Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/thrashr888/agentkernel/symphonygit clone --depth 1 https://github.com/thrashr888/agentkernelWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01303 |
| Opus 5 | $0.00000 | $0.00651 |
| Sonnet 5 | $0.00000 | $0.00261 |
| Haiku 4.5 | $0.00000 | $0.00130 |
Grade E, and why
symphony scanned grade E with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
# Or: curl -fsSL https://raw.githubusercontent.com/thrashr888/agentkernel/main/install.sh | sh Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
&& rm -rf /var/lib/apt/lists/* Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# Or: curl -fsSL https://raw.githubusercontent.com/thrashr888/agentkernel/main/install.sh | sh How it starts
The opening of the file, as written. The whole thing — 186 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Symphony
Run OpenAI Symphony with agentkernel for isolated orchestration of autonomous coding agents.
Quick Start
Symphony is an orchestration daemon that monitors issue trackers (Linear), spawns autonomous coding agents (Codex), and manages the full lifecycle of implementation runs. It turns project management boards into autonomous coding pipelines.
# Option 1: Use the built-in template
agentkernel run --template symphony-sandbox -- elixir --version
# Option 2: Use the Dockerfile example
agentkernel sandbox create symphony-dev --config examples/agents/symphony/agentkernel.toml
agentkernel sandbox start symphony-dev
agentkernel attach symphony-dev
Setup
1. Install agentkernel
brew tap thrashr888/tap && brew install agentkernel
# Or: curl -fsSL https://raw.githubusercontent.com/thrashr888/agentkernel/main/install.sh | sh
2. Create and start a sandbox
agentkernel sandbox create symphony-dev --config examples/agents/symphony/agentkernel.toml
agentkernel sandbox start symphony-dev
3. Configure and launch Symphony
agentkernel attach symphony-dev
# Inside the sandbox, create a WORKFLOW.md:
cat > /workspace/WORKFLOW.md << 'WORKFLOW'
---
tracker:
kind: linear
project_slug: "YOUR-PROJECT-SLUG"
api_key: "$LINEAR_API_KEY"
active_states: ["Todo", "In Progress"]
terminal_states: ["Closed", "Cancelled", "Done"]
polling:
interval_ms: 30000
workspace:
root: /workspace/symphony-workspaces
hooks:
after_create: |
git clone --depth 1 [email protected]:your-org/your-repo.git .
agent:
max_concurrent_agents: 5
max_turns: 20
codex:
command: codex app-server
approval_policy: never
thread_sandbox: workspace-write
---
You are working on issue {{ issue.identifier }}: {{ issue.title }}
{{ issue.description }}
WORKFLOW
# Run Symphony with dashboard
cd /opt/symphony/elixir && mix run -- /workspace/WORKFLOW.md --port 4000
API Keys
Symphony requires two API keys:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 186 lines · 0 tokens per session scan E b72ae5a560f0
symphony is an agent published in the GitHub repository thrashr888/agentkernel (58 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,303 tokens. A static security scan graded it E with 3 findings (downloads and executes remote code, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
f1-test-drive
Orchestrate F1 test drives to validate the Cyrus agent system end-to-end. Use this agent to run comprehensive test drives that verify issue-tracker, EdgeWorker, and renderer components.
lead
Use this agent to orchestrate a full task from the harness backlog: decompose it into a plan, delegate to explorer, builder, and reviewer in sequence, and close the session correctly. Invoke when starting a new work session, picking up a pending task, or when another agent reports a blocker that requires…
product-owner
Strategic facilitator bridging business needs and technical execution. Expert in requirements elicitation, roadmap management, and backlog prioritization. Triggers on requirements, user story, backlog, MVP, PRD, stakeholder.
builder
Implementation agent. Writing code, generating boilerplate, scaffolding components, implementing features from specs, writing tests, standard bug fixes.
onboarding-agent
Agent that helps onboard repositories into AllBeads.
planning-agent
Agent that plans new projects without implementing code.