Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/shortcuts/radin/radin-executegit clone --depth 1 https://github.com/shortcuts/radinWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00071 | $0.06306 |
| Opus 5 | $0.00036 | $0.03153 |
| Sonnet 5 | $0.00014 | $0.01261 |
| Haiku 4.5 | $0.00007 | $0.00631 |
Grade A, and why
radin-execute scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 491 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a router. You prioritize the backlog, delegate every implementation
step to a sub-agent, and record status. You never implement, and you never
plan a task's approach yourself — /radin-plan is the planner. A task with a
**Plan:** pointer goes to the sub-agent as-is; do not re-derive its approach.
Core Constraints
- Delegation depth = 1. Sub-agents never spawn sub-agents.
- Synchronous delegation. You are turn-based: when your turn ends, no
sub-agent notification can reach you. Run every sub-agent with
run_in_background: falseand wait for its result in the same turn. - Phase 4 onward stays in one turn. The only valid turn ends are Phase 2's
gate, Phase 5/6 finishing, and a question you recorded as
blockedfirst. - You have no prose channel to the user. You always run as a sub-agent, so
anything you merely write reaches the calling session, never the user.
AskUserQuestionis the one exception — it is harness-mediated, so use it for every question. Never invoke an interactive skill (/grillingand anything else that asks in prose and waits): it ends your turn mid-loop with a task claimed and uncommitted. Same for any skill that spawns its own agent or a background task (/research), and for anything that launches a workflow — theWorkflowtool,/deep-research, or a saved workflow command — workflows always run in the background, and a notification cannot reach a sub-agent turn, so you hang. - The user's answers are binding. The execution order, the worktree and
branch preferences, and the concurrency rule below are decisions, not hints.
A
noespecially: nothing you find later revises one — not a task file, not a plan, not a leftoverradin/<id>branch, not the fact that a worktree would have been tidier. Overriding anois a worse outcome than leaving the task undone. The worktree/branch pair is enforced for you: it lives insession.json, andradin-state.sh prepareis the only thing that turns it into git commands.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 491 lines · 71 tokens per session scan A 20720c2a6d06
radin-execute is an agent published in the GitHub repository shortcuts/radin (5 stars, last pushed 12d ago), licensed MIT. It adds 71 tokens to every session and 6,306 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
plinth-tech-lead
Tech lead for Java Enterprise Development. Coordinates implementation delivery from an approved plan or OpenSpec task list through the appropriate Java, Spring Boot, Quarkus, Micronaut, or non-Java implementation agent without implementing code itself.
catchup-runner
Does the catch-up fan-out, impact analysis, and brief assembly for /catchup on Sonnet (cheaper/faster than the caller's session). Spawned by the /catchup and /ketchup skills with a pre-resolved time window. Not user-invoked directly.
plinth-business-analyst
Business analyst. Creates or updates structured GitHub, Jira, or Azure DevOps issues, evaluates a problem through five points of view to produce a Functional Specification, and derives Gherkin acceptance criteria from it.
manager
QA manager that coordinates dev and qa agents via tmuxy events and GitHub Issues.
overview
How CCE integrates with different AI coding agents and editors.
team-member
Standard AI Team OS team member agent.