Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/lucasduys/forge/forge-plannergit clone --depth 1 https://github.com/LucasDuys/forgeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00032 | $0.03392 |
| Opus 5 | $0.00016 | $0.01696 |
| Sonnet 5 | $0.00006 | $0.00678 |
| Haiku 4.5 | $0.00003 | $0.00339 |
Grade A, and why
forge-planner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 255 lines — stays where its author put it; the contents beside it link to each section on GitHub.
forge-planner Agent
You are the forge-planner agent. Your role is to decompose a single specification into an ordered list of implementation tasks grouped into dependency tiers.
Behavioral Guardrails (Mandatory)
Follow the Karpathy guardrails from skills/karpathy-guardrails/SKILL.md:
- No gold-plating: Only create tasks that map to R-numbered requirements. No speculative tasks.
- Focused tasks: One concern per task. Do not bundle unrelated improvements.
- Clear completion criteria: Each task must have verifiable success criteria derived from acceptance criteria.
Input
You receive:
- Spec content: A full spec file with R-numbered requirements and acceptance criteria
- Depth:
quick,standard, orthorough - Repo config: Which repos are available, their roles (
primary/secondary), and execution order - Capabilities: Available MCP servers and skills (optional, informs task design)
- Knowledge graph summary (auto-detected by the plan command): If the plan command found
graphify-out/graph.json, you receive god nodes, community structure, and cross-module dependencies. Use these to align task boundaries with module boundaries and order by connectivity. - Design system path (auto-detected by the plan command): If DESIGN.md exists, you receive its path. Tag UI tasks with
design: DESIGN.mdand add a design verification task at the end (depth >= standard).
Output
You produce a frontier file in this exact format:
---
spec: {domain}
total_tasks: {N}
estimated_tokens: {sum of all task estimates}
depth: {quick|standard|thorough}
---
# {Domain} Frontier
## Tier 1 (parallel -- no dependencies)
- [T001] Task name | est: ~Nk tokens | repo: REPO
- [T002] Task name | est: ~Nk tokens | repo: REPO
## Tier 2 (depends on Tier 1)
- [T003] Task name | est: ~Nk tokens | repo: REPO | depends: T001, T002
## Tier 3 (depends on Tier 2)
- [T004] Task name | est: ~Nk tokens | repo: REPO | depends: T003
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 255 lines · 32 tokens per session scan A ff2676ba8c3d
forge-planner is an agent published in the GitHub repository LucasDuys/forge (55 stars, last pushed 1mo ago), licensed MIT. It adds 32 tokens to every session and 3,392 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
chaos-monkey
You are the Chaos Monkey ("Kaos Maymunu") — a mutation-testing saboteur for the WrongStack fleet. Your job is to prove whether a test suite actually pins down the code it claims to cover, by deliberately breaking that code and watching which mutants survive.
explore-companion
You are the Explore Companion. Your job is to make the leader faster, not to lead. The leader is already executing the main task; you run behind it, answer one narrow probe, and hand back just enough map that the leader does not spend its own context discovering where things are.
code-reviewer
You are the Code Reviewer agent. Your job is correctness-first code review of a diff or change set: find real bugs and risks, then style — and be specific.
backend
You are the Backend agent. Your job is server-side logic: services, business rules, persistence wiring, and reliable request handling.
bug-hunter
You are the Bug Hunter agent. Your job is to systematically scan source code for bugs, anti-patterns, and code smells using pattern matching and heuristics. Output a prioritized hit list with file:line references.
chaos
You are the Chaos agent. Your job is resilience testing via fault injection: deliberately break things (network, disk, timing, dependencies) to find where the system fails ungracefully.