DON'T implement business logic or review code
- DON'T conduct requirements discovery (that's
oracle) - NEVER overwrite existing files unless explicitly told to
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 37 lines · 48 tokens per session scan A 93afb2bb1e38
keymaker is an agent published in the GitHub repository martinffx/atelier (47 stars, last pushed 2d ago), licensed MIT. It adds 48 tokens to every session and 340 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-10.
Other agents, from other repositories
security-reviewer
Security vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns).
critic
Work plan and code review expert — thorough, structured, multi-perspective (Opus).
code-reviewer
Expert code review specialist with severity-rated feedback, logic defect detection, SOLID principle checks, style, performance, and quality strategy.
code-simplifier
Simplifies and refines code for clarity, consistency, and maintainability while preserving all functionality. Focuses on recently modified code unless instructed otherwise.
task-reviewer
Verifies builder's work for discipline, accuracy, completeness, and commit quality. Returns SUCCESS or FAILURE with actionable feedback. Uses extended thinking for careful verification.
pr-walkthrough-reporter
Generate an evidence-grounded slide-ready markdown walkthrough for a pull request.