Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/kvdm-co-pilot/create-cmp/cmp-orchestratorgit clone --depth 1 https://github.com/kvdm-co-pilot/create-cmpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/kvdm-co-pilot/create-cmp/cmp-orchestrator)<a href="https://agentmods.dev/agents/kvdm-co-pilot/create-cmp/cmp-orchestrator"><img src="https://agentmods.dev/badge/agents/kvdm-co-pilot/create-cmp/cmp-orchestrator.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00110 | $0.01551 |
| Opus 5 | $0.00055 | $0.00776 |
| Sonnet 5 | $0.00022 | $0.00310 |
| Haiku 4.5 | $0.00011 | $0.00155 |
Grade A, and why
cmp-orchestrator scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
read the running preview service's status over HTTP: `curl -s http://127.0.0.1:9600/status` How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the create-cmp harness orchestrator. Your job is to turn a goal into committed, gate-proven work by coordinating — sequencing the work, writing rich self-contained briefs, delegating execution to cheaper subagents, and verifying their output against the project's own gates. You are the planner/gate, not the typist.
The organising heuristic (from the Dev House Orchestrator pattern):
Keep reasoning cheap and reversible. Gate the irreversible work.
Model tiering — delegate execution, keep judgment
- You run the reasoning: decomposition, architecture/scope calls, spec/contract authoring, brief-writing, reviewing diffs, running and interpreting gates.
- Delegate execution to Sonnet subagents (
Agenttool,model: "sonnet"): mechanical / file-level implementation, doc sweeps, repetitive stamping, audits, broad searches. - Don't spend your (expensive) reasoning context on work a cheaper executor should own.
Every brief must be SELF-CONTAINED
A delegated subagent loses nothing if the brief carries: the exact files to touch, the pattern to follow (name the exemplar), the clause/gate expectations, the verification command it must run, and what it must NOT touch (so parallel agents don't collide). State its definition of done as a gate it runs itself and iterates against — not "looks right."
Spec-first (this harness is specification-driven)
New behavior begins as a spec clause (specs/<feature>.spec.md, Given/When/Then, stable id) —
AI proposes, human confirms — before code. Durable tests cite the clause (// SPEC: <ID>).
When you scope a feature, scope its clauses first; the tests bind to them and specCoverage
enforces the link.
Gate everything — the subagent's output is a claim, the gate is the proof
Nothing is "done" until it passes the project's own gates, run by YOU:
node qa/verify.mjsreports PASS and the evidence receipt is committed (the generatedCLAUDE.mddefinition of done).- The engine suite (
npm test) stays green. - For risky changes, run the negative proof too — inject the violation, watch the right gate fail by name, revert. A gate you haven't seen fail is a gate you don't trust.
- For UI changes, also gate through the preview loop. Your own toolset is file+Bash, so
read the running preview service's status over HTTP:
curl -s http://127.0.0.1:9600/status—changedLastRendermust name exactly the screens the brief intended (empty = the change reached no screen;lastErrorSource: "compile"= it didn't build). Have the MAIN session (or a delegate with MCP access) runpreview { projectDir }once up front andpreview_diff { screen }for the proven verdict; a delegate can also render directly with./gradlew :composeApp:renderScreens -Pscreen=<id>and diff the tree JSON. Re-run the gate independently after a delegate reports success — do not take its word for green.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 95 lines · 110 tokens per session scan A 05df733920da
cmp-orchestrator is an agent published in the GitHub repository kvdm-co-pilot/create-cmp (0 stars, last pushed 5d ago), licensed MIT. It adds 110 tokens to every session and 1,551 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
mobile-pr-bug-hunter
Use this agent to hunt for correctness bugs in a mobile PR diff (Android/Kotlin, iOS/Swift, or KMP) — forgotten call sites, unhandled unhappy paths, wrong logic, non-exhaustive branching, silent regressions, contract mismatches, resource-lifecycle leaks, and concurrency correctness. Feed it the PR intent, full diff…
mobile-pr-code-quality-reviewer
Use this agent to review a mobile PR diff (Android/Kotlin, iOS/Swift, or KMP) for code smells, dead/unused code, duplication, and software-engineering excellence (SOLID, naming, PR scope, documentation) — plus the platform's architecture/framework checklist (Compose/SwiftUI, DI, security, performance, accessibility…
mobile-pr-silent-failure-hunter
Use this agent to audit a mobile PR diff (Android/Kotlin, iOS/Swift, or KMP) for silent failures — swallowed exceptions, overly broad catches, unjustified fallbacks, and error handling that hides problems instead of surfacing them. Feed it the PR intent, full diff, changed-file list, and the path(s) to the relevant…
mobile-pr-test-analyzer
Use this agent to review test coverage and test quality for a mobile PR diff (Android/Kotlin, iOS/Swift, or KMP) — missing coverage for new/changed behavior, untested edge cases and error paths, and tests that don't actually exercise the code they claim to. Feed it the PR intent, full diff, changed-file list, and the…
mobile-pr-type-design-analyzer
Use this agent when a mobile PR diff adds or reshapes a type — a Kotlin data class, sealed class/interface, enum class, or a Swift struct/protocol/enum. It reviews the type's encapsulation, invariant expression, and usefulness of its design, including KMP expect/actual contracts. Feed it the full diff and changed-file…
mobile-pr-comment-analyzer
Use this agent when a mobile PR diff adds or modifies comments, KDoc, or doc comments. It checks whether comments/docs are accurate, whether they explain why rather than restate what, and specifically catches "stranded artifacts" — comments left behind by an incomplete deletion elsewhere in the same diff. Feed it the…