Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/rjmurillo/ai-agents/buildgit clone --depth 1 https://github.com/rjmurillo/ai-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/rjmurillo/ai-agents/build)<a href="https://agentmods.dev/commands/rjmurillo/ai-agents/build"><img src="https://agentmods.dev/badge/commands/rjmurillo/ai-agents/build.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00022 | $0.01695 |
| Opus 5 | $0.00011 | $0.00847 |
| Sonnet 5 | $0.00004 | $0.00339 |
| Haiku 4.5 | $0.00002 | $0.00169 |
Grade C, and why
build scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
4. Skill(skill="orphan-ref-validator"). Reject the build on `VERDICT: CRITICAL_FAIL` or `VERDICT: ERROR`. Catches references to deleted skills and missing script paths before they reach review. Manifest count claims are How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
@CLAUDE.md
Build: $ARGUMENTS
If $ARGUMENTS is empty, check for recent /plan output in the conversation. If none found, ask the user what to build.
Cross-Harness Hook Routing
If the task touches Claude Code or GitHub Copilot CLI hook configuration, payloads, decisions, matchers, exit codes, timeouts, generated shims, or event translation:
- Invoke
Skill(skill="agent-harness-reference")before design or code. - Execute the change through
Skill(skill="ai-agents-portability-campaign"). - Use
Skill(skill="ai-agents-generation-and-release")for generated mirrors. - Do not repeat vendor research unless the pinned source ledger is stale or the task explicitly requires a contract refresh.
Complexity Assessment
Before implementation, Task(subagent_type="analyst"): Read .claude/skills/analyze/references/engineering-complexity-tiers.md and the task description. Classify as Tier 1-5. Return: tier, rationale, and recommended oversight level. Use this to calibrate implementation approach:
- Tier 1-2: Implement directly. Async code review sufficient.
- Tier 3: Validate approach before coding. Active mentorship pattern (check in at milestones).
- Tier 4-5: Proof-of-concept first. Get design sign-off before full implementation.
Pre-Mortem (Risk Identification)
Before any code changes, invoke Skill(skill="pre-mortem") on the task as briefed. Capture the top 2-3 critical risks and their mitigations in the active plan or issue handoff. Risks surfaced by reviewers late in the cycle are usually knowable up front. A 5-minute pre-mortem is cheaper than a 10-round bot review.
Agent
Task(subagent_type="implementer"): You are a senior engineer. Discover the project's tech stack, coding patterns, and test conventions by reading the codebase. Build in thin vertical slices. Test-first when the project has tests. Commit atomically.
For each slice:
- Read the spec AC for this slice. Every test must trace to an AC number from
/specoutput. Name the testtest_<behavior>and include the AC identifier in the docstring or comment. - Understand the existing code patterns (read related files, check test conventions). If Serena is available, prefer it for symbolic search (canonical tool names:
mcp__serena__find_symbol,mcp__serena__get_symbols_overview; some Claude harnesses surface the same tools under the plugin aliasmcp__plugin_serena_serena__find_symbol/mcp__plugin_serena_serena__get_symbols_overview, so accept either when present). Otherwise fall back toGrepandReadfor filesystem-level discovery. Serena is not guaranteed in every harness (fresh installs without MCP, copilot-cli runtime); the fallback keeps the slice executable across hosts. - Write the failing test first. This project has pytest 8+. TDD is unconditional. Never write code before a failing test exists. The test expresses the AC contract; code exists only to make it pass. Tests written after code confirm the code's behavior, not the spec's contract.
- Write the minimum code to pass the test. Run the test, confirm it fails on the right assertion, then write code.
- Refactor toward quality (cohesion, encapsulation, simplicity). Re-run the test.
- Self-apply gate for detection tools. If this slice adds a guard, warning, or detector (hook, linter, threshold check), run it against the current branch NOW before committing. If it does not fire on conditions present in the branch, the threshold or detection logic is wrong. Fix the logic before step 7.
- Commit with a conventional message. Each commit is one logical change. Test file and implementation file committed together.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 86 lines · 22 tokens per session scan C 29d6811b2eb2
build is a command published in the GitHub repository rjmurillo/ai-agents (45 stars, last pushed today), licensed MIT. It adds 22 tokens to every session and 1,695 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
load-session
Load a synced session summary for context.
statusline
Configure which sections appear in the Claude Code statusline.
02_execute
Execute a plan (auto-moves pending to in-progress) with Ralph Loop TDD pattern.
999_release
Bump version, create git tag, and create GitHub release for plugin distribution.
add-integration
Add support for a new service (like Slack, Notion, or GitHub) with full OAuth and API integration.
update-model-rubric
Research the current LLM landscape and update Carmenta's model routing rubrics with latest models, capabilities, and pricing.