Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/leo-maomao/pm-copilot/agent-interfacegit clone --depth 1 https://github.com/Leo-maomao/pm-copilotWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00982 |
| Opus 5 | $0.00000 | $0.00491 |
| Sonnet 5 | $0.00000 | $0.00196 |
| Haiku 4.5 | $0.00000 | $0.00098 |
Grade A, and why
agent-interface scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 114 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Interface Contract
Every agent definition in this repository follows the same interface.
Required Sections
- Purpose
- Responsibilities
- Inputs
- Outputs
- Completion Criteria
- Handoffs
- Failover, when applicable
Output Rules
- Always distinguish facts, assumptions, and open questions.
- Never hide uncertainty.
- Return product judgment, not only files. Each agent should explain what it decided, why, what alternatives were rejected, and what should happen next.
- When an agent cannot complete a task, return the closest lower-fidelity artifact plus a limitation note.
- Preserve upstream decisions unless there is a clear contradiction.
- Use a stable output status on every handoff:
complete: the agent met its completion criteria.needs_input: required human input blocks the next workflow state.blocked: required context, approval, or tooling is missing and no lower-fidelity artifact is safe.degraded: a lower-fidelity artifact was produced with an explicit limitation.failed: the agent could not produce a usable output.
- Do not mark an output
completewhen required fields are unknown, validation placeholders remain, or the next agent would need to reverse-engineer missing context. - Use stable machine codes in traces and localized human-facing wording in PRDs and UI deliverables.
Runtime Protocol
Every agent response or internal handoff should be treated as an output envelope:
agent:
status: complete # complete | needs_input | blocked | degraded | failed
confidence: "" # high | medium | low
facts:
assumptions:
open_questions:
decisions:
alternatives:
artifact_delta:
validation_delta:
risks:
next_actions:
action_closure:
handoff:
Rules:
factsmust cite the source path, user answer, or tool result when available.assumptionsmust include reason and risk. They are not facts.open_questionsmust use exactly one clarification classification from the workflow.artifact_deltamust list files created, files changed, or explicitly statenone.validation_deltamust list commands run, skipped, or required later. Do not use vague placeholders.decisionsmust include evidence and tradeoffs for product-relevant choices.alternativesmust note rejected paths when the choice affects scope, artifact mode, readiness, user experience, analytics, or launch.next_actionsmust identify the smallest useful follow-up for product, design, engineering, QA, analytics, launch, or memory.action_closuremust turn the selected decision or blocker into an accountable critical path with owner, due phase, completion evidence, and status.- Specialist agents may recommend readiness, but PM Orchestrator owns the final PRD, engineering handoff, and launch readiness fields.
- When two agents disagree, keep both positions visible and route the conflict to PM Orchestrator or Review Agent before final delivery.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 114 lines · 0 tokens per session scan A 84de5eeacf1a
agent-interface is an agent published in the GitHub repository Leo-maomao/pm-copilot (4 stars, last pushed 5d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 982 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
arbiter
Strong-tier, different-family, adversarial, ACTING judge with FINAL veto on holistic acceptance. Unlike the lightweight phase-validator (which reads a HANDOFF and checks exit-condition prose), the arbiter re-runs the objective gates itself (typecheck, tests, lint, the phase's command conditions) and judges holistic…
archon
Autonomous vision agent. Decomposes vague or specific direction into campaign phases. Delegates to Marshals and specialists. Reviews output against quality standards. Maintains campaign state across invocations. Does not write code — orchestrates those who do.
implementer
PlanGate exec フェーズのタスク実装エージェント。workflow-conductor から委譲されたタスクを TDD で実装し、完了報告する。タスクごとに新規起動される使い捨てエージェント。.
orchestrator
PlanGate × Workflow/Skill/Agent ハイブリッドアーキテクチャの実行層総責任者。WF-01〜WF-05 の phase 遷移を制御し、各 phase の完了条件判定・Agent への委譲・handoff 発行を行う。汎用マルチエージェント調整も兼ねる。.
graph-planner
Analyze a coding request and design an executable dependency graph. Read-only.
ss-reviewer
Independent code reviewer for the specship review stage — one member of the opt-in review panel. Use to get fresh, context-free eyes on a working diff, optionally through a named lens (correctness, security, performance, contract-consistency). Reports findings only; it does not fix code, decide the verdict, or touch…