agentmods.dev

audit-orchestrator

audit-orchestrator is an agent for coding agents from qGolem/orc. It costs 55 tokens per session (318 once invoked), scanned A, original, MIT.

An agent that coordinates a broad security audit of Solidity code, the programming language commonly used for Ethereum smart contracts.

In plain words
What is it for?
It creates audit tasks, runs them in waves across specialized security skills, verifies completion, synthesizes findings, and writes a final report.
Why use it?
It divides the audit among specialized checks and combines their results into one report with duplicate findings removed.

Agent

Part of the orc plugin — 29 skills, 27 agents shipped together

not rated 5 5mo ago A scan 55 tokens original MIT
View the source file qGolem/orc
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/qgolem/orc/audit-orchestrator
Clone the repo
git clone --depth 1 https://github.com/qGolem/orc

Or install orc, the plugin that ships this one along with the rest of its 29 skills, 27 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for audit-orchestrator

README.md
[![agentmods](https://agentmods.dev/badge/agents/qgolem/orc/audit-orchestrator.svg)](https://agentmods.dev/agents/qgolem/orc/audit-orchestrator)
Your own site
<a href="https://agentmods.dev/agents/qgolem/orc/audit-orchestrator"><img src="https://agentmods.dev/badge/agents/qgolem/orc/audit-orchestrator.svg" alt="Measured on agentmods" height="20"></a>
Per session 55 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 318 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00055 $0.00318
Opus 5 $0.00028 $0.00159
Sonnet 5 $0.00011 $0.00064
Haiku 4.5 $0.00006 $0.00032

Measured 3d ago against content hash fd99e8bcecdb, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

audit-orchestrator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/audit-orchestrator.md · 26 lines

What it actually says

You are the audit orchestrator. Your job is to coordinate a multi-wave security audit by spawning teammates that each run one specialized audit skill.

Protocol

  1. Create team via TeamCreate
  2. Create all tasks upfront via TaskCreate
  3. Spawn teammates in waves (max 5 per wave) using Task tool with team_name
  4. Each teammate: claims task → invokes skill via Skill tool → writes FINDINGS.md → completes task → messages lead
  5. Between waves: verify completion via TaskList
  6. After all waves: synthesize .audit-work/REPORT.md
  7. Shutdown teammates → TeamDelete

Critical Rules

  • Teammates MUST use Skill tool to invoke audit skills (never inline)
  • Spawn all wave teammates in a single message (parallel)
  • Use general-purpose subagent_type with model: "sonnet" for teammates
  • Deduplicate findings across skills before reporting
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 26 lines · 55 tokens per session scan A fd99e8bcecdb

Subscribe to this mod's changes

audit-orchestrator is an agent published in the GitHub repository qGolem/orc (5 stars, last pushed 5mo ago), licensed MIT. It adds 55 tokens to every session and 318 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

OrchestrationSecurityWeb3 and blockchainai-agentsclaude-codeclaude-code-plugincode-qualitydeveloper-tools
Related

Other agents, from other repositories

ring:prompt-reviewer

Expert Agent Quality Analyst evaluating AI agent executions against best practices, identifying prompt deficiencies, calculating quality scores, and generating precise improvement suggestions.

LerianStudio/ring · 32 tokens

INSTALL

The three definitions in this folder use the Claude Code agent format (YAML frontmatter: name, description, tools, optional model; markdown body with the instructions). The bodies are platform-agnostic — only the frontmatter and the target folder change per platform.

oxsecurity/megalinter · 0 tokens

evolve-cicd-pipeline-audit

CI/CD pipeline security gate for the Evolve Loop (Evaluate archetype). The advisor INSERTS this phase after Build on infrastructure cycles (scout.goaltype == "infrastructure") to audit every changed workflow/pipeline definition for supply-chain and secret-exfiltration posture before it can ship — and BLOCKS when a…

mickeyyaya/evolve-loop · 83 tokens

evolve-memo-reference

Layer-3 on-demand reference for the Layer-P memo phase. Defines the section template and downstream-consumer contract for the memo subagent output.

mickeyyaya/evolve-loop · 35 tokens

evolve-metric-tree

Metric tree evaluation agent for the Evolve Loop (Evaluate archetype). Defines the North Star Metric, identifies input metrics, and establishes guardrail metrics using the Amplitude North Star Framework.

mickeyyaya/evolve-loop · 43 tokens

exit-gate

Delegate to this subagent when a component spec@1 needs a definitive pass/fail judgment before entering the planning phase. Input is a spec@1 JSON object describing a UI component. This is an adversarial gatekeeper — the default disposition is fail, and the spec must earn a pass. The spec passes only if all four…

orin-dx/agent-plugins · 224 tokens