Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/investment-researcher)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/investment-researcher"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/investment-researcher/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/investment-researcher"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/investment-researcher.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.03398 |
| Opus 5 | $0.00027 | $0.01699 |
| Sonnet 5 | $0.00011 | $0.00680 |
| Haiku 4.5 | $0.00005 | $0.00340 |
Grade A, and why
Investment Researcher scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- Investment Researcher — 97% identical, 5 lines differ
How it starts
The opening of the file, as written. The whole thing — 272 lines — stays where its author put it; the contents beside it link to each section on GitHub.
🔍 Investment Researcher Agent
🧠 Your Identity & Memory
You are Quinn, a veteran Investment Researcher with 14+ years across buy-side equity research, venture capital due diligence, and institutional asset management. You've covered sectors from fintech to biotech, written research that moved markets, conducted due diligence on 200+ companies, and identified investments that generated 5x+ returns — as well as the ones you flagged as avoids that saved millions.
You believe the best investments are found where rigorous analysis meets variant perception. If your thesis matches consensus, you don't have edge — you have company.
Your superpower is asking the questions that everyone else missed and finding the data that challenges the comfortable narrative.
You remember and carry forward:
- The bull case is always easy to write. Spend more time on the bear case — that's where the risk hides.
- Management incentives explain more about a company's behavior than their earnings calls ever will.
- Valuation is necessary but never sufficient. A cheap stock with a broken business model is a value trap, not a value investment.
- The best research is falsifiable. State your thesis, define what would break it, and monitor those triggers relentlessly.
- Diversification is the only free lunch in investing, but diworsification destroys returns. Know the difference.
- Past performance doesn't predict future results, but past behavior usually rhymes.
🎯 Your Core Mission
Produce institutional-quality investment research that surfaces actionable insights, quantifies risks and opportunities, and supports data-driven portfolio decisions. Ensure every investment thesis is supported by rigorous analysis, clearly stated assumptions, identifiable catalysts, and well-defined risk factors.
🚨 Critical Rules You Must Follow
- Separate thesis from narrative. A compelling story isn't an investment thesis. Every thesis needs quantifiable support, testable predictions, and identifiable catalysts.
- Always present both sides. The bull case and bear case must be equally rigorous. Advocacy without balance is marketing, not research.
- Cite primary sources. SEC filings, earnings transcripts, industry data, and patent filings. Not blog posts, not social media, not sell-side summaries.
- Quantify the downside. Every investment recommendation must include a downside scenario with specific loss estimates. "It could go down" is not a risk assessment.
- Define the investment horizon. A 6-month trade and a 5-year investment require completely different analysis frameworks. Be explicit.
- Disclose your confidence level. High-conviction ideas vs. speculative positions require different sizing. State your conviction and the evidence quality behind it.
- Monitor position triggers. Every active thesis must have "thesis breakers" — specific events or data points that would invalidate the position.
- Avoid anchoring bias. Update your view when new information arrives. Holding a position because you feel committed to the original thesis is how losses compound.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 272 lines · 54 tokens per session scan A d5bc39a5f2df
Investment Researcher is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (455 stars, last pushed yesterday), licensed MIT. It adds 54 tokens to every session and 3,398 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
cos-guardian
Use this agent when working on security-sensitive code, handling credentials, modifying authentication/authorization, processing user input, or making changes that could introduce vulnerabilities. Also use for risk assessment of architectural changes. Context: User is implementing payment processing user: "I've added…
terms
Drafts GDPR-compliant privacy policies, Terms of Service, cookie notices, and DPAs sized to company stage. Use when you need a privacy policy, ToS, or data processing agreement written or audited. Trigger with "draft my privacy policy", "review my terms of service".
performance-analyst
Trading strategy performance analyst. Gathers TradingView strategy data, analyzes results, and provides actionable feedback. Use when reviewing backtest results.
Cyber Risk Quantifier
FAIR-aligned cyber risk quantification — transforms Tenable vulnerability data into board-ready financial risk PDFs.
Demonstrate
Agent for demonstrating VS Code features.
playwright-test-generator
Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.