RapidSpec: Triage

A review-triage command that presents code-review findings one at a time and records accepted items in a task list.

In plain words
What is it for?
Use it after a RapidSpec review to accept, defer, or skip findings and update the relevant tasks.md file.
Why use it?
It separates deciding what to fix from actually writing code, making it easier to prioritize important problems and defer minor ones.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/9j/rapidspec/triage
Clone the repo
git clone --depth 1 https://github.com/9j/RapidSpec
Per session 18 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,820 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00018 $0.02820
Opus 5 $0.00009 $0.01410
Sonnet 5 $0.00004 $0.00564
Haiku 4.5 $0.00002 $0.00282

Measured yesterday against content hash d1107f54ebf8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

RapidSpec: Triage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

commands/triage.md · 439 lines

How it starts

The opening of the file, as written. The whole thing — 439 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Triage RapidSpec Review Findings

<command_purpose> Present review findings one by one for triage. Allows individual judgment on which issues to fix now, defer, or skip. Converts accepted findings into actionable tasks in tasks.md. </command_purpose>

IMPORTANT: DO NOT CODE ANYTHING DURING TRIAGE!

This command is for:

  • Triaging code review findings from /rapid:review
  • Converting important findings into tasks
  • Prioritizing issues by severity
  • Deferring low-priority improvements

<change_id> #$ARGUMENTS </change_id>

<critical_requirement> MUST present findings one by one, not in batch. MUST wait for user decision before proceeding to next finding. MUST update tasks.md when user accepts a finding. NEVER implement fixes during triage - only track them. </critical_requirement>

Main Tasks

1. Read Review Context (ALWAYS FIRST)

Immediate Actions:

  • Read rapidspec/changes/<change-id>/proposal.md - Understand scope
  • Check if review findings exist (from previous /rapid:review run)
  • Read rapidspec/changes/<change-id>/tasks.md - Current task list

2. Present Each Finding

Presentation Format:

┌─────────────────────────────────────────────────────────┐
│ Triage Progress: X/Y findings | Est. Z min remaining    │
└─────────────────────────────────────────────────────────┘

---
Finding #N: [Brief Title]

Severity: 🔴 P1 (CRITICAL) / 🟡 P2 (IMPORTANT) / 🔵 P3 (NICE-TO-HAVE)

Category: [Security/Performance/Architecture/Quality/Testing/etc.]

Description:
[Detailed explanation of the issue or improvement]

Location: [file_path:line_number]

Problem:
[What's wrong or could be better]

Impact:
[Why this matters, what could happen if not fixed]

Proposed Solution:
[How to fix it - specific actionable steps]

Estimated Effort: Small (< 30min) / Medium (30min-2h) / Large (> 2h)

---
Add to tasks?
1. yes - add to tasks.md as new task
2. next - skip this finding
3. custom - modify severity/description before adding

Read the full file on GitHub · 439 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 439 lines · 0 tokens per session scan A d1107f54ebf8

Subscribe to this mod's changes

RapidSpec: Triage is a command published in the GitHub repository 9j/RapidSpec (5 stars, last pushed 9mo ago), licensed MIT. It adds 18 tokens to every session and 2,820 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.