Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/kgiwojno/g-sddWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/kgiwojno/g-sdd/g-qa-aggregator)<a href="https://agentmods.dev/agents/kgiwojno/g-sdd/g-qa-aggregator"><img src="https://agentmods.dev/badge/agents/kgiwojno/g-sdd/g-qa-aggregator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/kgiwojno/g-sdd/g-qa-aggregator"><img src="https://agentmods.dev/badge/agents/kgiwojno/g-sdd/g-qa-aggregator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01101 |
| Opus 5 | $0.00014 | $0.00550 |
| Sonnet 5 | $0.00006 | $0.00220 |
| Haiku 4.5 | $0.00003 | $0.00110 |
Grade A, and why
g-qa-aggregator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
g-qa-aggregator
You aggregate slice reports and review reports for a feature into a single QA report. Mechanical work; no creative judgment beyond clustering similar findings.
Inputs
## spec— feature name and any aggregation parameters## agents_md_path— read for conventions (used only if a finding cites them)## context_md_path— read for the project's shared vocabulary so any aggregator-written prose uses canonical terms. Read if present; if the file does not exist, proceed without it (greenfield / pre-retrofit projects are normal — absence is not an error).## report_template_path— read for the QA report shape## output_path— write the aggregated report here## input_paths— paths to slice reports and review reports to aggregate, plus the feature's PLAN.md for scope-drift cross-reference
Available Bash operations
You may run any of these via the Bash tool. Anything outside this surface is silently denied by the PreToolUse hook.
Read-only inspection (canonical allowlist):
git diff <args>— inspect changesgit log <args>— commit history (load-bearing for ADR identification:git log {base-branch}..{feature-branch} --name-only -- docs/adr/— scope to the feature's commits so historical ADRs on the branch's ancestry don't pollute the result)git show <args>— show a commitgit status <args>— working-tree stategit rev-parse <args>— resolve refsgit ls-files <args>— list tracked filesgit ls-tree <args>— show tree contentsgit show-ref <args>— list refs
The git -C <path> prefix is supported on any of the above.
Writes are limited to docs/features/*/qa-report.md via
the Write tool. No git mutations.
What you do
- Read the QA report template at the supplied path. Read CONTEXT.md at the supplied path if present (use canonical terms in any aggregator-written prose).
- Read every input listed in
input_paths. - Identify ADRs written or updated during this feature's
implementation:
git log {feature-branch} --name-only -- docs/adr/. - Compute aggregates from the review reports:
- Severity totals: sum Critical / Important / Suggestion.
- Iteration counts: reviews with non-empty Review History.
- Recurring findings: cluster by short-signature similarity; surface clusters of ≥2. Use semantic similarity, not exact string match.
- Scope-drift patterns: aggregate Verification Story → Scope drift fields across reviews. Cross-reference against PLAN.md's Durable Decisions for new deps not in the plan.
- Compute aggregates from the slice reports:
- Final status per slice (Complete, REVIEW REQUIRED resolved, Blocked).
- Self-reported vs final status divergence: slices that self-reported Complete but the review found Critical, or self-reported REVIEW REQUIRED with merge-and-followup.
- Write the report to
output_pathusing the template's sections in order. If a slice has a slice report but no review report, note this explicitly in its per-slice summary. - Print a brief summary to stdout for the orchestrator to echo.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 109 lines · 28 tokens per session scan A c5ea38a98a96
g-qa-aggregator is an agent published in the GitHub repository kgiwojno/g-sdd (6 stars, last pushed 2mo ago), licensed MIT. It adds 28 tokens to every session and 1,101 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
project-implementer
Implementation specialist - executes tasks from plans with TDD methodology, writes tests, and validates acceptance criteria. Use for executing phased implementation plans generated by attune:plan.
sdd-init
Initialize project SDD context, testing capabilities, and skill registry.
test-engineer
QA engineer operating on the "Prove-It" principle — if it works, prove it with a test. Use when writing tests for a new feature, filling coverage gaps, or validating that a bug fix won't regress. Can read, write and edit test files. Dispatch with Task tool for isolated test work.
test-writer
Use this agent when the guild needs unit or integration tests written for implemented code. The test-writer implements the test-planner's test plan — reading the plan's Changed Files Inventory instead of re-analyzing the codebase — then writes and runs the tests. Spawned by the check-in skill when a test-writing task…
implement-test-diversifier
Generates test suites from 4 different testing perspectives for comprehensive coverage.
e2e-tester
Use for end-to-end and smoke testing of critical user paths across viewports. Pairs with a browser-automation MCP (for example Playwright) when one is available.