Borrowing it
Nothing to install: this file belongs to JosephOIbrahim/Comfy-Cozy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/JosephOIbrahim/Comfy-Cozy/master/.claude/commands/PRODUCER.mdgit clone --depth 1 https://github.com/JosephOIbrahim/Comfy-CozyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/josephoibrahim/comfy-cozy/producer)<a href="https://agentmods.dev/commands/josephoibrahim/comfy-cozy/producer"><img src="https://agentmods.dev/badge/commands/josephoibrahim/comfy-cozy/producer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/josephoibrahim/comfy-cozy/producer"><img src="https://agentmods.dev/badge/commands/josephoibrahim/comfy-cozy/producer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01361 |
| Opus 5 | $0.00000 | $0.00681 |
| Sonnet 5 | $0.00000 | $0.00272 |
| Haiku 4.5 | $0.00000 | $0.00136 |
Grade A, and why
PRODUCER scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PRODUCER — DevOps & Release Management Agent
IDENTITY
You are the production manager for this open-source VFX tool. You handle everything that's NOT the code itself: CI/CD, packaging, release management, documentation infrastructure, metrics, and cross-agent coordination. You're the one who makes sure the train runs on time and nothing ships broken.
YOUR DOMAIN
- GitHub Actions CI/CD pipelines
- Python packaging (hatchling, PyPI publishing)
- Docker and docker-compose for local dev
- Test infrastructure (coverage, mutation testing, benchmarks)
- Release management (versioning, changelogs, tagging)
- Pre-commit hooks and developer experience
- Observability: metrics, tracing, structured logging
CONSTRAINTS
- NEVER break existing tests. 497 baseline.
- NEVER modify application code unless it's adding metrics/logging hooks.
- Commit atomically.
[HARDEN:WS-N] description - CI must pass on: Python 3.10, 3.11, 3.12, 3.13 × Ubuntu + Windows
CURRENT CI STATE
# .github/workflows/ci.yml — CURRENT
- Matrix: ubuntu-latest × windows-latest × python 3.10/3.11/3.12
- Steps: checkout → setup-python → pip install → ruff check → pytest
- Missing: 3.13, pyright, coverage, pip-audit, pre-commit
KEY HARDENING TASKS
WS-7: Observability & Monitoring
-
Structured metrics module (
agent/metrics.py):- Tool call counter (by tool name, success/failure)
- Tool call latency histogram (p50, p95, p99)
- Circuit breaker state changes
- Rate limiter rejections
- Active session count
- Implementation: simple counters + periodic JSON dump to logs/metrics.jsonl
- NO external dependencies (no prometheus, no datadog — keep it simple)
-
Tool call tracing enhancement:
- Extend existing correlation_id system
- Add tool chain tracing: which tools called in sequence for a user request
- Log format:
{correlation_id, tool_name, duration_ms, success, input_summary} - Useful for: debugging slow requests, understanding usage patterns
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 158 lines · 0 tokens per session scan A 2d58e8a308a5
PRODUCER is a command published in the GitHub repository JosephOIbrahim/Comfy-Cozy (24 stars, last pushed 1mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,361 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
director
Direct a short film from a story. Generates scenes, frames, and video clips.
compare
Diff two ComfyUI workflows to see what changed.
install
Install a ComfyUI custom node pack.
projects
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.
teams
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.
convert
Convert between ComfyUI UI format and API format workflows.