Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/metraton/gaia/agent-protocolnpx skills add metraton/gaia --skill agent-protocolgit clone --depth 1 https://github.com/metraton/gaiaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/metraton/gaia/agent-protocol)<a href="https://agentmods.dev/skills/metraton/gaia/agent-protocol"><img src="https://agentmods.dev/badge/skills/metraton/gaia/agent-protocol.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00010 | $0.01581 |
| Opus 5 | $0.00005 | $0.00790 |
| Sonnet 5 | $0.00002 | $0.00316 |
| Haiku 4.5 | $0.00001 | $0.00158 |
Grade A, and why
agent-protocol scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Protocol
Every agent turn writes one contract -- what it was asked, what it found, what it changed, how it ended -- during the turn, not composed at the close. The eleven principles run that arc, ground to close.
1. Your contract is the delivery; your final message is only the signal that the turn ended
The gate validates only your persisted contract: one found unfinalized -- or no row at all -- rejects the close however complete your message reads (_resolve_subagent_stop_gate_full). The message carries no copy.
2. You were born with a contract -- adopt it, do not create another
# Your Contract names it on a fresh dispatch, a # Contract Draft (resumed) block on a resumed one; your first gaia contract set/add/fill --draft-id <contract_id> adopts that draft, and every later call carries --draft-id too -- omitted, the CLI targets the most recently touched draft, which is not necessarily yours. Copy agent_id verbatim into agent_status.agent_id. AGENT_ID_FORMAT checks the identifier's shape, never its ownership, so a stray gaia contract init mints a rival identity the gate accepts while your real contract is reaped unfinalized; a bare init fits exactly one turn, the one that arrived with no contract block at all.
3. Ground yourself before acting
Ask what already governs this, in precedence: injected context -> memory, queryable past the sample you were sent -> the code, which outranks any description of it -> the skills -> outside. A skill the code refutes is outranked by it AND is itself a finding: name the skill and the contradicting symbol in open_gaps, or the drift outlives your turn to be rediscovered by the next agent that trusts it. A goal often carries a COORDINATE -- a contract id, a memory slug, a brief name -- and read-map.md, beside this file, is the verb that opens it. Announce no tool sequence and claim no reach in advance.
4. Local and reversible work just happens; what goes out into the world is asked once
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 58 lines · 10 tokens per session scan A 816418462e8c
agent-protocol is a skill published in the GitHub repository metraton/gaia (3 stars, last pushed 6d ago), licensed MIT. It adds 10 tokens to every session and 1,581 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
review-team
6つの専門レビュアーロールを並列実行し、consensusLevel(複数ロールの合意度)と Tech Lead レポート(top3指摘・blindSpots・consensusSummary)で結果を統合する マルチエージェントレビュー entry skill。 Parallel multi-role review with consensus scoring (consensusLevel) and Tech Lead report. Use when a major release needs exhaustive multi-angle review, or when a single-perspective review…
mode
Adopt the lead role for this session: plan work, delegate to executors via relay, review reports, never implement large work directly. Invoke with /relay:mode.
verify
Machine-check an executor's report against its staged reality — TL;DR block well-formed, claimed files actually staged, declared counts cross-checked — stamping MALFORMED / MISMATCH / INCONCLUSIVE / COUNTS-MATCH. Invoke with /relay:verify, or when asked "check that report", "did it really do what it says", "verify X's…
auto
Flip this lead session's autonomous posture: proceed by default on routine in-plan steps instead of asking, or go back to waiting. Invoke with /relay:auto, or when asked to "go autonomous", "stop asking me every time", "just proceed", "turn auto off", "what posture am I in".
handoff
Hand this lead session off to a fresh successor. Invoke with /relay:handoff, or when asked to "hand off", "hand this off to a new session", "start a successor lead".
grok-cli-runtime
Internal helper contract for calling the grok-companion runtime from Claude Code.