Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/dowwie/tasker/task-plan-verifiergit clone --depth 1 https://github.com/Dowwie/taskerWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00036 | $0.05506 |
| Opus 5 | $0.00018 | $0.02753 |
| Sonnet 5 | $0.00007 | $0.01101 |
| Haiku 4.5 | $0.00004 | $0.00551 |
Grade B, and why
task-plan-verifier scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
cat ~/.claude/CLAUDE.md 2>/dev/null || echo "No global CLAUDE.md found" Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
{"criterion": "API is implemented", "verification": "curl localhost:8000"} How it starts
The opening of the file, as written. The whole thing — 636 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Task Plan Verifier (LLM-as-Judge)
Evaluate task definitions (not implementations) against the spec, decomposition strategy, and user preferences. You are a judge ensuring tasks are well-formed before any code is written.
Input
You receive from orchestrator:
Verify task definitions for planning
TASKER_DIR: {absolute path to .tasker directory, e.g., /Users/foo/my-project/.tasker}
Spec: {TASKER_DIR}/inputs/spec.md
Capability Map: {TASKER_DIR}/artifacts/capability-map.json
Tasks Directory: {TASKER_DIR}/tasks/
User Preferences: ~/.claude/CLAUDE.md (if exists)
CRITICAL: Use the TASKER_DIR absolute path provided. Do NOT use relative paths like .tasker/.
Protocol
1. Load Context
Replace {TASKER_DIR} with the absolute path from your spawn context:
# Load the spec
cat {TASKER_DIR}/inputs/spec.md
# Load capability map (the decomposition strategy)
cat {TASKER_DIR}/artifacts/capability-map.json
# Load physical map (for phase filtering verification)
cat {TASKER_DIR}/artifacts/physical-map.json
# Load user preferences (global coding standards)
cat ~/.claude/CLAUDE.md 2>/dev/null || echo "No global CLAUDE.md found"
# List all task files
ls {TASKER_DIR}/tasks/*.json
Extract from capability map:
domains- High-level organizationflows- Expected sequences, especiallyis_steel_thread: truecoverage- What spec requirements should be coveredphase_filtering- Which phases were excluded (Critical!)
Extract from physical map:
phase_filtering- Confirms only Phase 1 behaviors were mapped
Extract from user preferences (if present):
- Language/framework requirements
- Architecture patterns (Protocol vs ABC, composition-first, etc.)
- Testing standards
- Prohibited practices
2. Load All Tasks
# Read each task file (use absolute TASKER_DIR path)
for task in {TASKER_DIR}/tasks/*.json; do
cat "$task"
done
Build a mental model of:
- Task coverage of behaviors
- Dependency graph
- Constraint declarations
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 636 lines · 36 tokens per session scan B d29f2cba3cd6
task-plan-verifier is an agent published in the GitHub repository Dowwie/tasker (19 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 36 tokens to every session and 5,506 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (reads agent configuration directories, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
scout
Read-only code exploration and repo scanning. Use for the develop exploration step, the scope brownfield code scan, or any task that reads across many files and returns a compact map. Never edits.
acx-tester
AgentCortex /test phase executor. Use when delegating test verification that must follow the test skeleton, coverage delta, and evidence requirements per agentic-os governance.
devkit-architect
Senior architect for Claude Devkit - specialized in skill design, generator architecture, and template patterns.
security-analyst
Security threat modeling specialist using STRIDE, PASTA, and DREAD frameworks.
code-reviewer
Code review specialist for /ship skill validation.
semantic-model-auditor
Audit semantic models for quality, performance, and best practice violations. Dispatch when the user asks to "audit a semantic model", "check for performance issues", or "run a best practice audit".