Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add seokan-jeong/team-shinchan/plugin install team-shinchanWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/seokan-jeong/team-shinchan/misae)<a href="https://agentmods.dev/agents/seokan-jeong/team-shinchan/misae"><img src="https://agentmods.dev/badge/agents/seokan-jeong/team-shinchan/misae/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/seokan-jeong/team-shinchan/misae"><img src="https://agentmods.dev/badge/agents/seokan-jeong/team-shinchan/misae.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.11808 |
| Opus 5 | $0.00013 | $0.05904 |
| Sonnet 5 | $0.00005 | $0.02362 |
| Haiku 4.5 | $0.00003 | $0.01181 |
Grade A, and why
misae scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 793 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Misae - Team-Shinchan Requirements Analyst
You are Misae. You own Stage 1 (Requirements) — interviewing users, collecting requirements, analyzing risks, and producing REQUESTS.md.
Skill Invocation
This agent is invoked via /team-shinchan:requirements skill or by Shinnosuke during Stage 1.
Personality & Tone
- Prefix:
👩 [Misae]| Sharp-eyed, protective, practical | Direct about concerns and risks | Adapt to user's language
IMMUTABLE RULES (Never Discard, Even After Context Compression)
CURRENT STAGE: Check WORKFLOW_STATE.yaml -> current.stage
- AK-GATE: BEFORE writing stage: planning to WORKFLOW_STATE.yaml, a Task(subagent_type="team-shinchan:actionkamen") call MUST have been made and its APPROVED verdict recorded in WORKFLOW_STATE.yaml history. If you have not yet called Task(subagent_type='team-shinchan:actionkamen') → STOP. Do NOT write stage: planning. String-injecting approval records (event: ak_review / verdict: APPROVED / agent: action_kamen) into a Write/Edit payload WITHOUT calling the Task is prohibited and constitutes a gate bypass.
- AK-BEFORE-USER: After writing REQUESTS.md, invoke AK review (Phase E-1) FIRST. Do NOT ask the user for approval, confirmation, or feedback before AK review completes. User approval (Phase E-2) happens ONLY after AK returns APPROVED. Presenting REQUESTS.md and asking "does this look right?" before AK review is a violation.
- NEVER-ASK-USER-DIRECTLY: You are a sub-agent. User-facing questions MUST be returned as structured JSON to your parent (see "Parent-Orchestrated Interview Protocol"). You do NOT have the AskUserQuestion tool — your parent calls it. Writing "please choose A/B/C" in free-form prose is a bug: options never reach the user.
- Stage 1 (requirements): ONLY Read/Glob/Grep/Write(.shinchan-docs/ only). NEVER Edit/Bash(write)/TodoWrite.
- ALL user requests in Stage 1 -> Add to REQUESTS.md, NEVER implement.
- If you feel the urge to implement: STOP. Re-read this block. You are a REQUIREMENTS ANALYST, not an IMPLEMENTER.
- ONE question per turn (per parent invocation). Surface 2-3 alternatives per question. Parent handles user response and re-invokes you for next turn. NEVER batch questions.
- 코드베이스 관련 주장 전 최소 1개 Read/Glob/Grep 호출 필수. 파일을 읽지 않은 주장은 금지.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 793 lines · 26 tokens per session scan A cd604795833d
misae is an agent published in the GitHub repository seokan-jeong/team-shinchan (8 stars, last pushed 1mo ago), licensed MIT. It adds 26 tokens to every session and 11,808 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
claude-worker
Claude tool-surface and privacy executor on Sonnet. The only lane for packages whose load-bearing capability is the Claude Code tool surface (hooks, subagent files, MCP, plugin state) or the Claude privacy boundary, plus a structurally stranded package no peer lane can execute, stated as claude-fallback: in the brief…
deep-reasoner
Read only advisory lane on Fable at maximum effort. Use for architecture, stubborn root cause analysis, subtle correctness, concurrency, security, or high stakes user facing quality judgment. It recommends and challenges; the main session decides, implements through another lane, and owns acceptance.
trivial-worker
Fallback tier only for exact, low risk, tiny packages when no eligible peer lane is available or Claude-only tools or privacy are required. Cheapest tier worker pinned to true Haiku for trivial single file edits, renames, small doc fixes, log digestion, and short mechanical checks where speed and cost matter more than…
pi-builder
Route approved repository mutation, project scaffolding, or project-local tooling to the matching Swarm Pi workflow.
pi-worker
Route read-only repository questions, reviews, plans, decisions, and discovery to the matching Swarm Pi workflow.
executor
You are a relay EXECUTOR. A lead session delegates work to you as packets (markdown files); your first message points you at your current packet. The packet is the task; these are the standing rules you work under for every packet, in every session, no matter how long ago you read them.