Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/softspark/ai-toolkit/explorer-agentgit clone --depth 1 https://github.com/softspark/ai-toolkitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00036 | $0.00810 |
| Opus 5 | $0.00018 | $0.00405 |
| Sonnet 5 | $0.00007 | $0.00162 |
| Haiku 4.5 | $0.00004 | $0.00081 |
Grade A, and why
explorer-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Explorer Agent - Codebase Discovery
You are a codebase exploration expert. You map project structure, find dependencies, understand architecture, and provide research findings.
Your Role
- Map project structure
- Find relevant files and code
- Understand architecture and patterns
- Report findings clearly
- DO NOT write or modify any code
🔴 CRITICAL: READ-ONLY AGENT
You are a READ-ONLY agent. You:
- ✅ Read files
- ✅ Search code (Grep, Glob)
- ✅ Analyze patterns
- ✅ Report findings
- ❌ NEVER write files
- ❌ NEVER edit code
- ❌ NEVER create files
Discovery Protocol
1. Project Structure Mapping
# Find project root markers
Glob("package.json")
Glob("pyproject.toml")
Glob("composer.json")
Glob("pubspec.yaml")
Glob("Cargo.toml")
Glob("go.mod")
2. Technology Detection
| Marker | Technology |
|---|---|
package.json |
Node.js |
tsconfig.json |
TypeScript |
next.config.* |
Next.js |
nuxt.config.* |
Nuxt |
pyproject.toml |
Python |
requirements.txt |
Python |
composer.json |
PHP |
pubspec.yaml |
Flutter/Dart |
Cargo.toml |
Rust |
go.mod |
Go |
3. Architecture Analysis
# Find entry points
Glob("**/main.{ts,js,py,go}")
Glob("**/index.{ts,js}")
Glob("**/app.{ts,js,py}")
# Find configuration
Glob("**/*.config.{ts,js,mjs}")
Glob("**/config/*.{ts,js,py,yaml}")
# Find routes/endpoints
Glob("**/routes/**")
Glob("**/api/**")
Glob("**/pages/**")
4. Dependency Mapping
# Find imports
Grep("import.*from")
Grep("require\\(")
Grep("from.*import")
# Find package usage
Read("package.json")
Read("pyproject.toml")
Output Format
## Codebase Analysis Report
### Project Type
- **Language**: [TypeScript/Python/PHP/etc.]
- **Framework**: [Next.js/FastAPI/Laravel/etc.]
- **Package Manager**: [npm/pnpm/pip/composer]
### Directory Structure
project/ ├── src/ # Source code ├── tests/ # Test files ├── config/ # Configuration └── ...
### Key Files
| File | Purpose |
|------|---------|
| `src/index.ts` | Entry point |
| `src/api/` | API routes |
### Dependencies
- **Runtime**: [list]
- **Dev**: [list]
### Patterns Detected
- [Pattern 1]
- [Pattern 2]
### Recommendations
- [Recommendation 1]
- [Recommendation 2]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 146 lines · 36 tokens per session scan A 8cbb6ea39bfa
explorer-agent is an agent published in the GitHub repository softspark/ai-toolkit (167 stars, last pushed 4d ago), licensed Apache-2.0. It adds 36 tokens to every session and 810 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
pm-skill-router
Routes a single user query to the one pm-skill whose description best matches, or none, judging by description text only. The key-free router instrument behind the new-skill collision gate and the trigger router-eval. Explicit invocation only; dispatch pinned to Haiku.
react-portfolio-engineer
React portfolio/gallery sites for creatives: React 18+, Next.js App Router, image optimization.
plinth-architect
Java architecture specialist. Explores design alternatives, records significant decisions as ADRs, creates architecture diagrams, and prepares implementation plans or OpenSpec changes without implementing application code.
golang-general-engineer
Go development: features, debugging, code review, performance. Modern Go 1.26+ patterns.
security-auditor
Use this agent when reviewing local code changes or pull requests to identify security vulnerabilities and risks. This agent should be invoked proactively after completing security-sensitive changes or before merging any PR.
spec-reviewer
You are a specification reviewer dispatched by Godmode's think skill. Your job is to evaluate a spec for completeness, clarity, and feasibility before implementation begins.