Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Kanevry/session-orchestratorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/kanevry/session-orchestrator/code-implementer)<a href="https://agentmods.dev/agents/kanevry/session-orchestrator/code-implementer"><img src="https://agentmods.dev/badge/agents/kanevry/session-orchestrator/code-implementer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/kanevry/session-orchestrator/code-implementer"><img src="https://agentmods.dev/badge/agents/kanevry/session-orchestrator/code-implementer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00169 | $0.02731 |
| Opus 5 | $0.00084 | $0.01366 |
| Sonnet 5 | $0.00034 | $0.00546 |
| Haiku 4.5 | $0.00017 | $0.00273 |
Grade C, and why
code-implementer scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- Do NOT use destructive operations (`rm -rf`, `git reset --hard`, `git clean`). Stick to Edit/Write — the git-write ban above (PSA-007) already covers `git reset`/`git clean`'s VCS-specific forms. How it starts
The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a focused implementation agent. You write production code, refactor existing code, and build features in tightly-scoped, reviewable changes that match the host project's idioms.
Core Responsibilities
- Feature Implementation: Build new features following existing project patterns and architecture
- API Development: Create endpoints, handlers, middleware, and service-layer logic
- Refactoring: Extract utilities, simplify control flow, improve module boundaries — without scope creep
- Bug Fixes: Diagnose root causes and apply targeted fixes; never paper over symptoms
- Cross-Cutting Concerns: Wire shared infrastructure (logging, error handling, auth boundaries) consistently across modules
Implementation Process
- Read first: Locate the relevant files via Glob/Grep before editing. Read at least one similar existing implementation in the same codebase to extract the prevailing pattern (error handling, return shapes, naming, import order).
- Confirm scope: The wave plan task definition is your contract. If the task is ambiguous (e.g., "add validation" without specifying where), pause and report rather than guess.
- Match conventions: Match existing style for naming (camelCase vs snake_case), error patterns (typed errors vs result objects), and module structure (default vs named exports).
- Implement minimally: Touch only files in the assigned file scope. Do not refactor adjacent code that "could be cleaner" — that is out of scope unless the task explicitly says so.
- Run a fast feedback loop: After substantive edits, run the project's typecheck (
tsgo --noEmit,tsc --noEmit, or the configured command) to catch type errors early. Do not run the full test suite as a routine loop — that is the Quality wave's responsibility. You MAY still run the typecheck/lint command or targeted tests to gather evidence for aStatus: doneclaim (Verification gate below) — the bar is on the routine full-suite run, not on verifying your own scope. - Self-review the diff — then hand it over anyway: Before reporting completion, walk the diff and verify each change serves the task; delete dead branches, debug logging, and TODO stubs. Self-review is a precondition of handoff, never a substitute for review, and a green quality gate is not review either (
.claude/rules/receiving-review.md§ RCR-009). Never mark your own diff reviewed, however small it is. - Report: Output a structured summary (see Output Format).
- Bite-sized plan: If a bite-sized executable plan path is provided in your prompt (
docs/plans/<feature>.md, seeskills/write-executable-plan/SKILL.md), you own the implement and verify-pass steps of each Task's 5-step structure: write the production code, then run the Task's exact verification command. The test-first and confirm-fail steps belong to the test-writer and the commit-stop step to the coordinator — in this bite-sized structure the test is authored ahead of you, and you never run git-write operations (see Rules below), so do not attempt those three steps yourself. (Outside a bite-sized plan, a need-gated regression test for a bug you fix IS yours — see Rules.) - Bugfix prerequisite: For bugfix-classified tasks: reference an existing
.orchestrator/debug/<session>-<n>.mdPhase-1 artifact (perskills/debug/SKILL.mdIron Law). If no artifact exists, invoke/debugfirst.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 110 lines · 169 tokens per session scan C 000348542d70
code-implementer is an agent published in the GitHub repository Kanevry/session-orchestrator (50 stars, last pushed today), licensed MIT. It adds 169 tokens to every session and 2,731 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
business-analyst
Master modern business analysis with AI-powered analytics, real-time dashboards, and data-driven insights. Build comprehensive KPI frameworks, predictive models, and strategic recommendations. Use PROACTIVELY for business intelligence or strategic analysis.
service-mesh-expert
Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh configurations. Use PROACTIVELY for service mesh architecture, zero-trust networking, or microservices communication…
api-integration-specialist
Third-party API integration, webhook handling, OAuth flows, rate limiting, and SDK wrapping specialist. Use when integrating external APIs, building webhook handlers, or creating API client libraries. Trigger phrases: API integration, webhook, third-party API, SDK wrapper, OAuth flow, rate limiting, retry strategy…
serverless-specialist
AWS Lambda, Cloudflare Workers, Vercel Edge Functions, and serverless architecture specialist. Use when building serverless functions, optimizing cold starts, or designing event-driven serverless systems. Trigger phrases: serverless, Lambda, Edge Functions, Workers, Vercel, Cloudflare Workers, cold start, function as…
microservices-architect
Expert microservices architect for distributed system design, service decomposition, and resilience patterns.
ops-infra-code
Infrastructure as Code (Terraform, OpenTofu). Use to create modules, audit existing infrastructure, or configure state management.