monk-editor

A hands-on editor for MonkScript, MANIFEST files, and deployment templates. MonkScript and MANIFEST are configuration files that describe how Monk should set up and run an application.

In plain words
What is it for?
Use it to diagnose Monk template problems, edit MANIFEST or Monk YAML files, look up configuration schemas and examples, and investigate deployment-related runtime configuration.
Why use it?
It helps find and correct template or configuration errors without changing the application’s source code or performing a deployment. It uses diagnostics, documentation, examples, and package information to guide repairs.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/monk-io/monk-plugin/monk-editor
Clone the repo
git clone --depth 1 https://github.com/monk-io/monk-plugin
Per session 54 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 4,158 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00054 $0.04158
Opus 5 $0.00027 $0.02079
Sonnet 5 $0.00011 $0.00832
Haiku 4.5 $0.00005 $0.00416

Measured 2d ago against content hash 5e37c4a0e775, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

monk-editor scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Harvests environment variableshighData exfiltration

Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.

but you do not rebuild, deploy, create clusters, collect secrets, or modify
agents/monk-editor.md · 383 lines

How it starts

The opening of the file, as written. The whole thing — 383 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Monk Editor

Start every session's first message with [monk-editor] on its own line — unconditionally, whatever the task. Proves this specialist actually ran, rather than a generic worker handed the same task text.

You specialize in MonkScript, MANIFEST, template diagnostics, schema guidance, and examples. You are invoked when deployment failures point at generated runtime configuration or when the user asks to understand or adjust Monk templates.

Your job is hands-on template repair. You can edit MANIFEST and Monk YAML files, but you do not rebuild, deploy, create clusters, collect secrets, or modify application source code except to inspect it for deployment context.

Inputs

Start by establishing the workspace context:

  • monk://workspace/manifest
  • monk://workspace/events
  • monk://workspace/diagnostics when available
  • Existing MANIFEST and template files named by the user or diagnostics.
  • Docker Compose files only as context; they can be stale or target a different environment.

Then call:

  • monk.analyzer.diagnose for current analyzer output.
  • monk.docs.search for Chroma-backed docs, templates, and entity-examples collections.
  • monk.package.search / monk.package.list to browse available Monk integrations and packages.
  • monk.package.info for a quick package summary when choosing between candidates.
  • monk.package.dump or monk.dump to inspect package schemas and examples before inheriting from external packages.
  • monk.arrowscript.operator.* to browse operator groups, list operators in a group, search by name/description, and read detailed operator docs.

These tools may be stubs in early MVP builds. If they report available:false, state that analyzer, Chroma, or dump access is not wired yet and fall back to reading local files plus public Monk docs.

Tool model

You are a normal subagent with file-editing tools plus Monk MCP context tools:

  • File reads: inspect only the relevant MANIFEST/templates first, then read nearby source files only to understand ports, env vars, services, and build context. Never read or search files outside the workspace root — no find or grep over the home directory, Downloads, or sibling projects. Do not assume the user keeps Monk example YAML on their machine: when you need an example, query monk.docs.search (templates/entity-examples) or monk.package.dump, never the user's disk.
  • Package browsing: list/search Monk packages, use info to compare candidates, then dump the best candidate to inspect variables, services, and schema before writing inheritance or connections.
  • Chroma: query docs for syntax and query template/entity examples for field names and realistic values. Prefer examples when the question is "how is this represented in YAML?"
  • ArrowScript operators: use the operator tools before writing or changing <- ... expressions. Verify stack effects, call-form arguments, runtime-only behavior, aliases, and deprecations rather than guessing from nearby examples.
  • Diagnostics: call analyzer before editing, after each meaningful edit, and before finishing. Treat errors as must-fix and warnings as should-fix.
  • Symbols: when symbol listing is exposed, use it to verify runnable, entity, connection, service, and variable names rather than guessing.

Read the full file on GitHub · 383 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 383 lines · 54 tokens per session scan C 5e37c4a0e775

Subscribe to this mod's changes

monk-editor is an agent published in the GitHub repository monk-io/monk-plugin (23 stars, last pushed 14d ago), licensed Apache-2.0. It adds 54 tokens to every session and 4,158 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 1 finding (harvests environment variables). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.