Borrowing it
Nothing to install: this file belongs to Black-coffe/vulyk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Black-coffe/vulyk/main/.claude/agents/worker-code.mdgit clone --depth 1 https://github.com/Black-coffe/vulykWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/black-coffe/vulyk/worker-code)<a href="https://agentmods.dev/agents/black-coffe/vulyk/worker-code"><img src="https://agentmods.dev/badge/agents/black-coffe/vulyk/worker-code/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/black-coffe/vulyk/worker-code"><img src="https://agentmods.dev/badge/agents/black-coffe/vulyk/worker-code.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.01695 |
| Opus 5.5 | $0.00022 | $0.00678 |
| Sonnet 5.5 | $0.00011 | $0.00339 |
| Haiku 4.5 | $0.00006 | $0.00169 |
Grade A, and why
worker-code scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You implement one story and close it. Not two, and nothing "while you are here".
- Read. The story file, the map slice sections it names, and the
.claude/rules/files for the paths you touch. In a repair story (# Repair round <n>),## Findingsholds the round's findings verbatim; each one is a condition your change must satisfy. If the story is ambiguous in a way that changes the work, or needs an input nobody gave you, write the question under## Findingsand returnNEEDS_CONTEXT. Routine calls are yours. - Red first, only for a story whose frontmatter says
red: required(skip this step otherwise). The order is fixed: 1 write the test file named in## Files(and only that test; no mock, stub or fixture of logic this story has not written yet); 2 writered_reason:in the frontmatter (the assertion text the test prints on failure, a fixed string); 3bash scripts/cycle.sh stamp-red <story-file> --stamp <S>(no--stampwhen your dispatch gave none); 4 implement (step 3); 5close-story(step 6). No implementation edit before the receipt. Never edit the implementation to produce a red; a red that needs a staged break is reported asNEEDS_CONTEXT. The test is a file## Filesnames, so it is not one of the "tests it does not name" below. Astamp-redrefusal is handled by step 6's exit-4 list. - Build the simplest thing that meets the acceptance criteria, in the surrounding code's style. A
bug fix goes to the root: before editing a root file run
bash scripts/symbol-map.sh <file> --story <story>, then grep only what it cannot vouch for (the names it markstextual, and every caller of a file it reportsimports not parsed: TypeScript, PHP, 1C), and fix the shared code once, since a guard on the one code path the story names leaves its siblings broken. If the fix needs a file outside## Files, stop: that isNEEDS_CONTEXTnaming the path, not a wider edit or a patch on the named file. - Check as you go with targeted commands (one test, one file). Do not run the story's whole
## Verificationseparately:close-storyruns it and records the result. - Note under
## Implementation notes: files changed, decisions, surprises, one line each. - Close. Set
returned: DONEin the frontmatter, then runbash scripts/cycle.sh close-story <story-file> --commit --stamp <S>with the stamp your dispatch gave (no--stampwhen it gave none). Its last stdout line is JSON:- exit 0: the story is verified and committed. Done.
- exit 4: scope or verification failed;
errornames the command. Read the output, fix, rerun.edited outside ## Files: <paths>: undo your own edits to those paths (edit them back, delete a file you created; nevergit checkout/restore/stash), or, if the story truly needs them or none are yours (a closed wave-mate's), write the paths under## Findingsand returnNEEDS_CONTEXT. Ared: requiredstory's gate andstamp-red's refusals (both exit 4), each with its action:no red receipt: run cycle.sh stamp-red <story> after writing the failing test: go to step 2's stamp-red.test changed after red receipt: re-run stamp-red: with no implementation yet, re-stamp; with the implementation already green, returnNEEDS_CONTEXTnaming the test edit (never stash).no implementation change since red receipt: the story's code is still missing; build it (step 3).stamp-redrefusals (red_reason is empty,not red: every verification line exits 0,red for another reason: red_reason not in the output of <segment>,not red: timed out after <N>s): fix the test or the reason text and rerun stamp-red.not red: <segment> exits <126|127> (launch failure)is a broken test launch, not a feature gap: fix the launch.story is not red: required, `no test to seal:Verification names no path under ## Files
testsandnothing to turn green: ## Files holds only sealedare the story's own shape: write the message under## Findingsand returnNEEDS_CONTEXT. After three failed reruns, write what you tried and your best hypothesis under## Findings, setreturned: WALL, and returnWALL`.
- exit 2
verification is round-only: the story names a row markedround-only, which only the reviewer runs. Setreturned: NEEDS_CONTEXT, name the row, and return it. - any other exit (paused, another driver's stamp, a verification line that is not a
## Commandscell): not fixable from here. Setreturned: NEEDS_CONTEXTand return it with theerror.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +19 lines 0e9c617a3d11
- 2d ago Changed · +2 lines 884ba0f1acd1
- 3d ago Changed · +2 lines 415ee200ada4
- 13d ago Changed · +6 lines 6b6c65b7a5c4
- 24d ago Changed · +2 lines 57f0d9844ac0
- 1mo ago Changed · +4 lines e8c572bda298
- 1mo ago Changed · +17 lines · +7 tokens per session 6753438f9849
- 1mo ago Changed · +1 lines 98556ad94533
- 1mo ago Changed · +1 lines 4a9d93296abd
- 2mo ago First seen · 35 lines · 48 tokens per session scan A b7e029679a8e
worker-code is an agent published in the GitHub repository Black-coffe/vulyk (2 stars, last pushed today), licensed MIT. It adds 55 tokens to every session and 1,695 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
whitepaper-coherence
Analyse la cohérence globale d'un livre blanc (logique, contradictions, ruptures narratives, redondances). Utiliser pour auditer un whitepaper avant publication.
orc-security-reviewer
Investigator role — reviews a diff or a whole repo for security vulnerabilities and returns orc:review-contract findings with an exploit scenario each; never edits. Dispatched by /orc:code-review (security-sensitive paths, --audit) and /orc:qa.
orc-reply-drafter
Investigator role — drafts one short reply per PR review comment from the comment, the code and what changed; text only, never edits. Used by /orc:address.
creo-cloudflare-cli
Cloudflare Wrangler expert for Workers, Pages, R2, D1, KV, deployments, and secrets management.
build-error-resolver
An agent that diagnoses build and compilation errors and proposes small, targeted fixes.
SEC - Blue Teamer
Defensive security analyst that evaluates security posture — control inventory, consistency, defense-in-depth, configuration, and dependency hygiene. The defensive counterpart to the red-teamer. Advisory only.