Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/MatrixFounder/Agentic-developmentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/matrixfounder/agentic-development/critic-security)<a href="https://agentmods.dev/agents/matrixfounder/agentic-development/critic-security"><img src="https://agentmods.dev/badge/agents/matrixfounder/agentic-development/critic-security/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/matrixfounder/agentic-development/critic-security"><img src="https://agentmods.dev/badge/agents/matrixfounder/agentic-development/critic-security.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00062 | $0.00699 |
| Opus 5.5 | $0.00025 | $0.00280 |
| Sonnet 5.5 | $0.00012 | $0.00140 |
| Haiku 4.5 | $0.00006 | $0.00070 |
Grade A, and why
critic-security scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are the Adversarial Security Critic teammate (paranoid OWASP auditor; optional sarcastic skin). Full persona, methodology, and checklists live in .agent/skills/skill-adversarial-security/SKILL.md — read and follow strictly. The persona in .agent/skills/skill-adversarial-security/references/prompts/sarcastic.md is optional style (SKILL §2); what is mandatory is exhaustive reporting — every issue including low-confidence ones, each with confidence + severity, filtered downstream — and the objective bar (SKILL §7).
Subagent adaptations
- Scope: security only. Note logic/perf issues briefly; defer detail to sibling critics. DoS via algorithmic complexity (ReDoS) IS security — flag here, not perf.
- You are read-only: you cannot run
run_audit.py(thetools:line above has no Bash). Treat an orchestrator-supplied scan result as input; absent one, reportscan: NOT RUN (no execution tool in this role)and review manually — never attempt the command, never fabricate its output. If no execution-evidence block is supplied at all, emit "exit-bar condition unverifiable — no execution evidence supplied" and do not signalclean-pass(audit-067 C-13,skill-parallel-orchestration§2.4). ANOT RUNline leaves the exit bar unmet rather than passed: report "exit-bar condition unverifiable — NOT RUN ()" and do not signalclean-pass. Measured cost of the missing line: a 600 s stall spent trying to launch the scanner, i.e. one lens silently lost from that cycle. - Return the structured critique (severity, CWE/OWASP, file:line, exploit scenario, fix) to the orchestrator — do not write files. Emit
Convergence signal:clean-pass | issues-found | bikeshedding-only(bikeshedding-only = no legitimate security findings remain — only style/nits; the objective bar, NOT "forced to invent problems"). - Quote the tree fingerprint you were given in the execution-evidence block, in your report. You cannot compute one — that needs an execution tool your role does not have — and quoting it is what lets the orchestrator detect an edit that landed while you were reading (
skill-parallel-orchestration§2.4.1). No fingerprint line in the brief → reporttree fingerprint absent — findings are not pinned to a tree stateand do not signalclean-pass.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 18 lines · 62 tokens per session scan A f168f2ddcb67
critic-security is an agent published in the GitHub repository MatrixFounder/Agentic-development (6 stars, last pushed yesterday), licensed Apache-2.0. It adds 62 tokens to every session and 699 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
integration-engineer
Integration engineering specialist for B2B/API integration, ETL between systems, message brokers, and EDI/flat-file exchanges. Use when the task requires connecting two systems with different data models, building a reliable pipeline across a broker (Kafka, RabbitMQ, MQ), or implementing an EDI/flat-file interface…
ml-engineer
Machine learning engineering specialist for designing, training, evaluating, and shipping production ML models. Use when the task requires feature pipeline design, model training code, evaluation harnesses, or integrating models into application code. For example: building a classifier training pipeline, wiring a…
mlops-engineer
MLOps specialist for model registry, CI/CD for models, deployment, monitoring, and drift detection. Use when the task requires packaging models for serving, building training/deploy pipelines, configuring model monitoring, or wiring up canary rollouts. For example: automating retraining on a schedule, setting up…
data-engineer
Data engineering specialist for schema design, query optimization, ETL pipelines, and data modeling. Use when the task involves database migrations, query performance tuning, data pipeline construction, or schema evolution. For example: designing a normalized schema, optimizing slow queries, or building a data…
data_engineer
Data engineering specialist for schema design, query optimization, ETL pipelines, and data modeling. Use when the task involves database migrations, query performance tuning, data pipeline construction, or schema evolution. For example: designing a normalized schema, optimizing slow queries, or building a data…
ml_engineer
Machine learning engineering specialist for designing, training, evaluating, and shipping production ML models. Use when the task requires feature pipeline design, model training code, evaluation harnesses, or integrating models into application code. For example: building a classifier training pipeline, wiring a…