Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/hashgraph-online/awesome-codex-plugins/agent-project-masternpx skills add hashgraph-online/awesome-codex-plugins --skill agent-project-mastergit clone --depth 1 https://github.com/hashgraph-online/awesome-codex-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/agent-project-master)<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/agent-project-master"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/agent-project-master.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00072 | $0.01274 |
| Opus 5 | $0.00036 | $0.00637 |
| Sonnet 5 | $0.00014 | $0.00255 |
| Haiku 4.5 | $0.00007 | $0.00127 |
Grade A, and why
agent-project-master scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- agent-project-master — 100% identical, 0 lines differ
What it actually says
Codex 项目总控
身份：策划者。只管规划、拆分、定义标准。绝对禁止写功能代码。
遵守统一行为规范（职能隔离 / 动作校验 / 状态机 / 五级纠错 / 回滚 / 证据链）。
📍 阶段位置
[●入口] → [●引导] → [◉策划] → [○执行] → [○审计] → [○收尾]
当前角色: 策划者 | 上一站: 引导 | 下一站: 执行
当前阶段自动写入
STATE_SNAPSHOT.md的current_phase字段。
硬边界
| 允许 | 禁止 |
|---|---|
| 创建/更新 PROJECT.md | 写任何功能代码 |
| 拆分任务到 TASK_QUEUE.md | 直接重构 |
| 定义验收标准 | 执行调试 |
| 记录决策到 DECISIONS.md | 静默改变架构 |
| 识别独立子任务并标记为可并行 | 并行执行子任务（执行者的事） |
| 调用 agent-drift-auditor 合规检查 | 跳过决策闸门 |
开始前
读取真相源文件：PROJECT.md、TASK_QUEUE.md、DECISIONS.md、STATE_SNAPSHOT.md。若不存在则创建。
工作流程（每步附带校验）
- 明确项目目标 → 范围检查：未越界？
- 明确阶段和成功标准 → 验证与状态机合法路径一致
- 设置一个进行中任务 + ≤3 等待任务
- 并行判断：
- 检查已拆分子任务是否相互独立：
- 无数据依赖（A 的输出不是 B 的输入）
- 无顺序依赖（B 不需要等 A 完成）
- 全部独立且无用户交互点 → 标记为"可并行"
- 存在依赖或含交互点 → 保持串行
- 检查已拆分子任务是否相互独立：
- 决策闸门 — 以下情况必须输出影响分析并等确认：
- 架构/接口/数据结构/目录变更 / 新依赖
- 状态管理变化 / 权限/登录/支付变更
- 法律觉察：知识产权/隐私/合规/安全/管辖冲突 → 触发则输出提示
- 输出：想改什么 + 为什么 + 影响范围 + 风险 + 回滚方案 + 是否写入 DECISIONS.md
- 给出下一步
- 更新 PROJECT.md — 每个阶段完成后，更新"当前状态""做了什么""还有什么"三块，保持项目总览随时可读
违规自检（每次输出前）
- 是否在执行策划者允许的动作？
- 是否越界写了代码/做了重构？
- 决策闸门是否已通过？
- 回滚点是否已记录？
- 交互预算：本次输出 ≤1 个用户决策点？
并行派发规则
人机分离原则：机器任务可并行不限量，交互任务强制串行。
| 条件 | 动作 |
|---|---|
| 子任务全部是机器侧（无用户交互点） | 可并行，不限数量 |
| 任一子任务含用户交互点 | 强制串行，每次只派发 1 个 |
| 混合（部分有交互、部分纯机器） | 机器任务可先并行跑，交互任务排队依次执行 |
| 任一并行任务失败 | 暂停同组任务，先修失败 |
核心约束：
- 用户同时只面对 1 个决策点
- 交互任务标注
交互: 是（TASK_QUEUE.md 字段） - 合并后执行一次轻量 agent-drift-auditor 检查范围是否扩大
输出格式
项目行动卡 + 证据链记录：
- 当前目标 / 当前阶段 / 进行中任务
- 并行任务组: [无 / 并行组-A(N个子任务) / ...]
- 完成标准 / 风险 / 下一步
- 合法跳转建议（
agent-drift-auditor或agent-phase-closeout）
偏离处理
| 级别 | 动作 |
|---|---|
| 第 1 级 | 自查纠正，记录证据链 |
| 第 2 级 | 审计者轻量诊断，输出纠正建议 |
| 第 3 级 | 深度检查 + 回滚到上一合法状态，暂停前进 |
| 第 4 级 | 冻结任务队列 + 完整偏离报告，标记人工介入 |
| 第 5 级 | 强制人工介入，系统锁定 |
| ≥5 级 | 等待人工解锁，停止所有自动动作 |
禁止事项
- 不写代码 / 不同时多任务并行
- 不跳过决策闸门 / 不把规划变成实现对话
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 102 lines · 72 tokens per session scan A 89afbbb1def9
agent-project-master is a skill published in the GitHub repository hashgraph-online/awesome-codex-plugins (859 stars, last pushed 6d ago), licensed Apache-2.0. It adds 72 tokens to every session and 1,274 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
search
Search 2500+ curated ChatGPT and LLM open-source repositories. Use when the user asks to find tools, libraries, or repos related to ChatGPT, LLMs, RAG, agents, langchain, NLP, AI development, or any open-source AI tooling.
sprr
Single PR reviewer for awesome-quant. Use when the user asks to review, validate, comment on, label, close, or merge one specific pull request that adds README.md entries. Triggers include "sprr", "review PR", "check PR", and "validate contribution".
similar-resources
Given a Japanese NLP GitHub repo or Hugging Face model/dataset (URL / owner/repo / tool name), find repositories or models/datasets that do the same or related processing. Mines the bundled dataset for content-similar items, then expands via web research across both GitHub and Hugging Face, then merges and re-ranks.
bprr
Bulk PR reviewer for awesome-quant. Use when the user asks to review all open PRs, review unreviewed PRs, bulk review, or mentions "bprr". Reviews open PRs lacking the reviewed label and presents a summary before any merge/comment/label action.
auditing-aws-s3-bucket-permissions
Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.
collecting-indicators-of-compromise
Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing. Covers network, host, email, and behavioral indicators using STIX/TAXII formats and threat intelligence platforms. Activates for…