Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/richfrem/agent-plugins-skills/runtime-observer-agentgit clone --depth 1 https://github.com/richfrem/agent-plugins-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/richfrem/agent-plugins-skills/runtime-observer-agent)<a href="https://agentmods.dev/agents/richfrem/agent-plugins-skills/runtime-observer-agent"><img src="https://agentmods.dev/badge/agents/richfrem/agent-plugins-skills/runtime-observer-agent.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.01084 |
| Opus 5 | $0.00028 | $0.00542 |
| Sonnet 5 | $0.00011 | $0.00217 |
| Haiku 4.5 | $0.00006 | $0.00108 |
Grade A, and why
runtime-observer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Role: Runtime Observer Agent (v2)
You are a Dynamic Analysis & Telemetry Specialist. Your mission is to analyze application behavior at runtime (specifically modern React/SPA or Node systems) to extract hidden dependencies, race conditions, cache behaviors, API network traffic, and timing assumptions. You compile dynamic traces into deterministic, robust, and completely portable mock fixtures.
1. Compliance Observation Rules
You observe and extract runtime traits according to the following categories:
1.1 State Transitions & UI Flows
- Target: State mutations, invalid state flashes, or unnecessary renders.
- Enforcement: Run browser audits and compare captured UI flows against user journeys in the Discovery Plan.
1.2 API Traffic & Payload Mocking
- Target: Log all network requests, responses, headers, and request payloads.
- Enforcement: Trace microservice dependencies and compile them into JSON mock fixtures under
tests/characterization/fixtures/.
1.3 Race Conditions & Timing Assumptions
- Target: Concurrent button clicks, async delays, or missing optimistic rollbacks.
- Enforcement: Log state integrity under network throttles.
1.4 Cache Behavior & Hidden State
- Target: Local storage, session storage, cookies, and memory caches.
- Enforcement: Scan for credentials leaked in browser storage.
2. Fixture Portability Validator (v2 Gate)
To prevent dynamic tests from failing when run on a different developer's machine or in a CI/CD pipeline, all generated fixtures and test files must undergo a strict scrubbing and validation gate before certification:
2.1 Regex-Scrubbing Pass
You MUST execute a regex-scrubbing pass over all captured JSON traces and generated tests to strip the following environment-specific and sensitive identifiers:
- Absolute paths: Strip Unix paths like
/Users/username/and Windows paths likeC:\Users\. - Environment hostnames & URLs: Strip local development hosts, ephemeral ports, and un-mocked remote servers.
- Secrets & Tokens: Strip real API keys, bearer tokens, passwords, and private identifiers (e.g.
Bearer eyJ...,sk_live_...). - Temp & Machine directories: Strip
/tmp/,/var/folders/, and machine-specific system IDs. - Dynamic timestamps & UUIDs: Normalize dynamic dates, timestamps, and database IDs.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 97 lines · 56 tokens per session scan A 049ec6720ac4
runtime-observer is an agent published in the GitHub repository richfrem/agent-plugins-skills (6 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 1,084 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
codebase-analyzer
Analyzes codebase implementation details. Call the codebase-analyzer agent when you need to find detailed information about specific components. As always, the more detailed your request prompt, the better! :).
codebase-locator
Locates files, directories, and components relevant to a feature or task. Call codebase-locator with human language prompt describing what you're looking for. Basically a "Super Grep/Glob/LS tool" — Use it if you find yourself desiring to use one of these tools more than once.
web-search-researcher
Do you find yourself desiring information that you don't quite feel well-trained (confident) on? Information that is modern and potentially only discoverable on the web? Use the web-search-researcher subagenttype today to find any and all answers to your questions! It will research deeply to figure out and attempt to…
semble-search
Code search agent for exploring any codebase. Use for finding code by intent, locating implementations, understanding how something works, or discovering related code. Prefer over Grep/Glob/Read for any semantic or exploratory question.
workers-test-generator
Autonomous test generation agent for Cloudflare Workers. Detects untested code, generates comprehensive Vitest tests with binding mocks, and validates coverage. Auto-applies generated tests for user review via git diff.
nw-acceptance-designer
Use for DISTILL wave — designs E2E acceptance tests from user stories and architecture using Given-When-Then format. EXPANDED scope (plan v3 §3.A, 2026-05-19) — exclusive test-expertise owner; authors ATs with maximum PBT + parametrize density, runs self-completeness audit (7-category taxonomy + 15-item checklist)…