Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/subhansh-dev/agent-maxxingnpx agentmods add skills/subhansh-dev/agent-maxxing/25-node-inspect-debuggerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/subhansh-dev/agent-maxxing/25-node-inspect-debugger)<a href="https://agentmods.dev/skills/subhansh-dev/agent-maxxing/25-node-inspect-debugger"><img src="https://agentmods.dev/badge/skills/subhansh-dev/agent-maxxing/25-node-inspect-debugger/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/subhansh-dev/agent-maxxing/25-node-inspect-debugger"><img src="https://agentmods.dev/badge/skills/subhansh-dev/agent-maxxing/25-node-inspect-debugger.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.00925 |
| Opus 5.5 | $0.00011 | $0.00370 |
| Sonnet 5.5 | $0.00006 | $0.00185 |
| Haiku 4.5 | $0.00003 | $0.00093 |
Grade A, and why
node-inspect-debugger scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Inspect target list: `curl -s http://127.0.0.1:9229/json/list | jq` This is a copy
92% identical to node-inspect-debugger — 6 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
Node Inspect Debugger
Use for Node.js debugging that needs inspector access: hidden locals, async hangs, flaky tests, child processes, startup races, memory growth, or CPU hot paths.
Default to node inspect first. Use Chrome DevTools Protocol only when you need scripted breakpoints, automated state capture, heap snapshots, or CPU profiles.
Quick start
- Pause on entry:
node inspect path/to/script.js - TypeScript:
node --inspect-brk --import tsx path/to/script.ts - Existing PID:
kill -SIGUSR1 <pid>thennode inspect -p <pid> - Inspect target list:
curl -s http://127.0.0.1:9229/json/list | jq - Agent CLI path:
node --inspect-brk agent.mjs ... - Agent test path:
AGENT_VITEST_MAX_WORKERS=1 node --inspect-brk scripts/run-vitest.mjs <file>
Debugger REPL
- Continue/step:
cont,next,step,out,pause - Breakpoints:
sb('file.js', 42),sb(42),sb('functionName'),breakpoints,cb('file.js', 42) - Inspect:
bt,list(8),watch('expr'),exec expr - Current scope:
repl, then evaluate locals directly;Ctrl+Cexits repl mode. - Exit safely:
contbefore quitting if the process should continue; otherwisekill.
OpenClaw tips
- Prefer
127.0.0.1inspector binds. Do not expose--inspect=0.0.0.0unless the network is isolated. - For Vitest, debug one file with one worker. Avoid worker pools while stepping.
- For TS source breakpoints, use
--enable-source-mapswhen useful;node inspectcan still show emitted paths. - For child processes,
NODE_OPTIONS=--inspect-brkcan propagate the inspector, but each child needs its own port. - For long-lived gateway or dev processes, attach by PID after confirming the target with
/json/list.
Programmatic CDP
Install tooling outside the repo unless the project already depends on it:
mkdir -p /tmp/cdp-tools
npm --prefix /tmp/cdp-tools i chrome-remote-interface
NODE_PATH=/tmp/cdp-tools/node_modules node /tmp/cdp-debug.cjs
Minimal driver:
const CDP = require("chrome-remote-interface");
(async () => {
const client = await CDP({ port: 9229 });
const { Debugger, Runtime } = client;
Debugger.paused(async ({ callFrames, reason }) => {
const top = callFrames[0];
console.log("paused", reason, top.url, top.location.lineNumber + 1);
const { result } = await Debugger.evaluateOnCallFrame({
callFrameId: top.callFrameId,
expression: "JSON.stringify({ pid: process.pid })",
});
console.log(result.value ?? result.description);
await Debugger.resume();
});
await Runtime.enable();
await Debugger.enable();
await Debugger.setBreakpointByUrl({ urlRegex: ".*target\\.js$", lineNumber: 41 });
await Runtime.runIfWaitingForDebugger();
})();
Profiles
- CPU: enable
Profiler,start, wait,stop, write/tmp/profile.cpuprofile, open in Chrome DevTools. - Heap: enable
HeapProfiler, collectaddHeapSnapshotChunk, calltakeHeapSnapshot, write/tmp/heap.heapsnapshot.
Pitfalls
--inspectdoes not pause; use--inspect-brkwhen setup must happen before code runs.- Default port is
9229; use--inspect=0or a unique port for parallel targets. - If a breakpoint misses, confirm file path, source map behavior, and whether execution already passed the line.
- If the process appears frozen after detaching, it may still be paused in the debugger.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 86 lines · 28 tokens per session scan A e6dcd0a54d91
node-inspect-debugger is a skill published in the GitHub repository subhansh-dev/agent-maxxing (2 stars, last pushed 3mo ago), licensed MIT. It adds 28 tokens to every session and 925 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 92% identical to node-inspect-debugger, differing in 6 lines, and is treated as a copy.
Other skills, from other repositories
autofix
Review and repair current local changes until they converge, or run Qwen Code Autofix issue and review workflows from GitHub Actions.
smell
Detect software architecture bad smells, algorithmic complexity hotspots, and anti-patterns in a codebase. Produces a detailed markdown report identifying violations of architectural principles, design patterns, code quality, and performance complexity. Triggers on: smell, code smell, architecture smell, find…
correctness-reviewer
Always-on code-review persona. Reviews code for logic errors, edge cases, state management bugs, error propagation failures, and intent-vs-implementation mismatches. Spawned by the ce:review-beta skill as part of a reviewer ensemble.
performance-reviewer
Conditional code-review persona, selected when the diff touches database queries, loop-heavy data transforms, caching layers, or I/O-intensive paths. Reviews code for runtime performance and scalability issues. Spawned by the ce:review-beta skill as part of a reviewer ensemble.
reliability-reviewer
Conditional code-review persona, selected when the diff touches error handling, retries, circuit breakers, timeouts, health checks, background jobs, or async handlers. Reviews code for production reliability and failure modes. Spawned by the ce:review-beta skill as part of a reviewer ensemble.
flutter-svg-engineering
Design, implement, review, debug, test, migrate, secure, and optimize SVG rendering in production Flutter applications using fluttersvg and vectorgraphics. Use whenever a Flutter task involves SvgPicture, SVG assets, remote/dynamic SVG, SVG theming or ColorMapper, BoxFit/layout/clipping, semantics or RTL, SVG caching…