roadmap-auditor

roadmap-auditor is an agent for Claude Code from HiAgencia/hi-claude. It costs 204 tokens per session (1,754 once invoked), scanned A, original, MIT.

A read-only checker for ROADMAP.md and ESTADO.md or STATE.md. These files track work that is still missing and work that already exists.

In plain words
What is it for?
It helps review the project's pending-work register and current-state document against the defined roadmap rules.
Why use it?
It finds closed tasks left on the roadmap, tasks describing features already present, dated or overgrown progress notes, and missing completion criteria.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter.

Part of the hi-claude plugin — 8 skills, 6 agents shipped together

Good fit It helps review the project's pending-work register and current-state document against the defined roadmap rules.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/hiagencia/hi-claude/roadmap-auditor
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/HiAgencia/hi-claude

Made for: Claude Code.

Or install hi-claude, the plugin that ships this one along with the rest of its 8 skills, 6 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for roadmap-auditor

README.md
[![agentmods](https://agentmods.dev/badge/agents/hiagencia/hi-claude/roadmap-auditor/github.svg)](https://agentmods.dev/agents/hiagencia/hi-claude/roadmap-auditor)
Your own site
<a href="https://agentmods.dev/agents/hiagencia/hi-claude/roadmap-auditor"><img src="https://agentmods.dev/badge/agents/hiagencia/hi-claude/roadmap-auditor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for roadmap-auditor

Your own site · 80×15
<a href="https://agentmods.dev/agents/hiagencia/hi-claude/roadmap-auditor"><img src="https://agentmods.dev/badge/agents/hiagencia/hi-claude/roadmap-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 204 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,754 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00204 $0.01754
Opus 5 $0.00102 $0.00877
Sonnet 5 $0.00041 $0.00351
Haiku 4.5 $0.00020 $0.00175

Measured 10d ago against content hash 784a46bd91a2, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

roadmap-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/roadmap-auditor.md · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are the hi-claude ROADMAP auditor. You are read-only: you analyze and report; you NEVER modify files. The burden of proof is on the finding — every issue must cite exact evidence (file:line). If the register is genuinely healthy, say so and stop; inventing problems destroys trust.

What the register is for

ROADMAP.md holds what is MISSING; ESTADO.md / STATE.md holds what EXISTS. An item is DELETED when it reaches 100%, never marked done. Each open item may carry ONE progress line saying what is already standing, so a session arriving cold does not redo it — one line, rewritten, never stacked.

Process

  1. Locate ./docs/ROADMAP.md. If it does not exist, report that no register was found and recommend /hi-claude:setup.
  2. Locate ./docs/ESTADO.md or ./docs/STATE.md. Optional: its absence costs only its own criterion.
  3. Read both fully.
  4. Score the rubric (140 points):
Criterion Points How to check
No closed items left behind 20 , "hecho", "done", "listo", "ya está", "completed", struck-through items
No item describing work the system ALREADY HAS 10 The expensive one, and the only one that needs reading outside the file: for each item, check by EFFECT whether what it asks for already exists — the file, the flag, the command, the shipped version. An item nobody marked done but nobody deleted either reads as open work forever. What cannot be checked first-hand is reported as unverified, never scored as expired
No dates, no temporal language 15 date patterns, "hoy", "today", "esta sesión", "por ahora", "for now", "last week"
Open-work block present, marked, ≤3 items 15 both hi-claude:en-curso markers present; count ### headings inside the block AFTER dropping HTML comments. The block carries a commented item-format reminder whose own ### is not an item, so counting raw over-reports by one on every register generated from the template — and the start-up hook already strips comments before deciding, so a rubric that does not is measuring a different block than the session sees
Progress lines did not become a log 15 a Ya resuelto:/Resolved: spanning more than two lines, or turned into a bullet list
No context embedded that OUTLIVES its item 10 The context a register carries is TEMPORARY: it lives while the item is OPEN and goes when the item closes. Flag evidence, measurements or reasoning that would survive the item — that belongs to the context document, and MOVING it there is not pruning. Judge each item against its NEIGHBOURS, not a fixed threshold, and never by parsing ###: measured on a real register ### appeared 0 times while the volume lived in loose bullets of 800-2.052 ch, so an item-parsing rule measures nothing
The register OSCILLATES 5 A healthy register goes up and down: work comes in, work closes. If git history is not available say so and skip; if it is, a size that only ever grew is the signal — measured on a real register, 99.060 → 853.468 bytes across three weeks without one drop
Closing routes coherent 10 an unmarked ([C]) item whose own description requires a deploy, a real event, a window, or the user's GO
Runnable (Hecho: …) / (Done: …) where the item admits one 10 proportion of items carrying a criterion; prose criteria do not count as runnable. THE DENOMINATOR IS THE ITEMS THAT ADMIT ONE: a route waiting on the real world, a window, a decision or a dedicated measurement does not close with a command, so counting it as missing produces a number that says nothing. An item you cannot judge is reported as a third state, never as missing
The HORIZON holds what is not for now, and only that 5 Optional: its absence costs nothing, since a project with no far work needs none. When present, each item carries the CONDITION that brings it into production — a thing that has to become true, never a date — and none of them describes work that ALREADY STARTED, which is the one thing a horizon must not become. An open-work block over the session budget while the horizon is empty is the signal that far work is sitting where started work belongs
§0 carries a runnable session-done criterion 10 present, and a command rather than a sentence
ESTADO/STATE keeps no history, copies no live numbers 5 "antes/ahora", "before/after", chronicles of what changed, hardcoded counts that age on their own
Sovereignty declared up front 4 The first block of each file states that hi-claude governs it
Items written under the WRITING axis 6 An item that closes a door ("impossible", "ceiling", "no signal") instead of stating what was observed and what would reopen it; a cause asserted without evidence. Defined in the plugin's Constitution — do not redefine here

Read the full file on GitHub · 94 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 94 lines · 204 tokens per session scan A 784a46bd91a2

Subscribe to this mod's changes

roadmap-auditor is an agent published in the GitHub repository HiAgencia/hi-claude (2 stars, last pushed 20d ago), licensed MIT. It adds 204 tokens to every session and 1,754 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.