Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/vibepod/vibepod-cli/indexgit clone --depth 1 https://github.com/VibePod/vibepod-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.11913 |
| Opus 5 | $0.00000 | $0.05956 |
| Sonnet 5 | $0.00000 | $0.02383 |
| Haiku 4.5 | $0.00000 | $0.01191 |
Grade D, and why
index scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
`sudo systemctl edit <service>` and restart. See Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
&& rm -rf /var/lib/apt/lists/* How it starts
The opening of the file, as written. The whole thing — 1,125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agents
VibePod manages each agent as a Docker or Podman container. Credentials and config are persisted on your host — at ~/.config/vibepod/agents/<agent>/ for the default profile — and mounted into the container on every run, so you only need to authenticate once. To keep several credential sets per agent (subscription vs. API key vs. Ollama, stored under ~/.config/vibepod/profiles/<name>/), see Credential Profiles.
Supported Agents
| Agent | Provider | Shortcut | Image |
|---|---|---|---|
claude |
Anthropic | vp c |
vibepod/claude:latest |
gemini |
vp g |
vibepod/gemini:latest |
|
opencode |
OpenAI | vp o |
vibepod/opencode:latest |
devstral (alias: vibe) |
Mistral | vp d |
vibepod/devstral:latest |
auggie |
Augment Code | vp a |
vibepod/auggie:latest |
copilot |
GitHub | vp p |
vibepod/copilot:latest |
codex |
OpenAI | vp x |
vibepod/codex:latest |
pi |
Earendil | vp pi |
vibepod/pi:latest |
agy (Antigravity) |
vp n |
vibepod/agy:latest |
|
tau |
Hugging Face | vp t |
vibepod/tau:latest |
jcode |
1jehuang | vp j |
vibepod/jcode:latest |
freebuff |
CodebuffAI | vp fb |
vibepod/freebuff:latest |
qwen |
Qwen (Alibaba) | vp q |
vibepod/qwen:latest |
dsh (DeepSeek Harness) |
DeepSeek | vp ds |
vibepod/dsh:latest |
Alias note: vp run vibe resolves to vp run devstral, vp run qwen-cli
resolves to vp run qwen, and vp run deepseek / vp run deepseek-harness
resolve to vp run dsh.
DeepSeek Harness (dsh) — Web UI agent
dsh is Web-UI-first: vp run dsh starts the harness's browser UI and prints
its URL (default http://127.0.0.1:3080, published loopback-only on the
host). The terminal stays attached to the container logs; Ctrl+C stops it.
Sessions, profiles, plugins, and credentials persist in the agent config dir
(~/.config/vibepod/agents/dsh/, mounted as the container's home).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 1,125 lines · 0 tokens per session scan D bfc9aefcee77
index is an agent published in the GitHub repository VibePod/vibepod-cli (140 stars, last pushed 6d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 11,913 tokens. A static security scan graded it D with 2 findings (asks for root, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
build-agent-empty-input-diagnosis
Status: Resolved for interview injections. Date: 2026-08-10 Related PR: #818 (fix/preset-tui-slash-command) — same root class as the original /preset fix. Suspected sibling bug reported by user: During superpowers / brainstorm skill conversations, when the orchestrator asks for confirmation or work is interrupted…
codemap
Defines agent personalities (Orchestrator, Explorer, Librarian, etc.) and manages their configuration lifecycle. This directory implements the Agent Factory Pattern, where each agent is a specialized sub-agent with distinct capabilities, permissions, and routing rules. The Orchestrator agent (src/agents/index.ts)…
triage-labels
Maps the canonical triage roles (defined in the triage skill from mattpocock/skills) to the actual GitHub label strings used in this repo's issue tracker. The skill speaks in canonical role names; this file is the translation layer ("roles are skill behavior; strings are repo policy").
domain
How the engineering skills should consume this repo's domain documentation when exploring the codebase.
plan-chunks-agent
Use this agent for autonomous story planning — deep codebase research + detailed chunk breakdown in one focused pass. Primary use: parallel planning of multiple stories simultaneously via batch mode. Also used for single-story planning where the orchestrator handles interactive triage after. The orchestrator MUST…
alchemist
Creative technologist who sees the browser as an unexplored physics engine. Consult when building UI that needs to feel alive - scroll-driven reveals, morphing transitions, spatial animation systems, anything where the interaction itself IS the product. Thinks in weight, tension, and breath before thinking in code.…