mstar-roles

mstar-roles is a skill for Claude Code from btspoony/mstar-harness. It costs 219 tokens per session (2,706 once invoked), scanned A, original, MIT.

A role-management hub for Morning Star agents, which are predefined work roles with specific responsibilities and rules. It loads the selected role’s identity, restrictions, and task-specific skills in the required order.

In plain words
What is it for?
Use it when starting any Morning Star role to select the role, load its reference instructions, apply assignment-specific skills, and follow the shared workflow rules.
Why use it?
It keeps agents working within the right responsibilities and prevents role instructions from being loaded inconsistently.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the morning-star-harness plugin — 23 skills, 5 commands, 14 agents, 2 hooks shipped together

Good fit Use it when starting any Morning Star role to select the role, load its reference instructions, apply assignment-specific skills, and follow the shared workflow rules.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/btspoony/mstar-harness/mstar-roles
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add btspoony/mstar-harness --skill mstar-roles
Clone the repo
git clone --depth 1 https://github.com/btspoony/mstar-harness

Made for: Claude Code.

Or install morning-star-harness, the plugin that ships this one along with the rest of its 23 skills, 5 commands, 14 agents, 2 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mstar-roles

README.md
[![agentmods](https://agentmods.dev/badge/skills/btspoony/mstar-harness/mstar-roles/github.svg)](https://agentmods.dev/skills/btspoony/mstar-harness/mstar-roles)
Your own site
<a href="https://agentmods.dev/skills/btspoony/mstar-harness/mstar-roles"><img src="https://agentmods.dev/badge/skills/btspoony/mstar-harness/mstar-roles/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mstar-roles

Your own site · 80×15
<a href="https://agentmods.dev/skills/btspoony/mstar-harness/mstar-roles"><img src="https://agentmods.dev/badge/skills/btspoony/mstar-harness/mstar-roles.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 219 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,706 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00219 $0.02706
Opus 5 $0.00110 $0.01353
Sonnet 5 $0.00044 $0.00541
Haiku 4.5 $0.00022 $0.00271

Measured 2d ago against content hash ee2f2b9d03ba, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

mstar-roles scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/mstar-roles/SKILL.md · 106 lines

How it starts

The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Load Order

This hub is the single load-selection authority for Morning Star roles (Spec A2): mstar-harness-core stays the lifecycle/authorization semantic authority and the global entry whenever it is loaded, but this hub owns the selection decision — core does not maintain a second mandatory-role table. When a Morning Star role starts work in a session:

  1. Read this mstar-roles skill; resolve role mapping and parameter tables below. This bootstrap is the one exception to topic→core: it does not require mstar-harness-core first.
  2. Read the corresponding references/<role>.md file — identity-first: mission, scope, and NEVER rules come before any skill list. Non-PM roles also read the linked minimal leaf boundary (references/_shared/leaf-executor-core.md — role-owned, always loads with the reference).
  3. Apply the Assignment Skill presets: decision — explicit none ⇒ no optional topic preset (identity + assignment + role-owned methods only); omitted on a substantive implementation / QC / QA round ⇒ the role's standard preset; explicit named preset ⇒ that role's supported members; omitted on a trivial route ⇒ identity only. Role-owned QC/QA methods and assigned evidence obligations load regardless of preset. none never grants delegation and never waives gates. Unknown preset or missing required identity ⇒ return Needs Context / Blocked — never infer project-manager.
  4. Whenever mstar-harness-core is loaded by that decision (PM required reads, standard routes, direct topic invocation) it remains the global entry (state machine, gates, routing); if any conflict appears, mstar-harness-core remains the authoritative source for lifecycle, gates, routing, and invariants.
  5. Resume: retain loaded identity/contract only when the source hashes are unchanged; read changed / phase-required material; never reinterpret none as permission.
  6. Expand placeholders from role parameters before execution.

The table below summarizes each role's preset menu; when a role file's preset section differs, follow the role file for that session.

Exception: project-manager is the core orchestrator and keeps required reading (not a preset, never preset-gated) — see references/project-manager.md.

Read the full file on GitHub · 106 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed · +2 lines · +37 tokens per session ee2f2b9d03ba
  2. 11d ago First seen · 104 lines · 182 tokens per session scan A f453b78d1de0

Subscribe to this mod's changes

mstar-roles is a skill published in the GitHub repository btspoony/mstar-harness (58 stars, last pushed today), licensed MIT. It adds 219 tokens to every session and 2,706 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.