Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/randomittin/heimdall/demogit clone --depth 1 https://github.com/randomittin/heimdallWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00104 | $0.01274 |
| Opus 5 | $0.00052 | $0.00637 |
| Sonnet 5 | $0.00021 | $0.00255 |
| Haiku 4.5 | $0.00010 | $0.00127 |
Grade A, and why
demo scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
4. `curl -s localhost:8000/api/todos` returns valid JSON. How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/hmd:demo — watch Heimdall build a real app in one command
What this command does
Runs bin/heimdall-demo — a standalone, zero-model-cost shell script that gives a
stranger evaluating Heimdall the first-five-minutes wow: ONE command, then they
watch Heimdall build a small but real full-stack app, without having to invent a
good prompt themselves.
It does NOT touch bin/heimdall, the dashboard, hooks, or skills — it is a thin
on-ramp that:
- Prints a tight branded banner (truecolor with plain fallback, matching
install.shcolor detection — rendered in shell, no model tokens). - Scaffolds a fresh project dir (default
./heimdall-demo-app, or the first positional arg). - Writes a fully-specified canned task to
<dir>/.heimdall-demo-task.mdand a ready-to-run plan seed to<dir>/.planning/PLAN.md. - Prints the exact paste-ready command to hand Heimdall so the magic starts.
How to invoke
From a terminal (this is a shell tool, not a model loop):
heimdall-demo [dir] [--dry|--run] [--force]
Examples:
heimdall-demo # scaffold ./heimdall-demo-app (safe, dry)
heimdall-demo /tmp/demo # custom target dir
heimdall-demo --run # scaffold AND launch heimdall on the task
heimdall-demo ./demo --force # overwrite an existing scaffold
Flags
[dir]— target project directory (default:./heimdall-demo-app).--dry— (default) scaffold the dir + print the exact prompt and the paste-ready command. Executes nothing — safe to run blind.--run— scaffold AND launch heimdall on the task via the documented entrypoint (heimdall "<prompt>"). Requiresheimdallon PATH; if absent, it warns and falls back to dry output.--force— overwrite the target dir if it already exists (idempotency guard: without it, an existing dir warns instead of clobbering).-h,--help— print usage.
Safe by default
Dry mode is the default and never runs destructive or expensive work — it only
writes files and prints the command you should paste. Auto-execution requires the
explicit --run flag. This keeps heimdall-demo safe to run sight-unseen during a
demo.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 112 lines · 104 tokens per session scan A fa8d7629cd2c
demo is a command published in the GitHub repository randomittin/heimdall (5 stars, last pushed 12d ago), licensed MIT. It adds 104 tokens to every session and 1,274 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
autocode
Fully autonomous development pipeline. Give it a feature description or PRD file and it will plan, write tests, implement code, run tests, and verify — all automatically with zero human intervention.
autocode-new
Scan current project and generate a project-specific autocode development pipeline (agents, commands, rules, hooks). Interactive setup wizard.
analyze-repo
Analyze an existing repository's structure, conventions, and guardrails.
doctor
Run IJFW health check (files, MCP server, hooks, memory, caps, framing).
dispatcher
Pick the next-best repo to work on across the portfolio — rank free repos, recommend one, claim its lease atomically, and route to the entry command.
standup
Show a daily standup summary with completed, in-progress, and blocked tasks across all active epics.