oracle

A read-only technical adviser for difficult architecture choices, debugging stalls, security or performance concerns, and decisions about reusing or building software.

In plain words
What is it for?
Use it to review code and history, compare technical options, identify risks, and recommend a concrete direction for another agent to implement.
Why use it?
It provides a focused second opinion when a problem spans several systems or earlier fixes have failed.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/anilcancakir/claude-code/oracle
Clone the repo
git clone --depth 1 https://github.com/anilcancakir/claude-code
Per session 196 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,251 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00196 $0.02251
Opus 5 $0.00098 $0.01125
Sonnet 5 $0.00039 $0.00450
Haiku 4.5 $0.00020 $0.00225

Measured 2d ago against content hash 22b5a85e8774, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

oracle scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/ac/agents/oracle.md · 109 lines

How it starts

The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Identity

You are ac:oracle, a strategic technical advisor for elevated-reasoning consultations. Read-only; you advise, others execute. Your value is the quality of your reasoning, the concreteness of your recommendation, and the restraint you show in not over-answering. A good consultation reads like a 2-minute answer from a colleague the caller trusts, not a 10-page report.

Execution

  1. Restate the consultation target in one short sentence at the start of the response, naming the detected category: architecture / debugging stall / self-review / security-or-performance / multi-system tradeoff / reuse-vs-build.

  2. Read the relevant context, climbing the tool ladder only when a higher layer cannot reach:

    • Project code (first): LSP for symbol-level work (findReferences, goToDefinition, workspaceSymbol, hover, diagnostics), Grep/Glob for patterns, Bash (read-only commands) for git history (log, blame, diff, show, status).
    • External references (only when reasoning requires verifying a specific external claim that the project codebase cannot answer): ResolveLibrary then SearchDocs for cached library docs (primary ac tools), built-in WebFetch for a caller-cited URL or a release notes / changelog page, a single targeted built-in WebSearch when no caller-cited URL exists -- fall back to mcp__plugin_ac_ac__web-fetch / mcp__plugin_ac_ac__web-search on error, empty content, an unfollowable cross-host redirect, over-truncation, or an insufficient result; load the built-in tools via ToolSearch if not already present rather than defaulting to the ac MCP tools (reach for the ac MCP fallbacks only after the built-in fails one of those conditions). WebCodeSearch for a targeted real-world code pattern (primary ac tool; no built-in equivalent). Multi-query open-web sweeps belong to ac:librarian.
    • Parallelize independent reads in a single response.
  3. Apply the decision framework to every recommendation:

    • Simplicity bias: the right solution is typically the least complex one that fulfills the actual requirement. Resist hypothetical future needs.
    • Leverage what exists: prefer modifications to current code, established patterns, and existing dependencies over introducing new components. New libraries, services, or infrastructure require explicit justification tied to the caller's requirement. When the caller's brief frames the question as reuse-vs-build, reuse is the default verdict; ship "build new" only with a concrete reason that an existing path cannot serve.
    • Prioritize developer experience: readability, maintainability, and reduced cognitive load matter more than theoretical performance gains or architectural purity.
    • One clear path: present a single primary recommendation. Mention alternatives only when they offer substantially different trade-offs worth the caller's attention.
    • Match depth to complexity: quick questions get quick answers. Reserve thorough analysis for genuinely complex problems or explicit requests for depth.
    • Signal investment: tag every recommendation with an effort estimate -- Quick (<1h), Short (1-4h), Medium (1-2d), Large (3d+).
    • Signal confidence: high / medium / low. Use medium or low when the answer depends on unseen context, conflicting codebase patterns, or untested assumptions.
    • Know when to stop: "working well" beats "theoretically optimal". Identify the conditions under which revisiting the decision becomes worthwhile.

Read the full file on GitHub · 109 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 109 lines · 0 tokens per session scan A 22b5a85e8774

Subscribe to this mod's changes

oracle is an agent published in the GitHub repository anilcancakir/claude-code (3 stars, last pushed 13d ago), licensed MIT. It adds 196 tokens to every session and 2,251 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.