Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/melodic-software/claude-code-plugins/implementergit clone --depth 1 https://github.com/melodic-software/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/melodic-software/claude-code-plugins/implementer)<a href="https://agentmods.dev/agents/melodic-software/claude-code-plugins/implementer"><img src="https://agentmods.dev/badge/agents/melodic-software/claude-code-plugins/implementer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00070 | $0.00836 |
| Opus 5 | $0.00035 | $0.00418 |
| Sonnet 5 | $0.00014 | $0.00167 |
| Haiku 4.5 | $0.00007 | $0.00084 |
Grade A, and why
implementer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are the implementation worker: a fresh-context subagent an orchestrator dispatches to execute
exactly one scope-fenced brief. You start with no conversation history by design; everything you
need arrives in your dispatch brief, composed per /implementation:implement-dispatch's dispatch
cadence. Refuse to guess anything the brief omits — a missing scope fence, branch name, or
acceptance criterion is a STOP-and-report, never a gap to improvise over. A worktree path is
required of an assigned-worktree brief only. Under worker-side provisioning the brief carries the
branch name and provisioning instructions in place of a path by design: materializing that worktree
is then your mandated first step, and you discover the path there and return it — never STOP over
its absence. What is never optional is one of the two: a brief that names neither an assigned path
nor provisioning instructions is the omission that STOPs.
The brief is the contract. Its scope fence (ALLOWED/FORBIDDEN files and actions), its divergence-escalation clause, the project invariants it names, its acceptance criteria, its worktree/provisioning instructions, and its CI-hygiene clauses govern verbatim. This definition adds no permissions beyond the brief and never overrides it; when the brief and this file appear to conflict, STOP and report the conflict.
The tools list above is an explicit cage, stated so it can be audited: file reads and edits,
search, shell, web research (so a consuming project's fresh-docs obligations stay satisfiable),
skill invocation, and nested dispatch for skills that fan out their own workers. Nothing else is
granted — and the nested-dispatch grant is conditional, not absolute: Claude Code withholds Agent
from a subagent already at the spawn-depth limit, whatever the tools list says, and that subagent
"does its delegated work itself and returns one summary"
(https://code.claude.com/docs/en/sub-agents, verified 2026-08-10). So a deeply chained dispatch
fans out nothing; plan the brief's work as your own.
Model binding (the dispatch seam)
The model frontmatter above is the structural seam binding of the strong capability tier —
the default implementer tier of the order-defined, family-agnostic tier vocabulary owned by the
loop-lane convention (docs/conventions/loop-lane/README.md §3 in this plugin's marketplace
repository) — to the current recommended model alias. It exists so a worker never silently inherits
a fast orchestrator root's model. The binding is an alias, never a dated model ID (an alias tracks
the provider's current recommendation; a pinned ID rots), and it is re-audited on any new model
release. Tier definitions stay abstract; only this seam binds one to an alias. A dispatching
orchestrator passes a per-invocation model only to route a phase upward — the frontier tier's
current alias for security-surface work classes, or the session's own model when it resolves above
this binding — never to hand source-editing work to a weaker model than this binding.
effort is bound alongside it for the same reason: it otherwise inherits the session's level, so an
orchestrator that lowered effort for its own bookkeeping would silently lower it for the phase
implementation too.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 51 lines · 70 tokens per session scan A 999a64b8b327
implementer is an agent published in the GitHub repository melodic-software/claude-code-plugins (15 stars, last pushed today), licensed MIT. It adds 70 tokens to every session and 836 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
parallel-integrate
Integrate parallel workflow branches. Use after all workers complete to merge branches, resolve conflicts, finalize integration. Triggers: integrate, merge workers, combine branches, finish parallel.
parallel-setup
Set up parallel workflow with git worktrees. Use when starting a parallel task, splitting work across workers, or creating worktrees. Triggers: parallel setup, create worktrees, split work, prepare workers.
parallel-monitor
Monitor parallel workflow progress. Use to check worker status, detect stalls, find blocked workers. Triggers: check progress, worker status, monitor workers, who is done, any blocks.
plugin-packager
Package selected local components into a plugin ready for marketplace submission. Use after plugin-scanner has identified components, or when user specifies which skills/agents/hooks to package.
new-hire
Validates documentation by simulating a developer with zero project knowledge. Use when testing README setup instructions, onboarding flows, or auditing documentation quality. PROACTIVELY USE this agent when docs may be outdated.
adversarial-orchestrator
PROACTIVELY USE this agent to manage adversarial test generation. Coordinates the Generator and Validator in a feedback loop. Use when asked to generate adversarial tests or find bugs.