Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/openshift-eng/ai-helpersnpx agentmods add commands/openshift-eng/ai-helpers/ovn-dbsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/openshift-eng/ai-helpers/ovn-dbs)<a href="https://agentmods.dev/commands/openshift-eng/ai-helpers/ovn-dbs"><img src="https://agentmods.dev/badge/commands/openshift-eng/ai-helpers/ovn-dbs.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00013 | $0.02538 |
| Opus 5 | $0.00006 | $0.01269 |
| Sonnet 5 | $0.00003 | $0.00508 |
| Haiku 4.5 | $0.00001 | $0.00254 |
Grade B, and why
ovn-dbs scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Install: `sudo dnf install openvswitch` or `sudo apt install openvswitch-common` Copies of this mod
1 near-identical copy found in the catalogue:
- ovn-dbs — 92% identical, 14 lines differ
How it starts
The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Name
must-gather:ovn-dbs
Synopsis
/must-gather:ovn-dbs [must-gather-path] [--node <node-name>] [--query <json>]
Description
The ovn-dbs command analyzes OVN Northbound and Southbound databases collected from clusters. It uses ovsdb-tool to query the binary database files (.db) collected per-node, providing detailed information about the logical network topology, pods, ACLs, and routers on each node.
The command automatically maps ovnkube pods to their corresponding nodes by reading pod specifications from the must-gather data.
Two modes of operation:
- Standard Analysis (default): Runs pre-built analysis showing switches, ports, ACLs, and routers
- Query Mode (
--query): Run custom OVSDB JSON queries for specific data extraction
What it analyzes:
- Per-zone logical network topology
- Logical Switches and their ports
- Pod Logical Switch Ports with namespace, pod name, and IP addresses
- Access Control Lists (ACLs) with priorities, directions, and match rules
- Logical Routers and their ports
Important: This command only works with must-gathers from clusters, where each node/zone has its own database files.
Prerequisites
The must-gather should contain:
network_logs/
└── ovnk_database_store.tar.gz
Required Tools:
ovsdb-toolmust be installed (from openvswitch package)- Check with:
which ovsdb-tool - Install:
sudo dnf install openvswitchorsudo apt install openvswitch-common
- Check with:
Analysis Script:
The script is bundled with this plugin:
<plugin-root>/skills/must-gather-analyzer/scripts/analyze_ovn_dbs.py
Where <plugin-root> is the directory where this plugin is installed (typically ~/.cursor/commands/ai-helpers/plugins/must-gather/ or similar).
Claude will automatically locate it by searching for the script in the plugin installation directory, regardless of your current working directory.
Implementation
The command performs the following steps:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 267 lines · 13 tokens per session scan B e7b0282248cf
ovn-dbs is a command published in the GitHub repository openshift-eng/ai-helpers (116 stars, last pushed 4d ago), licensed Apache-2.0. It adds 13 tokens to every session and 2,538 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other commands, from other repositories
init
Initialize configurations for Supabase local development.
database-setup
Use when a project needs to store data and has no database yet. Setting up Supabase, creating tables, writing queries, and connecting them to the frontend. Written for designers.
ingest
Manually add knowledge to the Weaviate store.
json.batch_delete
Delete multiple JSON documents or paths in one itemwise batch.
json.batch_get
Read multiple JSON values by document and path.
json.index.drop
Drop a JSON secondary index by name.