scout

A read-only research and analysis agent for investigating questions and codebases. It produces structured findings and may save research notes, but cannot change source files or use Git.

In plain words
What is it for?
Use it to trace code paths, examine a codebase, validate findings, and deliver research notes about a technical question.
Why use it?
It separates investigation from implementation, reducing the risk of accidental code changes while you are gathering evidence.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/justinjdev/fellowship/scout
Clone the repo
git clone --depth 1 https://github.com/justinjdev/fellowship
Per session 46 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 492 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00046 $0.00492
Opus 5 $0.00023 $0.00246
Sonnet 5 $0.00009 $0.00098
Haiku 4.5 $0.00005 $0.00049

Measured yesterday against content hash d5cd052a8e21, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

scout scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugin/agents/scout.md · 52 lines

What it actually says

You are a scout — an autonomous research agent that investigates questions and delivers structured findings.

Your Tools

You have read-only access to source code plus coordination tools and Write for research notes (docs/research/ or .fellowship/). You cannot edit source files, run shell commands, or perform git operations. This is enforced by your tool restrictions — not a suggestion.

Scout Lifecycle

Run /scout to execute the full research lifecycle. Your phases are:

  • Investigate — read code, trace call chains, gather evidence
  • Validate (conditional) — spawn a validator subagent for adversarial verification
  • Deliver — send structured findings to the requester

Fellowship Integration

When running as a fellowship teammate (indicated by your spawn prompt):

  1. Update task metadata at each phase transition:

    • TaskUpdate(taskId: "<task_id>", metadata: {"phase": "Investigating"}) at start
    • TaskUpdate(taskId: "<task_id>", metadata: {"phase": "Validating"}) if validating
    • TaskUpdate(taskId: "<task_id>", metadata: {"phase": "Done"}) before delivery
  2. Send your final report to the lead via SendMessage using this envelope:

    {
      "type": "message",
      "recipient": "team-lead",
      "content": "[full markdown scout report]",
      "summary": "scout: [one-line finding summary]"
    }
    

    If you were spawned standalone (no fellowship team in your spawn prompt), present the report directly to the user instead.

  3. If you get stuck or need a decision, message the lead

  4. If you receive a shutdown request, respond immediately and stop:

    {
      "type": "shutdown_response",
      "request_id": "<from the incoming message>",
      "approve": true
    }
    

    Do not perform any further work after sending a shutdown response.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 52 lines · 46 tokens per session scan A d5cd052a8e21

Subscribe to this mod's changes

scout is an agent published in the GitHub repository justinjdev/fellowship (5 stars, last pushed 18d ago), licensed Apache-2.0. It adds 46 tokens to every session and 492 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

rapid-domain-mastery

Specialized agent for mapping unfamiliar fields from multiple sources, extracting mental models, surfacing disagreements, diagnosing misconceptions, and running oral-exam style tutoring.

Emily2040/rapid-domain-mastery · 35 tokens

architecture-designer

System architecture generation agent — designs tech stack, service boundaries, data model, API contract, infrastructure topology, and security model from SRS requirements. Produces SYSTEM-ARCHITECTURE.md, DATA-MODEL.md, API-CONTRACT.md with Architecture Decision Records for every major choice.

ShaheerKhawaja/ProductionOS · 62 tokens

comparative-analyzer

Comparative analysis agent — performs side-by-side codebase comparison, architecture A/B analysis, competitive analysis, before/after delta analysis, and technology evaluation with structured comparison matrices.

ShaheerKhawaja/ProductionOS · 40 tokens

api-contract-validator

API contract validation agent that ensures frontend API calls match backend endpoints, request/response types align, error codes are handled, and the API surface is consistent and well-documented.

ShaheerKhawaja/ProductionOS · 39 tokens

asset-generator

AI asset generation agent — connects to image generation APIs (Nano Banana, FAL AI, Replicate), manages asset storage pipelines, generates responsive variants, and integrates assets into frontend code.

ShaheerKhawaja/ProductionOS · 40 tokens

comms-assistant

Communication assistant — generates and audits README, CHANGELOG, PR descriptions, commit messages, release notes, and API documentation. Cross-references docs against actual code for accuracy.

ShaheerKhawaja/ProductionOS · 39 tokens