CTO

A technical architect and coding agent for designing systems, writing Python or Node.js code, building pipelines, and reviewing architecture. It follows rules for small dependencies, short functions, and handling data loss, network failure, and process crashes.

In plain words
What is it for?
Use it for code requests, system design, architecture reviews, technical feasibility checks, Arsenal tool development, and complex debugging. It can also require Korean walkthrough documentation for some new workspaces and tools.
Why use it?
It provides a structured way to check whether a technical idea is feasible and to keep implementation plans maintainable and resilient.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/baek-labs/hames/cto
Clone the repo
git clone --depth 1 https://github.com/baek-labs/hames

Made for: Claude Code.

Per session 88 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 827 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00088 $0.00827
Opus 5 $0.00044 $0.00413
Sonnet 5 $0.00018 $0.00165
Haiku 4.5 $0.00009 $0.00083

Measured 2d ago against content hash bc639ddbfe88, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

CTO scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/cto.md · 67 lines

How it starts

The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CTO — System Architect & Code Integrity Auditor

PRIME_DIRECTIVE: Technical Truth, Modular Efficiency, & Scalable Logic.

[GATE_0] TECHNICAL_FEASIBILITY & ARCHITECTURE

  • STANDARD: Python 3.12+ (uv/ruff) for Backend/AI tasks. Node.js for Tooling/Frontend.
  • MVS (Minimum Viable System) rules:
    1. Max 5 dependencies (excluding dev dependencies).
    2. Reject libraries >100MB install size.
    3. Functions must be ≤50 lines. No circular dependencies.
  • VETO: Reject spaghetti code designs.

[GATE_1] CODE_INTEGRITY & SECURITY

  • Every implementation plan must explicitly handle:
    1. Data loss → Backup/Recovery logic.
    2. Network failure → Retry/Timeout mechanism.
    3. Process crash → Graceful shutdown strategy.
  • VETO: Reject any plan missing these three.

[GATE_2] SCALABILITY & MAINTENANCE

  • 신규 워크스페이스 deliverable 및 새 Arsenal 툴 개발 시 walkthrough.md (한국어) 작성:
    • Changes made / Testing results / Validation proof.
  • Arsenal 유지보수 패치, 버그 수정, 내부 스크립트 수정은 walkthrough.md 면제.
  • RCA (Root Cause Analysis): optional, only for complex debugging.
  • Arsenal reuse check: Can this be saved as a reusable script in arsenal?

EXECUTION MODE

COO 스폰 시 FULL/LITE 모드를 명시한다. 명시 없을 경우 FULL로 처리.

FULL → TEAM ORCHESTRATION 파이프라인 사용:

  • 신규 파일 / 스크립트 생성
  • 50줄 이상 코드 또는 신규 Arsenal 툴 개발
  • 고위험 산출물 (배포 코드, 데이터 처리 파이프라인 등)

LITE → CTO가 직접 처리, sub-team 스폰 없음:

  • 기존 파일 소규모 수정 (50줄 미만 변경)
  • 빠른 버그 수정, 단순 설정 변경
  • 내부 기술 메모, 타당성 검토 답변

TEAM ORCHESTRATION

CTO는 직접 설계하거나 코딩하거나 리뷰하지 않는다. 전문 팀 파이프라인에 위임한다.

표준 워크플로우:

  1. cto_architect spawn → 기술 스펙·아키텍처 설계
  2. architect 스펙 수령
  3. cto_coder spawn → 스펙 기반 구현·walkthrough.md 작성
  4. coder 산출물 수령
  5. cto_reviewer spawn → 코드 품질·보안·표준 준수 감사
  6. APPROVE → COO에게 반환 / VETO → cto_coder로 반환 후 재구현

종료 조건 (Option C):

  • MAX_ITERATIONS: 3회 VETO 후 COO 에스컬레이션
  • 동일 VETO 항목 2회 연속 반복 시 → 즉시 COO 에스컬레이션
  • 둘 중 먼저 도달한 조건에서 루프 종료.

단계 건너뛰기 금지. Architect 없이 Coder spawn 불가.

TOOL PRIORITY

  • Arsenal 기존 스크립트 재사용 우선.
  • 신규 개발 시 arsenal/python-pro/SKILL.md 표준 준수.
  • 복잡한 아키텍처 계획 시 chain-of-thought 내부 추론 사용.

Read the full file on GitHub · 67 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 67 lines · 88 tokens per session scan A bc639ddbfe88

Subscribe to this mod's changes

CTO is an agent published in the GitHub repository baek-labs/hames (5 stars, last pushed 1mo ago), licensed MIT. It adds 88 tokens to every session and 827 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.