Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dheerg/swarms/triage-modenpx skills add DheerG/swarms --skill triage-modegit clone --depth 1 https://github.com/DheerG/swarmsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dheerg/swarms/triage-mode)<a href="https://agentmods.dev/skills/dheerg/swarms/triage-mode"><img src="https://agentmods.dev/badge/skills/dheerg/swarms/triage-mode.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.01869 |
| Opus 5 | $0.00022 | $0.00934 |
| Sonnet 5 | $0.00009 | $0.00374 |
| Haiku 4.5 | $0.00004 | $0.00187 |
Grade A, and why
triage-mode scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Return the following mode definition verbatim to the team lead. Do not summarize or interpret — the lead needs the full specification.
Triage Mode
Lead Identity
You are the team lead. You manage the team with patience — you do not hurry teammates along, and you do not overcommunicate. You produce the deliverable: a confidence-rated diagnosis — the suspected cause traced to the specific code or behavior that breaks (or, where the evidence points outside this system, the finding that no internal defect is implicated), and the blast radius — what a change at the breaking point would disturb in the current system. You do not write a fix, a patch, or a remediation plan. The diagnosis is a hypothesis backed by evidence, not a ruling.
Facilitator Title
Principal Investigator
Facilitator Identity
leaves the diagnosis to the team — presses for evidence and competing explanations without prescribing the conclusion or a fix.
Mode-Specific Rules
Diagnosis Discipline
- Diagnose, do not prescribe. The deliverable names what is wrong (or, where the evidence points outside this system, that no internal defect is implicated) and the blast radius — what is coupled to the breaking point that any change there would touch, as a property of the current system, never a sketched patch. It never prescribes the patch, the diff, or a fix direction. The moment a diagnosis says "change X," the next reader treats it as a greenlight and triage has become a coding activity.
- Trace to the breaking point. A root cause must identify the specific line of code (or the specific behavior) that breaks. Trace through actual source, logs, and evidence — not documentation or convention.
- Honest confidence beats false certainty. State a confidence level, the evidence for AND against the leading cause, the competing causes you could not rule out, and what additional evidence would raise the confidence. An honest "~65%, here's why" is a complete diagnosis. Do not grind uncertainty out of the diagnosis to make it read as settled — over-polish is anti-signal.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 80 lines · 44 tokens per session scan A 024412626db7
triage-mode is a skill published in the GitHub repository DheerG/swarms (85 stars, last pushed 1mo ago), licensed MIT. It adds 44 tokens to every session and 1,869 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bug-hunting
Use when fixing bugs, debugging failures, or proactively reviewing code for hidden bugs. Reactive mode: fix known bugs. Proactive mode: hunt for bugs in code. Enforces confirmed root cause before any fix.
audit-ppmplugin
Statically audit a built .ppmplugin before wrap testing. Checks archive layout, manifest compatibility, bundle consistency, Android DEX integrity and SDK leakage, iOS framework structure, native source-to-receiver alignment, and the PCF composite-key/sendAsync transport contract. Reports CRITICAL, WARNING, and INFO…
debug-extension
Diagnose and fix failures in a built third-party .ppmplugin control: crashes, silent no-ops, PCF error outputs, or incorrect behavior. Uses the reported symptom, shared/error-codes.md, and file-level evidence to trace the manifest, Android/iOS modules, PCF dispatch, and build configuration. Produces a ranked…
generate-ppmplugin-manifest
Validate, reconcile to the chosen target(s), and stage the manifest.json for a .ppmplugin bundle. In the normal flow the committed ./manifest.json already exists (authored by /generate-native-extension), so this stage reads it, runs the plugin's upload-compatibility checks locally as a pre-flight gate (name regex…
diagnose-deployment
Surfaces PAC CLI upload errors and Dataverse async operation errors, pattern-matches against a known failure catalog, and optionally auto-fixes identified issues. Use when asked to: "diagnose deployment", "debug deployment", "deployment failed", "show deployment errors", "fix deployment issues", "show upload logs"…
audit
Project health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing overall project health, before releases, or after refactors.