Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add eai-org/agent-toolkit --skill execute-plan-tasksgit clone --depth 1 https://github.com/eai-org/agent-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/eai-org/agent-toolkit/execute-plan-tasks)<a href="https://agentmods.dev/skills/eai-org/agent-toolkit/execute-plan-tasks"><img src="https://agentmods.dev/badge/skills/eai-org/agent-toolkit/execute-plan-tasks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/eai-org/agent-toolkit/execute-plan-tasks"><img src="https://agentmods.dev/badge/skills/eai-org/agent-toolkit/execute-plan-tasks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00020 | $0.02555 |
| Opus 5.5 | $0.00008 | $0.01022 |
| Sonnet 5.5 | $0.00004 | $0.00511 |
| Haiku 4.5 | $0.00002 | $0.00255 |
Grade A, and why
execute-plan-tasks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Execute plan tasks
One task per run — implement it, verify it, tick it, stop. The review between tasks is the point; never carry on into the next.
Invocation: /execute-plan-tasks <plan-path> [task-id]
Pick the task
Read the plan whole — summary, conventions and overrides, the steps the task cites, acceptance
criteria — then its ## Tasks section, and the decisions log beside it when it exists
(<id>-<slug>.DECISIONS.md, <id>-<slug> being the plan filename without .PLAN.md): a logged
deviation outranks the plan text it deviates from. Ambiguous or missing plan path → ask. Several
task sections → ask which one this run works from. No task section → stop and point at
/split-plan-tasks.
task-id given → that task; none → the first unticked one in order. A range or a whole group → run
its first task only, saying the rest need their own runs; a task already ticked → say so and ask
whether to redo it. Its dependencies — earlier tasks in its group, plus every task in each group its
Depends on line names — must be ticked; name any unticked dependency and ask before proceeding.
Done when the chosen task, its steps, its acceptance criteria, its dependency state and any logged deviation that touches it are stated.
Execute
- Scope is the task's steps, nothing else: no work belonging to a later task, no drive-by refactors. Work the plan calls for that no task covers → report it, don't absorb it.
- The plan's conventions and overrides bind every task, this one included.
- Never guess. What the code settles, settle by reading it; what it doesn't goes to the user as
one question carrying your recommendation, worded via
explain-in-simple-languagewhen available. Append each settled deviation from the plan, and its why, as one line to the decisions log beside the plan (<id>-<slug>.DECISIONS.md), creating it if absent. Only a deviation confined to the task's own steps and result (an equivalent call, a local adjustment, a corrected attempt departing from the plan text) takes this path; a shape-changing one goes to Stop to re-plan. Correcting your own implementation needs no question. - A copy is not exempt. A file the plan says to copy or mirror was written for its own runtime and tooling: check each setting fits this task's target before copying. A misfit is a deviation — settle and log it as above.
- Fail-first test — a step requiring its test to fail before the fix, however the plan words it: write the test, run it and see it fail on the bug (its assertion, or the error the bug raises; a broken import or fixture is no failure seen), only then write the fix; never skip the run because the fix looks obvious. Rework the test within the step until it fails that way; until it does, no fix is written, and a test that cannot be made to fail that way is blocked outright (below). Once the fix is in, rerun the same test and see it pass.
- Blocked outright — a step the codebase contradicts, an unmet prerequisite — → stop, leave the task unticked, report what blocks it; leave the edits made so far in place and list them with the blocker, never revert on your own.
- Stop to re-plan (section below) at the task's second failed attempt, or before applying a
workaround that would change its shape:
- A failed attempt is the approach the task's steps prescribe, or a corrected version of it, falling short of the step's result, the task's Done when check or the project's validation for a reason rooted in the approach. The first never stops the run: make one corrected attempt. Not counted: a slip fixed in passing (typo, missing import, lint or format nit, wrong path corrected on sight), or a failure Verify reports as predating the task or outside its scope. One count for the whole task, Execute and Verify alike, within this run only — a later run starts from zero.
- A workaround changes the task's shape when it would deliver other than its steps describe, add files, areas or behaviour they don't name, change an interface or behaviour later tasks or the plan's acceptance criteria rely on, or abandon the approach the plan prescribes for the task. Stop as soon as one proves needed, whatever the count.
- A step the codebase contradicts or an unmet prerequisite stays blocked outright, even when a shape-changing workaround could get round it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +70 lines 50d511b8607e
- 6d ago Changed · +7 lines 0bb2e3a77bb9
- 13d ago Changed · -10 lines e2d93f21d034
- 15d ago Changed · +12 lines 0fbb143843a5
- 16d ago Changed · +15 lines · -12 tokens per session 389272714865
- 1mo ago Changed 679288e59a0f
- 2mo ago First seen · 91 lines · 32 tokens per session scan A af21aeeacc72
execute-plan-tasks is a skill published in the GitHub repository eai-org/agent-toolkit (82 stars, last pushed 3d ago), licensed MIT. It adds 20 tokens to every session and 2,555 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
execute-plan-tasks compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| execute-plan-taskseai-org/agent-toolkit | Skill | 82 | 3d ago | MIT | A | 20 | Claude Code |
| lab-hardware-cadK-Dense-AI/scientific-agent-skills | Skill | 56k | 4d ago | MIT | A | 108 | Claude Code |
| opentrons-integrationK-Dense-AI/scientific-agent-skills | Skill | 56k | 4d ago | MIT | A | 83 | Claude Code |
| pylabrobotK-Dense-AI/scientific-agent-skills | Skill | 56k | 4d ago | MIT | A | 49 | Claude Code |
| pybammK-Dense-AI/scientific-agent-skills | Skill | 56k | 4d ago | MIT | A | 70 | Claude Code, Codex |
| offensive-wifiSnailSploit/Claude-Red | Skill | 10k | 25d ago | MIT | A | 183 | Claude Code, Codex |
| offensive-wifi-reconSnailSploit/Claude-Red | Skill | 10k | 25d ago | MIT | A | 130 | Claude Code, Codex |