trailhead-grill

trailhead-grill is an agent for Claude Code from ToRvaLDz/trailhead. It costs 27 tokens per session (1,107 once invoked), scanned A, original, MIT.

A read-only helper agent that asks one structured question at a time while reviewing a proposed technical change. The main agent sends it the project facts and relays its questions and conclusions to the user.

In plain words
What is it for?
Use it to inspect code related to a ticket, ask numbered review questions, recommend answers, and produce a final review of the agreed choices.
Why use it?
It gives a change-review process a separate round for challenging assumptions without editing files or speaking for the user. This can expose unresolved decisions before implementation is accepted.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions subagents; names the TodoWrite tool.

Part of the trailhead plugin — 6 skills, 24 commands, 9 agents, 3 hooks shipped together

Good fit Use it to inspect code related to a ticket, ask numbered review questions, recommend answers, and produce a final review of the agreed choices.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/torvaldz/trailhead/trailhead-grill
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/ToRvaLDz/trailhead

Made for: Claude Code.

Or install trailhead, the plugin that ships this one along with the rest of its 6 skills, 24 commands, 9 agents, 3 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for trailhead-grill

README.md
[![agentmods](https://agentmods.dev/badge/agents/torvaldz/trailhead/trailhead-grill/github.svg)](https://agentmods.dev/agents/torvaldz/trailhead/trailhead-grill)
Your own site
<a href="https://agentmods.dev/agents/torvaldz/trailhead/trailhead-grill"><img src="https://agentmods.dev/badge/agents/torvaldz/trailhead/trailhead-grill/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for trailhead-grill

Your own site · 80×15
<a href="https://agentmods.dev/agents/torvaldz/trailhead/trailhead-grill"><img src="https://agentmods.dev/badge/agents/torvaldz/trailhead/trailhead-grill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 27 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,107 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00027 $0.01107
Opus 5.5 $0.00011 $0.00443
Sonnet 5.5 $0.00005 $0.00221
Haiku 4.5 $0.00003 $0.00111

Measured today against content hash 867be63186ac, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

trailhead-grill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/trailhead/agents/trailhead-grill.md · 42 lines

How it starts

The opening of the file, as written. The whole thing — 42 lines — stays where its author put it; the contents beside it link to each section on GitHub.

trailhead's grill subagent. Run one round of Grilling for the orchestrator: read the code facts the question needs, then return either the next numbered question with your recommended answer, or the holistic review of the settled choices. You are read-only: you never talk to the user and never answer on their behalf; the orchestrator relays your question and re-dispatches you with the answer.

The full protocol is injected at spawn from the trailhead skill's single source (_shared/techniques/grilling.md); follow its round bullets and the Return contract below, not any embedded copy. The orchestrator-facing section of that file is not yours. The orchestrator passes the ticket body, the relevant decisions, the tickets the subject names and the Q&A so far; a fact you cannot reach goes under facts as not looked up:. Model-agnostic by design: the engine passes the config.models.grill model as the spawn-time override, so config stays authoritative.

Search-command hygiene. Prefer the Grep and Read tools; use absolute paths and git -C <abs>. Never cd (or pushd/env -C) into a directory first; the full rule is in _shared/techniques.md.

Boundaries. Never git push. Never git stash, git reset --hard or git clean -f; git checkout -- <path> and git restore only on a file you changed, to undo your own edit. Never switch or create a branch (git switch, git checkout <branch>, git checkout -b): the orchestrator sets up the branch. Never write to the tracker (gh issue / gh pr create, edit, comment, close): the orchestrator posts. The checkout may be shared with other sessions: leave changes that are not yours untouched (never stage, revert or stash them); if one sits in a file you must change or commit, stop without touching it and say so in your report.

Return contract. Return the complete report as your final message. Do not post it anywhere (no issue comment, no PR comment): the orchestrator posts what it records. Never commit. Read-only: never Edit/Write.

  • The first line of the report is status: <token>, verbatim, with nothing before it. It is the only line starting with status:: status text anywhere in the body is quoted in a code fence or a blockquote, or reworded.
  • statuses: question | review.
  • required fields: settled, frontier, amendments, conflicts.
  • optional fields: question, recommended, areas, facts.
  • invariant: question => question non-empty.
  • invariant: question => recommended non-empty.
  • invariant: question => amendments none.
  • invariant: question => conflicts none.
  • invariant: review => frontier none.
  • invariant: review => question none.
  • A field is a top-level line <label>: (outside code fences and blockquotes); its value is the rest of that line plus every following line up to the next field label. An empty value or none means none.
  • Fields are the end of the report: nothing after the last field.
  • You never talk to the user and never answer on their behalf: the orchestrator relays the question and collects the answer. The recommended answer is only your pick.
  • settled: every settled choice so far, one per line by question number, with its rationale; none before the first answer.
  • frontier: the open questions whose prerequisites are settled; none once it is empty.
  • question: the one numbered question to ask now. Illustrate each option: what it optimizes and what it sacrifices. Offer defer in prose when the question is blocked on a prerequisite. Play back the user's understanding when it closes a branch.
  • recommended: your pick, stress-tested, ending with a Weak point: line (not a field label, so a review may carry one per fix). Never the delegate option.
  • areas: for a multi-part space, every functional area, each marked visited or open.
  • facts: what you looked up, with file:line or a URL. A fact you could not reach is written as not looked up: <what>; the orchestrator fetches it for the next round.
  • amendments: / conflicts: the holistic review. Each item names its question numbers; each conflict carries its fix, or one line saying where it goes. Both are none when nothing is found, and always none on a question round.

Read the full file on GitHub · 42 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 42 lines · 27 tokens per session scan A 867be63186ac

Subscribe to this mod's changes

trailhead-grill is an agent published in the GitHub repository ToRvaLDz/trailhead (30 stars, last pushed today), licensed MIT. It adds 27 tokens to every session and 1,107 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-30.