Borrowing it
Nothing to install: this file belongs to rafaelghif/antigravity-agents. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/rafaelghif/antigravity-agents/main/.agents/agents/staff-backend.mdgit clone --depth 1 https://github.com/rafaelghif/antigravity-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/rafaelghif/antigravity-agents/staff-backend)<a href="https://agentmods.dev/agents/rafaelghif/antigravity-agents/staff-backend"><img src="https://agentmods.dev/badge/agents/rafaelghif/antigravity-agents/staff-backend.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00016 | $0.00635 |
| Opus 5 | $0.00008 | $0.00318 |
| Sonnet 5 | $0.00003 | $0.00127 |
| Haiku 4.5 | $0.00002 | $0.00064 |
Grade A, and why
staff-backend scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
<ANTI_HALLUCINATION_PROTOCOL> MANDATORY STEP 0 (RECONNAISSANCE BEFORE EXECUTION):
- Codebase Grounding: Run
python3 scripts/grounding.pyto confirm actual installed backend frameworks, ORMs, and packages. Never assume external libraries. - File Inspection: Read target files in their entirety using
view_filebefore touching code. Blind rewrites are strictly prohibited. - Blast Radius Analysis: Run
grep_searchorpython3 scripts/semantic_grapher.py blast-radius <file>to map all callers, DTO imports, and route consumers. - Architectural Standards: Read
.agents/brain/rules.mdand.agents/skills/architecture/SKILL.mdbefore designing APIs or data flows. - Contract Preservation: Maintain 100% backward compatibility for existing endpoints and contracts unless explicitly asked to deprecate. </ANTI_HALLUCINATION_PROTOCOL>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +3 lines 1a1caa764553
- 3d ago Changed · +9 lines · -7 tokens per session 630505e7ff2c
- 8d ago First seen · 31 lines · 23 tokens per session scan A 19a9f2ab9689
staff-backend is an agent published in the GitHub repository rafaelghif/antigravity-agents (5 stars, last pushed yesterday), licensed MIT. It adds 16 tokens to every session and 635 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
backend-connector
Expert Supabase integration that connects UI to real database securely. Delegate when: database connection, authentication, RLS policies, real-time features. Self-sufficient: analyzes existing code, generates schema from types, implements with security-first approach - all autonomously.
backend-impl
Use to implement backend code following clean architecture (domain -> application -> infrastructure -> interface). Writes use cases, repositories, services, and their tests; proves work with verbatim command output.
cqrs-specialist
Use for event-driven and CQRS work: command/outbox writes, idempotent projectors, and read-model handlers. Domain-neutral; never catches errors inside a transaction boundary.
django-reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfigurations, and production-grade Django practices. Use for all Django code changes. MUST BE USED for Django projects.
Fullstack Developer
End-to-end fullstack engineer specializing in Laravel, Inertia.js, Vue, PHP, TypeScript, database models, and API integrations.
design-reviewer
Design lead + expert design critic. Two modes: Mode A — authors the project's root DESIGN.md (design identity) at project start. Mode B — reviews built UI against DESIGN.md + AVOID-LIST + usability floor, fixes violations autonomously, verifies premium quality. Delegate when: a UI project has no DESIGN.md yet, UI…