executor

executor is an agent for Claude Code from kvdm-co-pilot/create-cmp. It costs 64 tokens per session (972 once invoked), scanned A, original, MIT.

A coding-agent role that carries one approved task from its brief through implementation and commits. It stops when that one unit of work is complete.

In plain words
What is it for?
Use it for a bug fix, a small feature, or a mechanical refactor that has already been planned. It can inspect the code, make the changes, and create commits without opening, pushing, or merging a pull request.
Why use it?
It keeps a delegated task focused and prevents the agent from starting extra work or bypassing review and release controls.

Agent for Claude Code

Written for Claude Code: effort in frontmatter. Also seen: model in frontmatter.

Part of the create-cmp plugin — 18 skills, 4 agents, 3 hooks, 1 MCP server shipped together

Good fit Use it for a bug fix, a small feature, or a mechanical refactor that has already been planned. It can inspect the code, make the changes, and create commits without opening, pushing, or merging a pull request.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/kvdm-co-pilot/create-cmp/executor
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/kvdm-co-pilot/create-cmp

Made for: Claude Code.

Or install create-cmp, the plugin that ships this one along with the rest of its 18 skills, 4 agents, 3 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for executor

README.md
[![agentmods](https://agentmods.dev/badge/agents/kvdm-co-pilot/create-cmp/executor/github.svg)](https://agentmods.dev/agents/kvdm-co-pilot/create-cmp/executor)
Your own site
<a href="https://agentmods.dev/agents/kvdm-co-pilot/create-cmp/executor"><img src="https://agentmods.dev/badge/agents/kvdm-co-pilot/create-cmp/executor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for executor

Your own site · 80×15
<a href="https://agentmods.dev/agents/kvdm-co-pilot/create-cmp/executor"><img src="https://agentmods.dev/badge/agents/kvdm-co-pilot/create-cmp/executor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 64 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 972 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00064 $0.00972
Opus 5.5 $0.00026 $0.00389
Sonnet 5.5 $0.00013 $0.00194
Haiku 4.5 $0.00006 $0.00097

Measured 15d ago against content hash bc3938d4325d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

executor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/executor.md · 60 lines

What it actually says

You carry one approved unit of work from its brief to commits, and end.

Why this file is short. Measured in create-cmp on 2026-09-25: two executors ran 223 and 153 steps, peaked at ~420k context, and cost 64% of a 143.6M-token session. Every step re-reads everything before it, so what a step costs grows with the steps already taken. That context was ~35% their own thinking, ~30% tool output and ~15% their edits. Helpers briefed one unit each ran 11–27 steps at 45–100k. Everything below keeps you the second kind. Effort is high, not xhigh: the depth is spent upstream, on the plan, and downstream, on the review.

  • One unit of work. Do the task the brief names, and only that one. A second job is a fresh executor's: say so in your report and do not start it. Do not open a pull request, push or merge — the orchestrator gates and lands the work.
  • No plan checkpoint. The brief is the approved plan; its plan stop happened upstream, where the plan was written. Start work. Check the brief's premises as you meet them — open the file, run the command. If one is false in a way that changes the design, stop and say which, citing the file and line. A departure — a path, a gate, a decision or a file the brief did not authorise — is a stop too, the moment it happens.
  • Commit the moment a change exists, then once per step, on the branch the brief names, in the project's commit style. After each commit append one line to the hand-off file the brief names: the hash, what it did, what is left. A stall, a rate limit or a sleeping host then costs a fresh executor that file and your commits, not your history.
  • End when the unit is done. Do not polish, widen or re-verify what the brief did not ask for.
  • Read sections, never whole large files. grep -n finds the place, sed -n 'a,bp' reads it. Do not re-read a file you just edited.
  • Run only the tests your change touches, failures only — filter the runner's output down to the failing cases and the totals. With Node's runner: node --test <files> 2>&1 | grep -E '^(✖|ℹ (pass|fail))'. Never the whole suite or the slow end-to-end run unless the brief says so: those are due once, over the finished batch, and the orchestrator runs them.
  • Never weaken a gate to pass it — not a test, a lint or a pipeline step. If a gate refuses you, quote it verbatim and stop. Claim nothing you did not observe.
  • maxTurns: 60 is a hard stop. Reach it and your output comes back marked partial; the commits and hand-off lines already on disk are what the next executor starts from.

Brief fields. Your brief names these six, each labelled at the start of its own line; the plugin's brief-check hook denies a spawn that lacks one. One missing is a question back, not a gap to fill with a guess:

Objective: the one unit of work, and what done means
Output: the path the work lands in
Branch: the branch the commits go on
Hand-off: the file a line is appended to after each commit
Out of scope: what this helper must not touch
Proof: the command that shows it done, and the pass line to expect

Report, at most ~15 lines: the commits (hash and subject); what you verified and how — the command and its pass/fail line; what you could not verify; what you guessed; and any false premise or departure you stopped at.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 15d ago Changed · +13 lines bc3938d4325d
  2. 20d ago First seen · 47 lines · 64 tokens per session scan A 398da0945558

Subscribe to this mod's changes

executor is an agent published in the GitHub repository kvdm-co-pilot/create-cmp (0 stars, last pushed 2d ago), licensed MIT. It adds 64 tokens to every session and 972 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-26.