agent-protocol

agent-protocol is a skill for Claude Code, Codex from metraton/gaia. It costs 10 tokens per session (1,581 once invoked), scanned A, original, MIT.

A protocol for recording one structured contract for every agent turn: what was requested, found, changed, and how the turn ended. The contract is saved during the turn, while the final message only signals completion.

In plain words
What is it for?
Use it to adopt the correct handoff draft, update the turn's status and evidence, and finalize the contract when the work is complete.
Why use it?
It prevents a polished final message from hiding missing or unfinished work. The saved record is what the closing checks validate.

Skill for Claude CodeCodex

Part of the gaia plugin — 38 skills, 9 agents, 11 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/metraton/gaia/agent-protocol
Any agent
npx skills add metraton/gaia --skill agent-protocol
Clone the repo
git clone --depth 1 https://github.com/metraton/gaia

Made for: Claude Code, Codex.

Or install gaia, the plugin that ships this one along with the rest of its 38 skills, 9 agents, 11 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agent-protocol

README.md
[![agentmods](https://agentmods.dev/badge/skills/metraton/gaia/agent-protocol.svg)](https://agentmods.dev/skills/metraton/gaia/agent-protocol)
Your own site
<a href="https://agentmods.dev/skills/metraton/gaia/agent-protocol"><img src="https://agentmods.dev/badge/skills/metraton/gaia/agent-protocol.svg" alt="Measured on agentmods" height="20"></a>
Per session 10 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,581 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00010 $0.01581
Opus 5 $0.00005 $0.00790
Sonnet 5 $0.00002 $0.00316
Haiku 4.5 $0.00001 $0.00158

Measured 3d ago against content hash 816418462e8c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

agent-protocol scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/agent-protocol/SKILL.md · 58 lines

How it starts

The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent Protocol

Every agent turn writes one contract -- what it was asked, what it found, what it changed, how it ended -- during the turn, not composed at the close. The eleven principles run that arc, ground to close.

1. Your contract is the delivery; your final message is only the signal that the turn ended

The gate validates only your persisted contract: one found unfinalized -- or no row at all -- rejects the close however complete your message reads (_resolve_subagent_stop_gate_full). The message carries no copy.

2. You were born with a contract -- adopt it, do not create another

# Your Contract names it on a fresh dispatch, a # Contract Draft (resumed) block on a resumed one; your first gaia contract set/add/fill --draft-id <contract_id> adopts that draft, and every later call carries --draft-id too -- omitted, the CLI targets the most recently touched draft, which is not necessarily yours. Copy agent_id verbatim into agent_status.agent_id. AGENT_ID_FORMAT checks the identifier's shape, never its ownership, so a stray gaia contract init mints a rival identity the gate accepts while your real contract is reaped unfinalized; a bare init fits exactly one turn, the one that arrived with no contract block at all.

3. Ground yourself before acting

Ask what already governs this, in precedence: injected context -> memory, queryable past the sample you were sent -> the code, which outranks any description of it -> the skills -> outside. A skill the code refutes is outranked by it AND is itself a finding: name the skill and the contradicting symbol in open_gaps, or the drift outlives your turn to be rediscovered by the next agent that trusts it. A goal often carries a COORDINATE -- a contract id, a memory slug, a brief name -- and read-map.md, beside this file, is the verb that opens it. Announce no tool sequence and claim no reach in advance.

4. Local and reversible work just happens; what goes out into the world is asked once

Read the full file on GitHub · 58 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 58 lines · 10 tokens per session scan A 816418462e8c

Subscribe to this mod's changes

agent-protocol is a skill published in the GitHub repository metraton/gaia (3 stars, last pushed 6d ago), licensed MIT. It adds 10 tokens to every session and 1,581 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

review-team

6つの専門レビュアーロールを並列実行し、consensusLevel(複数ロールの合意度)と Tech Lead レポート(top3指摘・blindSpots・consensusSummary)で結果を統合する マルチエージェントレビュー entry skill。 Parallel multi-role review with consensus scoring (consensusLevel) and Tech Lead report. Use when a major release needs exhaustive multi-angle review, or when a single-perspective review…

s977043/river-review · 147 tokens

mode

Adopt the lead role for this session: plan work, delegate to executors via relay, review reports, never implement large work directly. Invoke with /relay:mode.

spacegrowth/claude-relay · 37 tokens

verify

Machine-check an executor's report against its staged reality — TL;DR block well-formed, claimed files actually staged, declared counts cross-checked — stamping MALFORMED / MISMATCH / INCONCLUSIVE / COUNTS-MATCH. Invoke with /relay:verify, or when asked "check that report", "did it really do what it says", "verify X's…

spacegrowth/claude-relay · 83 tokens

auto

Flip this lead session's autonomous posture: proceed by default on routine in-plan steps instead of asking, or go back to waiting. Invoke with /relay:auto, or when asked to "go autonomous", "stop asking me every time", "just proceed", "turn auto off", "what posture am I in".

spacegrowth/claude-relay · 65 tokens

handoff

Hand this lead session off to a fresh successor. Invoke with /relay:handoff, or when asked to "hand off", "hand this off to a new session", "start a successor lead".

spacegrowth/claude-relay · 44 tokens

grok-cli-runtime

Internal helper contract for calling the grok-companion runtime from Claude Code.

okisdev/claude-code-fusion · 19 tokens