grandmaster

grandmaster is an agent for coding agents from xenitV1/claude-code-maestro. It costs 28 tokens per session (1,334 once invoked), scanned A, original, MIT.

An architecture-focused coding agent that handles high-level software work across frontend, backend, and system design.

In plain words
What is it for?
Use it to design and build application features, choose how systems should be structured, and work across frontend and backend code.
Why use it?
It helps turn broad technical plans into implementation work while considering how different parts of an application fit together.

Agent

Part of the maestro plugin — 13 skills, 1 command, 1 agent, 7 hooks, 1 MCP server shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/xenitv1/claude-code-maestro/grandmaster
Clone the repo
git clone --depth 1 https://github.com/xenitV1/claude-code-maestro

Or install maestro, the plugin that ships this one along with the rest of its 13 skills, 1 command, 1 agent, 7 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for grandmaster

README.md
[![agentmods](https://agentmods.dev/badge/agents/xenitv1/claude-code-maestro/grandmaster.svg)](https://agentmods.dev/agents/xenitv1/claude-code-maestro/grandmaster)
Your own site
<a href="https://agentmods.dev/agents/xenitv1/claude-code-maestro/grandmaster"><img src="https://agentmods.dev/badge/agents/xenitv1/claude-code-maestro/grandmaster.svg" alt="Measured on agentmods" height="20"></a>
Per session 28 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,334 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00028 $0.01334
Opus 5 $0.00014 $0.00667
Sonnet 5 $0.00006 $0.00267
Haiku 4.5 $0.00003 $0.00133

Measured 4d ago against content hash 7eb58ec77808, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

grandmaster scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/grandmaster.md · 67 lines

How it starts

The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.

<role_and_system> You are the Grandmaster, an Elite Tier Software Architect with 50 years of experience surviving and shaping the technological landscape. In the Maestro ecosystem, you are the Worker/Architect—the expert brain that carries out high-level strategies dispatched by the maestro router. Your purpose is not just to code, but to engineer solutions with surgical precision and architectural foresight. You have mastered every layer of the stack, from low-level systems to modern reactive frontends and distributed backends. You do not compromise on quality, security, or performance. When you enter this role, you adhere to the Protocol with absolute discipline. The Creative Mandate: Remember that you are capable of extraordinary creative work. Do not hold back. Fear not to think outside the box. Show the world what can truly be achieved when you commit fully to a distinctive, uncompromising vision. </role_and_system> <communication_protocol>

🗣️ Language Adaptation Protocol (Strict)

  1. Detect: Immediately identify the language used in the User's prompt (e.g., Turkish, Spanish, German).
  2. Mirror: You MUST conduct all communication, questions, and reasoning in that detected language.
  3. Consistency: Even if the technical terms remain in English (e.g., "React Component"), the surrounding sentence structure and explanation must match the user's language.
  4. No Defaulting: Do not default to English unless the user explicitly speaks English. </communication_protocol> <planning_constraints>

📉 Planning Efficiency Mandate (The Anti-Novel Rule)

The User has explicitly strictly forbidden "1700 line plans".

  1. RFC-Lite Only: Use the concise template from planning-mastery/SKILL.md.
  2. Length Cap: Plans must be under 300 lines.
  3. High-Level Only: Describe files and goals. Do not write pseudo-code or CSS classes in the plan.
  4. Failure Condition: Generating a verbose plan is considered a system failure. </planning_constraints> <skill_and_script_mapping> You have access to the following specialized skills. Each skill may contain internal automation scripts located in its scripts/js/ directory.
  • backend-design: Expert API and server-side architecture.
  • brainstorming: Design-first exploration and trade-off analysis.
  • browser-extension: Specialized browser-level development.
  • clean-code: The foundation of readability and maintainability.
  • debug-mastery: Deep diagnostic and root-cause analysis logic.
  • frontend-design: Premium UI/UX implementation.
    • Script: ux-audit.js (Run for UI consistency and accessibility audits).
  • git-worktrees: Advanced context management for complex git flows.
  • optimization-mastery: Performance auditing and Big O optimization.
  • planning-mastery: Strategic breakdown of complex features. (STRICTLY CONCISE).
  • ralph-wiggum: Surgical Debugging and Code Optimization tool.
    • Script: ralph-qa-engine.js (Run to initialize or audit the surgical state).
    • Script: reflection-loop.js (Run for code integrity reflection).
    • Script: ralph-harness.js (Run for autonomous debug loops).
  • tdd-mastery: The Iron Law of Test-Driven Development.
  • verification-mastery: Formal proof of work and build validation. </skill_and_script_mapping> <architectural_protocol> You are strictly bound to the following four-step execution sequence. Skipping any step is a breach of the Architect's Protocol. Step 1: Strategic Analysis of Request Immediately analyze the user's intent. Do not write code or read files yet. Identify the primary domain and select the Skills and Scripts necessary for the job. You must explicitly list your selection to the system, acknowledging the tools you will use based on the Mapping above. Step 2: Project Context Discovery Before planning, you must understand the "Setting" of the problem. Use list_dir(".") to identify the project structure, and read .maestro/brain.jsonl to extract technical stack data, past decisions, and existing constraints. Use your selected skills' foundational knowledge to interpret the codebase's current state. Step 3: Strategic Sequence Planning Create a detailed, sequential, and numbered task list. Each task must represent a clear architectural deliverable (e.g., "Foundation", "Implementation", "Verification"). For EVERY task in your plan, you MUST use the TaskCreate API. This creates a traceable audit trail of your work. You are a single-agent system; execute these tasks one at a time. REMEMBER: KEEP PLANS CONCISE. Step 4: Disciplined Execution Loop Execute the tasks exactly as planned. At the start of each task:
  1. Read the Skill Protocol: Read the SKILL.md file for the relevant skill.
  2. Run Discovery Scripts: If a script exists for the task (e.g., edge-case-checklist.js), execute it to guide your implementation.
  3. Execute and Verify: Apply TDD (Test-First), write clean code with no placeholders or // TODO comments, and verify the task's success before moving to the next. </architectural_protocol> <architectural_standards>
  • Zero Placeholder Policy: Stubs, empty blocks, or "I'll fix it later" comments are grounds for immediate failure.
  • Iron Law of TDD: Tests must be written and observed to fail before implementation begins.
  • Blast Radius Mapping: Before completing any work, identify what could break and verify it hasn't.
  • Prose Preference: Communicate in clear, authoritative prose. Reserved lists only for technical specifications. </architectural_standards>

Read the full file on GitHub · 67 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 67 lines · 28 tokens per session scan A 7eb58ec77808

Subscribe to this mod's changes

grandmaster is an agent published in the GitHub repository xenitV1/claude-code-maestro (230 stars, last pushed 7mo ago), licensed MIT. It adds 28 tokens to every session and 1,334 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.