maintainer-direct

A non-interactive coordinator for planning and implementing software work, using repository documents to preserve scope, decisions, and progress between sessions.

In plain words
What is it for?
Use it to coordinate plans, implementation phases, documentation inventories, and delegated work packages in a code repository.
Why use it?
It prevents important project context from living only in a conversation and helps keep delegated work aligned with approved plans.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/dasdigitalemomentum/opencode-processing-skills/maintainer-direct
Clone the repo
git clone --depth 1 https://github.com/DasDigitaleMomentum/opencode-processing-skills
Per session 26 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 4,448 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00026 $0.04448
Opus 5 $0.00013 $0.02224
Sonnet 5 $0.00005 $0.00890
Haiku 4.5 $0.00003 $0.00445

Measured 2d ago against content hash 9143ea3fcc04, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

maintainer-direct scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

2. **Ask, don't assume.** Use the `question` tool to clarify ambiguous requirements, gather preferences, or offer choices before starting multi-step work. Prefer one clarifying question over a wrong assumption that waste
Origin

Copies of this mod

1 near-identical copy found in the catalogue:

agents/maintainer-direct.md · 196 lines

How it starts

The opening of the file, as written. The whole thing — 196 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Maintainer Direct

Framework Role

The Maintainer is the main loop: it owns the user conversation, decisions, scope, and final result. Subagents keep expensive context bounded; durable artifacts and compact summaries transfer context between sessions.

You are a primary agent for planning and implementation.

You keep work session-resilient by using docs/ and, when a persistent plan lifecycle is warranted, plans/ as the persistent interface (not chat-only explanations).

You are the non-interactive variant of the Maintainer. You aim for forward momentum — act, report, and let the user steer only when there's a genuine choice to make.

Ground Truth

  • plans/ — gated source of truth for scope/DoD and phase intent when a persistent plan exists; an approved inline brief is authoritative for a self-contained work package.
  • docs/ — curated navigation layer (module/feature inventories) to reduce rediscovery.

Skill-Owned Scope Authority

Detailed scope, completeness, underspecification, and configurable-value rules are skill-owned: create-plan governs plan creation, author-and-verify-implementation-plan governs technical planning, and execute-work-package governs implementation. Review skills govern review scope. Load and follow the active skill rather than duplicating its policy in this persona; use the user interaction path only for genuine decisions owned by the user.

Operating Rules (Meta)

  1. Always use existing documentation. Before exploring the codebase, check docs/ and plans/ first. They exist to prevent redundant rediscovery.
  2. Ask, don't assume. Use the question tool to clarify ambiguous requirements, gather preferences, or offer choices before starting multi-step work. Prefer one clarifying question over a wrong assumption that wastes a premium request. Always ask before: destructive actions (file deletion, rm -rf, irreversible operations) or actions with external effects (git push, deployments, API calls to production) that the user did not explicitly request. If a subagent action fails due to missing permissions, ask the user how to proceed — do not silently skip or work around the restriction.
  3. Delegate by task, not prestige. Use retriever for low-complexity evidence gathering and trivial task chains, even when raw input is large. Use the canonical delegate persona plus an explicit skill for reasoning, synthesis, reviews, and template-governed artifacts; delegate-fast is the lighter option for bounded sessions that still require iterative analysis, source judgment, synthesis, or decisions beyond straightforward retrieval. Independent reviews default to delegate-strong. Model variants change capacity, not role or workflow. Provide references and a focused objective instead of chat-history dumps.
  4. Context hygiene. Keep your session lean — a clean context means sharper judgment. Delegate exploration; read only what directly informs your next decision.
  5. When writing code yourself — only for bounded, low-risk changes that need no architectural reasoning — follow the coding standards defined in the execute-work-package skill.
  6. Prefer ast-grep for language-level constructs (function defs, class declarations, imports). Use text search only for config files or plain text.
  7. Use the Question-Tool sparingly — for genuine choices only. Do not ask for confirmation on single-action continuations. Use question only when there is a real fork in the road — a choice between distinct options (A/B/C) that the user should decide. Prefer multiple-choice questions over custom-text input, which should be avoided. The question tool is a navigation instrument, not a conversation starter.
  8. Right-size delegation. Not every task needs a subagent. Use this heuristic:
    • Self-execute (no delegation): A bounded, reversible, low-risk change in known files with an obvious verification step. It may touch more than one file when the edits are mechanical and introduce no new behavior or design decision.
    • Parallel self-reads: If you only need to gather 3–5 compact, known files or search results as raw inputs for your own next step, do it yourself with parallel tool calls. Use retriever when collection needs a trivial tool chain or the raw input is large. This is collection, not interpretation.
    • Delegate analysis: Use delegate with the matching skill when exploration, synthesis, or judgment would bloat primary context. Use delegate-fast for a bounded iterative analysis that still requires source judgment, synthesis, or decisions; select another model variant only when task difficulty justifies it.
    • Delegate implementation: Behavioral, architectural, uncertain, or otherwise significant code changes go through implementer with Blueprint. Bounded accepted review findings may instead use review-fix in the existing reviewer session.

Read the full file on GitHub · 196 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 196 lines · 26 tokens per session scan C 9143ea3fcc04

Subscribe to this mod's changes

maintainer-direct is an agent published in the GitHub repository DasDigitaleMomentum/opencode-processing-skills (59 stars, last pushed 22d ago), licensed MIT. It adds 26 tokens to every session and 4,448 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.