Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/developerz-ai/ai-task-master/fix-buggit clone --depth 1 https://github.com/developerz-ai/ai-task-masterWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.01671 |
| Opus 5 | $0.00028 | $0.00835 |
| Sonnet 5 | $0.00011 | $0.00334 |
| Haiku 4.5 | $0.00006 | $0.00167 |
Grade A, and why
fix-bug scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
**OpenRouter only** — no Anthropic SDK, ever; inference flows through `Credentials` (`OPENROUTER_API_KEY`). **SOLID / SRP** — one responsibility per module. **Every module ships a paired `*.test.ts` — no test, no merge.* How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/fix-bug
You are a senior engineer on the aitm team debugging a reported defect. Take it from symptom to merged-and-shipped. Read CLAUDE.md first. The sibling /feature command is the map for the PR/merge/release mechanics — this command differs in the front half: diagnose before touching anything.
Bug report
$ARGUMENTS
The prompt is the context — read the intent. A pasted log or stack trace is the primary evidence; quote the exact failing line back in your diagnosis. "Fix and release" / "all pushed all merged" → run start-to-finish autonomously, merge on green, no check-ins. A tentative "I think X is broken" → confirm the diagnosis with the user before fixing. Always stop for a true blocker (irreversible action outside the ask — an npm publish above all — credential risk, a policy violation from Hard rules).
The flow
-
Reproduce the failure in your head first. Locate the code that raised — grep the message verbatim; a TypeScript message pins the operation (
Cannot read properties of undefined, a ZodsafeParsefailure naming the field, anexecanon-zero exit). Read the whole function and its callers until you can narrate the failing path end to end: which input, which line, why. Name the root cause, not the symptom — the throw site is where it surfaced, not where it went wrong.codegraph_exploregets you the symbol plus its call paths in one hop. -
Understand the blast radius. A bug rarely lives alone:
- What does the failure do downstream? A swallowed rejection inside
WorkLoopbecomes a stalled or hot-looping run; a mis-parsedghpayload silently merges the wrong thing. The secondary defect is often worse than the primary. - Is there a bug family? Fan out
TaskExplore agents to sweep for the same pattern elsewhere — an optional field read without a guard underexactOptionalPropertyTypes, agh --jsonfield assumed present that GitHub sendsnull, a poll loop with no bound, anawaitmissing in afinally. Fix genuine siblings in the same PR; note-and-skip cosmetic ones, or fix them if trivial.
- What does the failure do downstream? A swallowed rejection inside
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 49 lines · 56 tokens per session scan A e43611446b27
fix-bug is a command published in the GitHub repository developerz-ai/ai-task-master (5 stars, last pushed 25d ago), licensed MIT. It adds 56 tokens to every session and 1,671 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
upgrade-webkit
Upgrade Bun's WebKit fork to the latest upstream version of WebKit.
dedupe
Find duplicate GitHub issues.
ashlr-dashboard
Rich token-savings dashboard — per-tool bar charts, 7d/30d sparklines, projected annual savings, and cost in dollars.
scriptwriter-draw
Draw a random chaos card from the 13-card deck — a plot-twist prompt the user can use as a scene seed, a basistext for an RRR cascade, or a riff for a room contribution.
specsync-create-spec
Create a new spec-sync module spec.
nimbus-embedding-routing
Hybrid 384/1536-dim embedding routing (Phase 5 T6 PR 3): PROSEHEAVYTYPES, EMBEDDINGDIMLOCAL/EMBEDDINGDIMOPENAI, the RoutingEmbeddingPipeline wrapper, dual-table search (vecitems384 + vecitems1536 via vectorSearchChunksDual), the V30 migration (1536-dim table + dim-aware delete triggers), the nimbus index reembed CLI +…