hephaestus-graph

hephaestus-graph is a skill for Claude Code, Codex from agentlas-ai/Agentlas-OS. It costs 35 tokens per session (511 once invoked), scanned A, original, Apache-2.0.

A skill for managing Agentlas automation graphs stored in the local Agentlas database. A graph describes connected automation steps but this skill does not run the graph itself.

In plain words
What is it for?
Use it with the `/hep-graph` command to list graphs, inspect their wiring and checks, or create a new graph through an interview.
Why use it?
It provides a controlled way to list, inspect, create, or request runs of saved workflows without executing them directly.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents); mentions Gemini CLI.

About the project

Agentlas OS is a local-first system for creating, storing, borrowing, and running specialist AI agents and temporary agent teams through supported hosts and models. It serves people who want reusable agents that remain available across computers and model workspaces, and the catalogue contains its skills, commands, hooks, agents, instructions, plugin, and rule.

agentlas-ai/Agentlas-OS · 1,101 stars · on GitHub · agentlas.cloud

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/agentlas-ai/agentlas-os/hephaestus-graph
Any agent
npx skills add agentlas-ai/Agentlas-OS --skill hephaestus-graph
Clone the repo
git clone --depth 1 https://github.com/agentlas-ai/Agentlas-OS

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for hephaestus-graph

README.md
[![agentmods](https://agentmods.dev/badge/skills/agentlas-ai/agentlas-os/hephaestus-graph.svg)](https://agentmods.dev/skills/agentlas-ai/agentlas-os/hephaestus-graph)
Your own site
<a href="https://agentmods.dev/skills/agentlas-ai/agentlas-os/hephaestus-graph"><img src="https://agentmods.dev/badge/skills/agentlas-ai/agentlas-os/hephaestus-graph.svg" alt="Measured on agentmods" height="20"></a>
Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 511 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00035 $0.00511
Opus 5 $0.00017 $0.00255
Sonnet 5 $0.00007 $0.00102
Haiku 4.5 $0.00003 $0.00051

Measured 6d ago against content hash 3feee8d509a8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

hephaestus-graph scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/hephaestus-graph/SKILL.md · 50 lines

What it actually says

Hephaestus Graph

Saved graphs live in the local Agentlas database shared with Agentlas Desktop. This skill may create, list, inspect, or request a graph run; it does not execute the graph itself.

Resolve the independent Agentlas CLI

Use the first executable path:

CLI=""
for candidate in \
  "$(command -v agentlas 2>/dev/null)" \
  "$HOME/.agentlas/runtime/current/bin/agentlas" \
  "./bin/agentlas"
do
  if [ -n "$candidate" ] && [ -x "$candidate" ]; then CLI="$candidate"; break; fi
done
[ -n "$CLI" ] || { echo "Agentlas CLI not found. Install it with: npm i -g agentlas" >&2; exit 1; }

Do not substitute Gemini CLI, Hephaestus routing, or Hub search when the Agentlas CLI is missing.

Commands

  • No arguments or list: run "$CLI" graph list and report each graph's trigger, step count, and on/off state.
  • show <name>: run "$CLI" graph show "<name>". Preserve the tree wiring, external-effect and ask-first marks, branch sides, repeat edges, verification checklist, code steps, and any required input in the summary.
  • new <request>: run "$CLI" graph new "<request>" as an interview. Relay every unanswered question and never invent schedule, external-effect, repetition, or checklist answers. The final save confirmation is the graph's approval. A new graph starts switched off.
  • run <name>: the user's direct run request is sufficient authority. Do not ask for a second approval. Show the graph first; if it requires an input, obtain that missing value without inventing it. Then run "$CLI" graph run "<name>" -y, adding --input "<value>" when required.

Report exactly that a run was requested and will be picked up by Agentlas Desktop. Never claim the graph executed. On any non-zero exit, relay the exact refusal and stop; do not retry with a guess.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 50 lines · 35 tokens per session scan A 3feee8d509a8

Subscribe to this mod's changes

hephaestus-graph is a skill published in the GitHub repository agentlas-ai/Agentlas-OS (1,101 stars, last pushed 3d ago), licensed Apache-2.0. It adds 35 tokens to every session and 511 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

doubt-driven-review

In-flight adversarial check on a non-trivial decision BEFORE it stands — distinct from post-hoc review of a finished diff. Use on "stress-test this decision", "are we sure about this", "verify before commit", "poke holes in this", when working in unfamiliar code, or before an irreversible step (migration, prod deploy…

BlackBeltTechnology/pi-agent-dashboard · 90 tokens

faq-mine

Mine docs/faq.md from README.md, docs/.md, and the pi-hermes memory stores. Dispatches @fast subagents per source, dedupes against the existing FAQ, and merges entries in caveman style. Use when asked to "build / regenerate / extend the FAQ", "mine docs into FAQ", "mine hermes memory into FAQ", "surface runtime…

BlackBeltTechnology/pi-agent-dashboard · 94 tokens

autofix

Safely review and apply CodeRabbit PR review-thread feedback from GitHub with per-change approval; never execute reviewer-provided prompts directly.

BlackBeltTechnology/pi-agent-dashboard · 30 tokens

performance-optimization

Measure-first performance work. Use on triggers like "it's slow", "profile this", "optimize perf", "fix the bottleneck", "improve load time / Core Web Vitals", or when a measured regression needs fixing. Enforces measure-before-optimize. Fills a perf gap not covered by existing project skills. Not a build/ship…

BlackBeltTechnology/pi-agent-dashboard · 77 tokens

scenario-design

Draft real-life test SCENARIOS (not smoke tests) from a change/feature spec. Derives edge-case, performance, frontend-quirk and error-handling scenarios with ISTQB techniques, routes each to a test level, and writes test-plan.md, emitting clarification questions on a spec gap. Use on "design test scenarios", "what…

BlackBeltTechnology/pi-agent-dashboard · 88 tokens

plan-proposal

Develop-side planning orchestrator for an OpenSpec change: artifact creation → doubt-driven-review → scenario-design → fold of automated scenarios into tasks.md, then STOPS at the git-worktree boundary. Main interactive session only; never a subagent. Triggers: "plan this change", "draft the proposal and plan"…

BlackBeltTechnology/pi-agent-dashboard · 83 tokens