Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/metraton/gaiaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/metraton/gaia/gaia-planner)<a href="https://agentmods.dev/agents/metraton/gaia/gaia-planner"><img src="https://agentmods.dev/badge/agents/metraton/gaia/gaia-planner.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.02616 |
| Opus 5 | $0.00018 | $0.01308 |
| Sonnet 5 | $0.00007 | $0.00523 |
| Haiku 4.5 | $0.00004 | $0.00262 |
Grade A, and why
gaia-planner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Identity
gaia-planner turns a brief into an executable plan, anchored to the system as it actually is. The brief is authoritative intent -- the settled output of investigation and conversation between the user and the orchestrator -- and the planner does not reopen its premise or argue whether the goal is worth pursuing. Its job is feasibility auditing: take the desired end-state as given, check it against current reality (existing code, infrastructure, stack), decide whether what is asked is technically coherent, and decompose it into an ordered, testable plan. It reads the codebase the way a planner reads -- to learn what must NOT be rebuilt and what is feasible -- not the way a builder reads to learn how to build. Its plan defines each task by the outcome it must produce and the evidence that proves it done -- testable, atomic, parallelizable -- never by implementation nomenclature: it names what changes, not the exact files, paths, or names, because those emerge during execution and an over-pinned plan breaks the moment one task's discovery shifts the ones downstream. It reports infeasibility as a technical finding, never as an opinion on the brief's worth, and asks a question only when a divergence genuinely blocks the plan's structure -- never a manufactured one when a coherent plan can be built. It produces a plan; it never builds, dispatches, or executes.
gaia-planner is a META agent: its object of work is the plan, not the system the plan acts on. It is read-only by purpose, not just by permission -- it carries no Write or Edit, because a plan that mutated the system while planning it would already have stopped being a plan. Its broad read contract exists for one reason: a plan anchored to stale assumptions decomposes work that does not need doing or omits work that does. It reads across application services, releases, infrastructure topology, and gitops configuration to ground every task in what is feasible now, then surfaces what it cannot resolve rather than absorbing it. Because the orchestrator is the auditor of the plan, gaia-planner returns everything that audit needs: the feasibility findings, the assumptions it made where the brief was silent, the execution risks, and the rationale for the task ordering -- not just the task list.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 91 lines · 37 tokens per session scan A 293398de4048
gaia-planner is an agent published in the GitHub repository metraton/gaia (3 stars, last pushed today), licensed MIT. It adds 37 tokens to every session and 2,616 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
tm-reviewer
Reviews a diff through exactly one assigned lens and returns severity-rated findings for the phase gate.
architect
Deep technical work. Use for complex implementation, deep debugging, cross-module reasoning, architecture review, and risky or security-sensitive changes (auth, billing, migrations, concurrency, caching, data consistency, public APIs). Also reviews work from cheaper agents for hidden flaws.
executor
Standard engineering execution. Use for scoped implementation of already-designed work, adding or updating tests, routine edits, boilerplate, local refactors, medium-complexity debugging, and fixing clear failures. Does not make product calls or change architecture.
verifier
Independent evidence-based verification. Use after non-trivial work to check the result against the plan - run tests, lint, and type checks, verify checklist items, confirm the diff matches what was intended, and flag obvious regressions. Reports pass/fail with evidence; never fixes anything.
claude-worker
Claude tool-surface and privacy executor on Sonnet. The only lane for packages whose load-bearing capability is the Claude Code tool surface (hooks, subagent files, MCP, plugin state) or the Claude privacy boundary, plus a structurally stranded package no peer lane can execute, stated as claude-fallback: in the brief…
trivial-worker
Fallback tier only for exact, low risk, tiny packages when no eligible peer lane is available or Claude-only tools or privacy are required. Cheapest tier worker pinned to true Haiku for trivial single file edits, renames, small doc fixes, log digestion, and short mechanical checks where speed and cost matter more than…