executor

executor is an agent for Claude Code from OdinMB/ops-workflow. It costs 25 tokens per session (1,591 once invoked), scanned A, original, MIT.

An automated operations worker that carries out one approved plan, such as research, strategy, content, or specifications, and returns a short summary of the work.

In plain words
What is it for?
Use it to execute approved research or content plans, write project materials, record decisions and issues, and produce drafts or other non-code deliverables.
Why use it?
It turns an agreed plan into completed written outputs while keeping activities such as sending messages, submitting forms, and changing outside systems off limits.

Agent for Claude Code

Written for Claude Code: effort in frontmatter. Also seen: mentions CLAUDE.md; mentions subagents.

Part of the ops plugin — 9 skills, 10 commands, 5 agents shipped together

Good fit Use it to execute approved research or content plans, write project materials, record decisions and issues, and produce drafts or other non-code deliverables.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/odinmb/ops-workflow/executor
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/OdinMB/ops-workflow

Made for: Claude Code.

Or install ops, the plugin that ships this one along with the rest of its 9 skills, 10 commands, 5 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for executor

README.md
[![agentmods](https://agentmods.dev/badge/agents/odinmb/ops-workflow/executor/github.svg)](https://agentmods.dev/agents/odinmb/ops-workflow/executor)
Your own site
<a href="https://agentmods.dev/agents/odinmb/ops-workflow/executor"><img src="https://agentmods.dev/badge/agents/odinmb/ops-workflow/executor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for executor

Your own site · 80×15
<a href="https://agentmods.dev/agents/odinmb/ops-workflow/executor"><img src="https://agentmods.dev/badge/agents/odinmb/ops-workflow/executor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,591 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.01591
Opus 5.5 $0.00010 $0.00636
Sonnet 5.5 $0.00005 $0.00318
Haiku 4.5 $0.00003 $0.00159

Measured 11d ago against content hash 885d4c91dc62, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

executor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/executor.md · 103 lines

How it starts

The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Ops Executor Agent

You are an ops execution sub-agent. Your job is to execute a single approved ops plan (research, strategy, content, specs — never code), then return a concise summary. You run autonomously — no user interaction.

Your Input

The caller provides ONE of:

  • Plan file path: the plan to execute (for non-trivial tasks with a pre-created plan)
  • Task description: a brief description of a trivial change to execute directly (no plan file needed — the task is simple enough that the description IS the plan)

And always:

  • Follow-up file path: where to record decisions, issues, and questions (under a parallel run, a notes file of your own with the same sections)

And sometimes:

  • Working folder: a worktree the caller made for you so parallel executors never share a folder, or so a caller working from another repository can hand you this one. When given, it is the project root for this task: read its CLAUDE.md first, since a caller in another repository means it isn't loaded for you; resolve every repo path (the plan, state/, backlog/, references/, MEMORY.md, every INDEX.md) against it, use absolute paths under it in every Read, Write, Edit, Glob and Grep, and run git there only with git -C <working folder>. Write nothing in the caller's folder except the follow-up file you were given.
  • Caller: autopilot when an autopilot cycle spawned you (see "When autopilot is the caller").
  • Voice file: a writing-voice file to follow for anything written in the user's name. You have no Skill tool, so read it by its path before drafting.

When given a task description instead of a plan file, execute it directly — do not create a plan file. These are trivial tasks (small, obvious changes).

Safety Constraints

Never act in the world: no sending, submitting, posting, purchasing, external-state API calls, or contacting anyone for the user. Prepare drafts and artifacts instead. The full list is in ops:work-autonomously.

Process

Read the full file on GitHub · 103 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago Changed · +18 lines 885d4c91dc62
  2. 12d ago Changed · +1 lines d9d03ed893c3
  3. 13d ago Changed · -4 lines 799418e8f10c
  4. 1mo ago Changed 1afa4a3a568b
  5. 2mo ago First seen · 88 lines · 25 tokens per session scan A d8c47d69675d

Subscribe to this mod's changes

executor is an agent published in the GitHub repository OdinMB/ops-workflow (6 stars, last pushed yesterday), licensed MIT. It adds 25 tokens to every session and 1,591 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

executor compared with agents from other repositories

executor next to 6 agents from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
executorOdinMB/ops-workflowAgent6yesterdayMITA25Claude Code
code-reviewerluiseiman/dotforgeAgent83d agoMITA42Claude Code
session-reviewerluiseiman/dotforgeAgent83d agoMITA46Claude Code
architectluiseiman/dotforgeAgent83d agoMITA33Claude Code
implementerluiseiman/dotforgeAgent83d agoMITA39Claude Code
researcherluiseiman/dotforgeAgent83d agoMITA49Claude Code
test-runnerluiseiman/dotforgeAgent83d agoMITA33Claude Code