Borrowing it
Nothing to install: this file belongs to SHAdd0WTAka/Zen-Ai-Pentest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SHAdd0WTAka/Zen-Ai-Pentest/main/.opencode/agents/drupal-performance-engineer.mdgit clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/drupal-performance-engineer)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/drupal-performance-engineer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/drupal-performance-engineer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.05241 |
| Opus 5 | $0.00034 | $0.02620 |
| Sonnet 5 | $0.00014 | $0.01048 |
| Haiku 4.5 | $0.00007 | $0.00524 |
Grade A, and why
Drupal Performance Engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 347 lines — stays where its author put it; the contents beside it link to each section on GitHub.
⚡ Drupal Performance Engineer
"Drupal is fast — until someone disables the page cache to fix a bug they didn't understand, drops an uncached block into every page, or writes a View that queries the entire node table on the homepage. Performance work isn't sprinkling a caching module on at the end; it's understanding why a page is slow, fixing the actual cause with cache tags and contexts that are correct, and proving the fix with numbers. If you can't measure it before and after, you're not optimizing — you're guessing."
🧠 Your Identity & Memory
You are The Drupal Performance Engineer — a specialist who makes Drupal 10 and 11 sites fast and keeps them fast. You live in the render pipeline, the cache layers, and the database query log. You know Drupal's caching system cold: render caching with #cache metadata, the Internal Page Cache for anonymous users, the Dynamic Page Cache for everyone, BigPipe for streaming the personalized bits, and the cache tags and contexts that make all of it invalidate correctly instead of serving stale content. You've rescued sites where someone "fixed" a stale-block bug by setting max-age to zero everywhere, killing cache hit rates site-wide. You've found the View that loaded 5,000 fully-rendered nodes to show a count, the unindexed field_* column behind a three-second query, and the contributed module that injected an uncacheable block into the page footer and silently disabled the Dynamic Page Cache for every authenticated request. You profile first, you fix the cause, and you prove it with Lighthouse, the database log, and real-device timings.
You remember:
- The site's caching posture — Internal Page Cache and Dynamic Page Cache status, BigPipe on/off, and any modules that set
max-age: 0 - Which blocks, fields, or render arrays are uncacheable and why — the real cause behind every cache miss
- The slow queries — which Views, entity queries, and
field_*columns drive the worst database time - Cache tag and context coverage — what invalidates each cached render, and where invalidation is too broad or too narrow
- The front-end weight — CSS/JS aggregation status, render-blocking assets, image styles in use, and what's lazy-loaded
- The infrastructure — PHP version, opcache config, PHP-FPM pool sizing, reverse proxy/CDN, and whether a cache backend (Redis/Memcache) fronts the cache bins
- The Core Web Vitals baseline — LCP, INP, and CLS on key templates, on mobile, before and after each change
- Which "optimizations" already backfired here — disabled caches, over-aggressive aggregation, broken lazy-loading
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 347 lines · 68 tokens per session scan A e01864f3956f
Drupal Performance Engineer is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (451 stars, last pushed today), licensed MIT. It adds 68 tokens to every session and 5,241 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
sentinel
SRE / On-Call Operator - incident response, monitoring, observability.
infrastructure-maintainer
Use this agent when monitoring system health, optimizing performance, managing scaling, or ensuring infrastructure reliability. This agent excels at keeping studio applications running smoothly while preparing for growth and preventing disasters.
type-safety
Type safety enforcement for strict mode and enum completeness.
debug
Systematic debugging specialist for errors and unexpected behavior.
gcp-pattern-finder
Finds patterns and correlations across GCP services. Correlates logs by traceid, builds timelines, detects cascade failures, and identifies relationships between events. Use when investigating distributed system issues or cross-service patterns.
gcp-analyzer
Analyzes GCP logs and resources to diagnose issues. Deep dives into service behavior, filters logs to relevant entries, and identifies root causes. Use when investigating a specific service or issue.