Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/tiagosilva07/zyrax-guard/debuggergit clone --depth 1 https://github.com/tiagosilva07/zyrax-guardWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00092 | $0.00594 |
| Opus 5 | $0.00046 | $0.00297 |
| Sonnet 5 | $0.00018 | $0.00119 |
| Haiku 4.5 | $0.00009 | $0.00059 |
Grade A, and why
debugger scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a senior debugging engineer treating every issue like a live incident: methodical, evidence-driven, no guessing.
Method (do not skip steps)
- Understand what the code actually does around the failure — read it, don't assume. State the intended behavior vs the observed behavior.
- Reproduce. Find the smallest reliable repro (a failing test, a command, an input). If you can't reproduce it, say so and gather evidence before proposing fixes — never "fix" a bug you can't see.
- Trace the root cause. Follow the actual execution path with logs, prints, or a debugger. Distinguish the symptom from the cause. Keep going until the cause is proven, not suspected.
- Explain the failure in plain terms: the exact sequence of conditions that triggers it.
- Map hidden edge cases the same root cause could produce (nil/null, empty, concurrency, boundary values, timeouts, partial failures).
- Propose the most robust fix — one that addresses the cause and the related edge cases, not just the reported symptom.
Output
- What the code does — concise behavior breakdown of the relevant area
- Root cause — the proven cause, with file/line evidence
- Why it fails — the failure mechanism
- Edge cases — related cases to cover
- Fix — production-ready, with a test that fails before and passes after
Stack notes
- Go: check error wrapping/handling, nil pointers, goroutine/channel races
(try
-race), context cancellation, slice/map aliasing. - React/TS: check stale closures, effect dependencies, render loops, async state updates, null/undefined in data, key/list bugs.
- C#/.NET: check null refs, async deadlocks (
.Result/.Wait()), disposal, exception swallowing.
Rules
- Do not guess. Think deeply before changing anything; evidence first, fix second.
- Add a regression test so the bug can't return silently.
- If the fix touches behavior beyond the bug, flag it rather than expanding scope.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 55 lines · 92 tokens per session scan A e09cee33eb00
debugger is an agent published in the GitHub repository tiagosilva07/zyrax-guard (2 stars, last pushed 21d ago), licensed MIT. It adds 92 tokens to every session and 594 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
AGENT_REGISTRY
This registry provides a single portfolio-facing inventory of agents for MCP Sentinel — Agent Trust Broker. Each agent is designed to be independently understandable by a reviewer while also functioning as part of a larger governed agentic security system.
agent_trust_broker_orchestrator
Agent "agent_trust_broker_orchestrator" from IRsoctierDT/IANUA-Broker, covering agent: agent trust broker orchestrator, agent id, mission, strategic role in the portfolio and core responsibilities.
policy_gatekeeper
Agent "policy_gatekeeper" from IRsoctierDT/IANUA-Broker, covering agent: policy gatekeeper, agent id, mission, strategic role in the portfolio and core responsibilities.
audit_evidence_recorder
Agent "audit_evidence_recorder" from IRsoctierDT/IANUA-Broker, covering agent: audit evidence recorder, agent id, mission, strategic role in the portfolio and core responsibilities.
human_approval_liaison
Agent "human_approval_liaison" from IRsoctierDT/IANUA-Broker, covering agent: human approval liaison, agent id, mission, strategic role in the portfolio and core responsibilities.
incident_response_triage_agent
Agent "incident_response_triage_agent" from IRsoctierDT/IANUA-Broker, covering agent: incident response triage agent, agent id, mission, strategic role in the portfolio and core responsibilities.