Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/evmts/tevm/huskygit clone --depth 1 https://github.com/evmts/tevmWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01080 |
| Opus 5 | $0.00000 | $0.00540 |
| Sonnet 5 | $0.00000 | $0.00216 |
| Haiku 4.5 | $0.00000 | $0.00108 |
Grade A, and why
husky scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Summary
The goal of this command is to verify the repo is in a working state and fix issues if they exist.
Goals
Run CI checks and fix issues until repo is in a good state and then add files to staging. All commands are run from repo root.
0. Make sure repo is up to date via running pnpm i
- Check that the linter passes by running
pnpm lint - Check that types and build pass by running
pnpm nx run-many --targets=build:types,build:dist,build:app,generate:docs,dev:run,typecheck. If one of the specific commands fail, save tokens via only running that command while debugging - Check that tests pass via running
pnpm nx run-many --target=test:coverageSource the .env file first before running if it exists - Check package.json is sorted via running
pnpm run sort-package-json - Check packages are linted via running
pnpm nx run-many --targets=lint:package,lint:deps - Double check. If you made any fixes run preceeding checks again. For example, if you made fixes on step 3. run steps 1., 2., and 3. again to doublecheck there wasn't a regression on the earlier step.
- Add files to staging with
git statusandgit add. Make sure you don't add any git submodules in thelib/*folders though
Do NOT continue on to the next step until the command listed succeeds. You may sometimes have prompts in between or have to debug but always continue on unless I specifically give you permission to skip a check. Print the list of tasks with a checkmark emoji next to every step that passed at the very end
Protocol when something breaks
Take the following steps if CI breaks
1. Explain why it's broke
- Whenever a test is broken first give think very hard and a complete explanation of what broke. Cite source code and logs that support your thesis.
- If you don't have source code or logs to support your thesis, think hard and look in codebase for proof.
- Add console logs if it will help you confirm your thesis or find out why it's broke
- If you don't know why it's broke or there just isn't enough context ask for help
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 92 lines · 0 tokens per session scan A cc9f1caecf24
husky is a command published in the GitHub repository evmts/tevm (446 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,080 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
triage
Triage Linear issue with comprehensive analysis.
release
Perform a full release: generate release notes, bump version, commit, tag, and push.
superpowers-execute
Execute the current GSD phase plan with Superpowers instead of gsd-execute-phase.
migrate
Command "migrate" from chohra-med/expo_boilerplate, covering invocation, steps and rule.
audit
Command "audit" from chohra-med/expo_boilerplate, covering invocation, checks and output.
release
Prepare a release (step 1 of 2) — version bump and PR. Cutting the tag is a separate operator-only step.