curator

curator is an agent for coding agents from tigerless-labs/autoharness. It costs 27 tokens per session (1,868 once invoked), scanned A, original, MIT.

A background review process that combines many narrow, agent-created skills into broader skill groups. It proposes these combinations but does not write files itself.

In plain words
What is it for?
Use it to identify skills that belong together and suggest class-level skills with organized sections and supporting resources.
Why use it?
A large library of one-off skills can be hard for an agent to discover and maintain; broader groups make related guidance easier to find.

Agent

Part of the autoharness plugin — 1 skill, 2 agents, 4 hooks, 1 MCP server shipped together

About the project

Autoharness is a self-learning skill layer for Claude Code that distills skills from real work sessions, combines overlapping skills, updates them during use, and removes ones that are no longer used. It is for people who want Claude Code to maintain a working library of reusable skills as they work. The catalogue entries provide the hooks, agents, MCP integration, plugin, and skill that make up its workflow.

tigerless-labs/autoharness · 1,532 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/tigerless-labs/autoharness/curator
Clone the repo
git clone --depth 1 https://github.com/tigerless-labs/autoharness

Or install autoharness, the plugin that ships this one along with the rest of its 1 skill, 2 agents, 4 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for curator

README.md
[![agentmods](https://agentmods.dev/badge/agents/tigerless-labs/autoharness/curator.svg)](https://agentmods.dev/agents/tigerless-labs/autoharness/curator)
Your own site
<a href="https://agentmods.dev/agents/tigerless-labs/autoharness/curator"><img src="https://agentmods.dev/badge/agents/tigerless-labs/autoharness/curator.svg" alt="Measured on agentmods" height="20"></a>
Per session 27 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,868 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00027 $0.01868
Opus 5 $0.00014 $0.00934
Sonnet 5 $0.00005 $0.00374
Haiku 4.5 $0.00003 $0.00187

Measured yesterday against content hash d253c070b61d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

curator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/curator.md · 60 lines

How it starts

The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You run periodically as autoharness' background skill CURATOR. This is an umbrella-building consolidation pass, not a passive audit and not a duplicate-finder. The reflector accumulates narrow, session-shaped skills eagerly; your job is to fold them into a smaller set of class-level skills an agent can actually discover.

The goal of the library is a set of class-level instructions and experiential knowledge. Hundreds of narrow skills, each capturing one session's specific fix, is a failure of the library, not a feature — an agent matches skills on descriptions, and one broad umbrella with labeled subsections is more discoverable than five narrow siblings, not less. The right target shape is class-level skills with rich SKILL.md bodies plus references/, templates/, and scripts/ subfiles for session-specific detail — never one-session-one-skill micro-entries.

What you are given (do not go fetch it)

Your input already contains a description index of every agent-created skill across both layers (global and project), as name [layer]: description, plus the authoring + format spec that merged skills must satisfy. The index is already filtered to your members — you never see native / user / external skills, and must never create or name one. Use Read / Grep / Glob to open a candidate's full body and subfiles before you fold it; the index and spec are injected, never reconstruct them with tools.

You only ever propose

Your single write face is stage_skill, which appends one proposal to a queue — it does not land anything. A separate deterministic promoter validates and writes, and it rejects any change to a skill that is not created_by:agent, so your membership boundary is enforced downstream too. Describe each change as an intent and stage it; never output a SKILL.md as prose — a textual description creates nothing.

Hard rules — do not violate

  1. Only touch agent-created skills. The index is your entire universe. Never resurrect, name, or absorb into a native / user skill.
  2. Never destroy. A delete intent archives the skill — moves its directory out of the live tree — which is recoverable. That is your maximum destructive action; there is no hard delete.
  3. Do not use usage counts to decide. The counters are new and mostly zero; use=0 is absence of evidence, not a reason to merge and not a reason to prune. Judge overlap on content. Retirement by rate or age is the lifecycle layer's job — you only consolidate.
  4. Pairwise distinctness is the wrong bar. Never reject a merge because "each skill has a distinct trigger." The right question is: would a maintainer write these as N separate skills, or as one skill with N labeled subsections? When the answer is the latter, merge.

Read the full file on GitHub · 60 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +8 lines d253c070b61d
  2. 6d ago First seen · 52 lines · 27 tokens per session scan A 41f6f4a489b5

Subscribe to this mod's changes

curator is an agent published in the GitHub repository tigerless-labs/autoharness (1,532 stars, last pushed today), licensed MIT. It adds 27 tokens to every session and 1,868 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

Company Researcher

Research a company from its URL or description to infer Stripe Connect integration shape.

stripe/ai · 18 tokens

cross-cli-consistency-checker

Audit all cli-web- CLIs for convention drift against skills/shared/CONVENTIONS.md, including replskin drift via cli-web-devkit drift and .manifest.json presence. Reports PASS/FAIL per check per CLI in a matrix format. Use periodically or before releases to catch inconsistencies across the CLI portfolio.

ItamarZand88/CLI-Anything-WEB · 71 tokens

output-ux-reviewer

Review a cli-web- CLI from the end-user perspective by RUNNING it. Owns end-to-end output VALIDITY: --help completeness, REPL help sync and REPL UX, --json output parseability, protocol leak detection, and entry point correctness (envelope STRUCTURE in code belongs to harness-compliance-reviewer). Returns scored…

ItamarZand88/CLI-Anything-WEB · 85 tokens

traffic-fidelity-reviewer

Review a cli-web- CLI implementation against its APP.md API map. Checks endpoint coverage, parameter fidelity, response parsing accuracy, dead client methods, and stale API map entries. Returns scored findings. Use during Phase 4 standards review — dispatched by the standards skill.

ItamarZand88/CLI-Anything-WEB · 59 tokens

code-reviewer

Adversarial multi-dimensional code review — security, performance, correctness, spec compliance, maintainability. Report issues with confidence ≥80, every finding states category, impact, and evidence. Runs after component-builder in BUILD workflows.

romiluz13/cc10x · 49 tokens

bug-investigator

Investigate bugs, failing tests, and broken behavior when root cause must be proven before code is changed.

romiluz13/cc10x · 25 tokens