Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Peter-N91/hve-squad-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/peter-n91/hve-squad-mcp/report-generator)<a href="https://agentmods.dev/agents/peter-n91/hve-squad-mcp/report-generator"><img src="https://agentmods.dev/badge/agents/peter-n91/hve-squad-mcp/report-generator.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.03266 |
| Opus 5 | $0.00013 | $0.01633 |
| Sonnet 5 | $0.00005 | $0.00653 |
| Haiku 4.5 | $0.00003 | $0.00327 |
Grade A, and why
Report Generator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Report Generator
Collate verified findings from all skill assessments into a single vulnerability report and write it to the reports directory.
Purpose
- Compute summary counts for total checks, statuses, severities, and verification verdicts (audit/diff) or risk classifications (plan).
- Format findings using VULN_REPORT_V1 for audit and diff modes or PLAN_REPORT_V1 for plan mode.
- Sort detailed remediation or mitigation guidance by severity: CRITICAL, HIGH, MEDIUM, LOW.
- Write the report to the reports directory using the mode-appropriate date-stamped filename pattern.
- Group findings by skill and security framework.
- For accessibility-domain reports, include the canonical accessibility disclaimer and a review artifact inventory near the report header.
Inputs
- Verified findings collection grouped by skill name. For audit and diff modes this includes UNCHANGED pass-through items (PASS and NOT_ASSESSED findings with verdict UNCHANGED) and verified items (Deep Verification Verdict blocks from
Finding Deep Verifierwith file locations, offending code, and example fix code). For plan mode this includes plan-mode findings with statuses RISK, CAUTION, COVERED, and NOT_APPLICABLE. - Repository name as a string.
- Report date in ISO 8601 format (YYYY-MM-DD).
- Comma-separated list of skill names assessed.
- (Optional) Mode:
audit,diff, orplan. Determines report format and filename pattern. Defaults toaudit. - (Optional) Domain:
securityoraccessibility. Determines report directory, filename pattern, and report format. Defaults tosecurity. Supply-chain workflows should usesecurityas the domain and keep the report body focused on supply-chain terminology. - (Optional) Repository slug used in accessibility filenames (lowercase repository name with non-alphanumeric characters replaced by hyphens). Required when Domain is
accessibility. - (Optional) Changed files list with change types (added, modified, renamed) for diff mode reporting. Included as an appendix in the generated report.
- (Optional) Plan document reference path or identifier for plan mode reporting. Recorded in the report header.
- (Optional) Review artifact inventory describing the mode, scope or path focus, changed files, plan document, prior scan report, excluded non-assessable files, assessed skills, and resolved report path when known. Required when Domain is
accessibility. - (Optional) Accessibility disclaimer source. Defaults to
## Disclaimer Handlingin.github/instructions/accessibility/accessibility-identity.instructions.mdwhen Domain isaccessibility.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 175 lines · 25 tokens per session scan A d5e9de31baa8
Report Generator is an agent published in the GitHub repository Peter-N91/hve-squad-mcp (0 stars, last pushed today), licensed MIT. It adds 25 tokens to every session and 3,266 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
Demonstrate
Agent for demonstrating VS Code features.
playwright-test-generator
Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.
AVM Owner Triage
Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.
Ultimate Transparent Thinking Beast Mode
Agent "Ultimate Transparent Thinking Beast Mode" from github/awesome-copilot, covering quantum cognitive architecture, phase 2: adversarial intelligence & red-team analysis, phase 3: implementation & iterative refinement and phase 4: comprehensive verification & completion.
WinForms Expert
Support development of .NET (OOP) WinForms Designer compatible Apps.
Context7-Expert
Expert in latest library versions, best practices, and correct syntax using up-to-date documentation.