Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/DailybotHQ/deepworkplan-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/dailybothq/deepworkplan-skill/shell-auditor)<a href="https://agentmods.dev/agents/dailybothq/deepworkplan-skill/shell-auditor"><img src="https://agentmods.dev/badge/agents/dailybothq/deepworkplan-skill/shell-auditor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/dailybothq/deepworkplan-skill/shell-auditor"><img src="https://agentmods.dev/badge/agents/dailybothq/deepworkplan-skill/shell-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.00383 |
| Opus 5.5 | $0.00011 | $0.00153 |
| Sonnet 5.5 | $0.00006 | $0.00077 |
| Haiku 4.5 | $0.00003 | $0.00038 |
Grade A, and why
shell-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Shell Auditor
Role
Guards the two shipped/installer shell scripts and the helper scripts so they stay shellcheck-clean and run on macOS's default bash 3.2.
Inputs
A change to setup.sh, skills/deepworkplan/shared/context.sh, or
scripts/*.sh (or a request to audit them).
Process
- Run
shellcheck setup.sh skills/deepworkplan/shared/context.sh scripts/*.shand address every finding. - Enforce bash 3.2 compatibility — reject and rewrite:
mapfile/readarray→while IFS= read -r line; do …; done < <(cmd)declare -A(associative arrays) → restructure${var^^}/${var,,}→tr '[:lower:]' '[:upper:]'
- Confirm each script starts with
#!/usr/bin/env bashthenset -euo pipefail. - For installer changes, run the smoke test against a throwaway HOME:
HOME="$(mktemp -d)" ./setup.sh --host claude, and verifycontext.shstill emits single-line JSON.
Output
The fixed scripts and a summary of shellcheck/compat issues resolved.
Notes
Never break the public setup.sh flags (--host, --help) or the resulting
symlink names without flagging a MAJOR bump. CI runs the smoke job on both
Ubuntu and macOS — assume both must pass.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 42 lines · 28 tokens per session scan A 85820bdd9ffb
shell-auditor is an agent published in the GitHub repository DailybotHQ/deepworkplan-skill (23 stars, last pushed 3d ago), licensed MIT. It adds 28 tokens to every session and 383 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
gsd-debugger
Investigates bugs using scientific method, manages debug sessions, handles checkpoints. Spawned by /gsd:debug orchestrator.
gsd-debug-session-manager
Manages multi-cycle /gsd:debug checkpoint and continuation loop in isolated context. Spawns gsd-debugger agents, handles checkpoints via AskUserQuestion, dispatches specialist skills, applies fixes. Returns compact summary to main context. Spawned by /gsd:debug command.
gsd-code-reviewer
Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with severity-classified findings. Spawned by /gsd:code-review.
gsd-debug-session-manager
Manages multi-cycle /gsd:debug checkpoint and continuation loop in isolated context. Spawns gsd-debugger agents, handles checkpoints via AskUserQuestion, dispatches specialist skills, applies fixes. Returns compact summary to main context. Spawned by /gsd:debug command.
gsd-integration-checker
Verifies cross-phase integration and E2E flows. Checks that phases connect properly and user workflows complete end-to-end.
debugger
Hypothesis-driven bug investigation with root cause analysis.