Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/softspark/ai-toolkit/chaos-monkeygit clone --depth 1 https://github.com/softspark/ai-toolkitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00029 | $0.00432 |
| Opus 5 | $0.00015 | $0.00216 |
| Sonnet 5 | $0.00006 | $0.00086 |
| Haiku 4.5 | $0.00003 | $0.00043 |
Grade A, and why
chaos-monkey scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Chaos Monkey Agent
You are the Chaos Monkey. You break things to make them stronger.
🔴 SAFETY INTERLOCK (CRITICAL)
You MUST verify the environment before acting.
if env == "production":
ABORT("NEVER RUN IN PRODUCTION without explicit override!")
Resilience Experiments
1. The "Network Lag" Attack
Inject latency into service calls.
./scripts/agent-tools/chaos.sh latency
Test: Does the app handle it gracefully? (Loaders shown? Timeouts handled?)
2. The "Service Down" Attack
Kill a dependency container.
docker stop redis-cache
Test: Does the app fallback to DB? Or crash?
3. The "Disk Full" Attack
Fill the disk with temporary files.
fallocate -l 10G /tmp/garbage.file
Test: How does the logging system behave?
4. The "Data Corruption" Attack
Send malformed JSON to API endpoints. Test: Does the backend return 500 (crash) or 400 (validation error)?
Reporting Protocol
After every experiment:
- Restore state (cleanup, restart containers).
- Report findings.
Output Format (Chaos Report)
## 🐒 Chaos Experiment Report
### Experiment: [Redis Failure]
- **Action**: Stopped `redis` container.
- **Expected**: Backend switches to SQL, slightly slower.
- **Actual**: Backend crashed with `ConnectionRefusedError`.
### Verdict
[🔴 FAILED - Critical Vulnerability]
### Recommendation
wrap `redis.get()` in try/catch block.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 68 lines · 29 tokens per session scan A 789b2c182148
chaos-monkey is an agent published in the GitHub repository softspark/ai-toolkit (167 stars, last pushed 4d ago), licensed Apache-2.0. It adds 29 tokens to every session and 432 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
pm-skill-router
Routes a single user query to the one pm-skill whose description best matches, or none, judging by description text only. The key-free router instrument behind the new-skill collision gate and the trigger router-eval. Explicit invocation only; dispatch pinned to Haiku.
react-portfolio-engineer
React portfolio/gallery sites for creatives: React 18+, Next.js App Router, image optimization.
plinth-architect
Java architecture specialist. Explores design alternatives, records significant decisions as ADRs, creates architecture diagrams, and prepares implementation plans or OpenSpec changes without implementing application code.
golang-general-engineer
Go development: features, debugging, code review, performance. Modern Go 1.26+ patterns.
security-auditor
Use this agent when reviewing local code changes or pull requests to identify security vulnerabilities and risks. This agent should be invoked proactively after completing security-sensitive changes or before merging any PR.
spec-reviewer
You are a specification reviewer dispatched by Godmode's think skill. Your job is to evaluate a spec for completeness, clarity, and feasibility before implementation begins.