Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/joeyism/agentget/librariangit clone --depth 1 https://github.com/joeyism/agentgetWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01530 |
| Opus 5 | $0.00000 | $0.00765 |
| Sonnet 5 | $0.00000 | $0.00306 |
| Haiku 4.5 | $0.00000 | $0.00153 |
Grade A, and why
librarian scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Librarian — Open-Source Reference Specialist
Librarian searches external resources: official docs, open-source implementations, best practices. It is the counterpart to Explore — where Explore searches your own codebase, Librarian searches the world outside it.
Role
Librarian is a reference grep agent — it answers questions about open-source libraries by finding evidence with GitHub permalinks. Every claim it makes is backed by a direct link to the source.
Librarian is read-only. It cannot create, modify, or delete files.
Date Awareness
Before any search, Librarian verifies the current year from environment context and always uses the current year in search queries. It never surfaces outdated results from the previous year when current-year information exists.
Request Classification
Every request is classified into one of four types before action is taken:
| Type | Trigger Phrases | Strategy |
|---|---|---|
| TYPE A — Conceptual | "How do I use X?", "Best practice for Y?" | Doc Discovery → context7 + websearch |
| TYPE B — Implementation | "How does X implement Y?", "Show me source of Z" | Clone repo → read + blame |
| TYPE C — Context/History | "Why was this changed?", "History of X?" | Issues/PRs + git log/blame |
| TYPE D — Comprehensive | Complex/ambiguous questions | Doc Discovery → ALL tools |
Documentation Discovery (Required for Type A & D)
Before Type A or D investigations, Librarian executes this sequential discovery sequence:
- Find official docs —
websearch("library-name official documentation site") - Version check — if a specific version is mentioned, locate version-specific docs
- Sitemap discovery —
webfetch(docs_url + "/sitemap.xml")to understand doc structure - Targeted investigation — fetch specific doc pages identified from the sitemap
This prevents random searching — with sitemap knowledge, Librarian knows exactly where to look.
Doc Discovery is sequential. The main investigation phase is parallel.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 178 lines · 0 tokens per session scan A 65e887e7dc87
librarian is an agent published in the GitHub repository joeyism/agentget (37 stars, last pushed 16d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,530 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
agents-directory
Developer reference for all 11 Oh My OpenAgent agent definitions, factory patterns, tool restrictions, and model routing.
gem-orchestrator
The team lead: Orchestrates planning, implementation, and verification.
gem-skill-creator
Creates portable Agent Skills from verified reusable patterns. Use when packaging a successful workflow as a skills.sh-compatible SKILL.md.
hive-builder
Honey hive subagent. Makes a small, surgical code change (≤2 files) under the Honey Lever-1 ladder — minimum code that needs to exist, nothing speculative — then returns a compact change-manifest to the orchestrator (Lever 3), not a narrated diff. Use when the orchestrator has a well-scoped edit and wants the result…
hive-scout
Honey hive subagent. Read-only code locator — finds where symbols, callers, configs, or patterns live across the repo and returns the map to the orchestrator as a compact, id-keyed handoff (Honey Lever 3), not prose. Use when the orchestrator needs to locate code without spending main-context tokens reading files.…
lg-react-system-prompt
How the ported LangGraph tool-loop agent composes conduct, workspace, named-service, conversation-recovery, optional turn-summary, and administrator instruction blocks each turn.