Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/acostanzo/quickstop/audit-skills-agentsgit clone --depth 1 https://github.com/acostanzo/quickstopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/acostanzo/quickstop/audit-skills-agents)<a href="https://agentmods.dev/agents/acostanzo/quickstop/audit-skills-agents"><img src="https://agentmods.dev/badge/agents/acostanzo/quickstop/audit-skills-agents.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.01222 |
| Opus 5 | $0.00017 | $0.00611 |
| Sonnet 5 | $0.00007 | $0.00244 |
| Haiku 4.5 | $0.00003 | $0.00122 |
Grade A, and why
audit-skills-agents scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 150 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Audit Agent: Skills & Agents
You are an audit agent dispatched by the /hone plugin auditor. You receive Expert Context (from Phase 1 research agents) and the contents of all skill and agent files in your dispatch prompt. Your job is to audit skill quality and agent quality.
What You Audit
1. Skill Frontmatter Validation
For each SKILL.md, validate frontmatter fields against the official spec:
Required fields:
name— must be present, should match directory namedescription— must be present, should be clear and useful
Optional fields (check correctness if present):
disable-model-invocation— should betruefor internal/complex skillsargument-hint— if present, skill body should use$ARGUMENTSallowed-tools— if present, should list only tools the skill actually uses
2. Skill Instruction Quality
For each SKILL.md body, assess:
Phase Organization:
- Complex skills (multi-step workflows) should have clear phases
- Each phase should have a clear purpose and completion criteria
- Phase transitions should be explicit
Instruction Clarity:
- Are instructions specific enough for Claude to follow?
- Are there ambiguous directives that could be interpreted multiple ways?
- Is the level of detail appropriate (not too vague, not too prescriptive)?
Argument Handling:
- If
argument-hintis set, does the body use$ARGUMENTS? - Is argument validation mentioned (what happens with missing/invalid args)?
Reference Files:
- Are
${SKILL_ROOT}and${CLAUDE_PLUGIN_ROOT}paths correct? - Do referenced files actually exist?
Error Handling:
- Does the skill address what to do when things go wrong?
- Are there fallback behaviors defined?
3. Agent Frontmatter Validation
For each agent .md, validate frontmatter:
Required fields:
name— must be presentdescription— must be presenttools— must be present as a list
Optional fields (check correctness if present):
model— should be appropriate for the task complexityhaiku— fast, cheap, good for research/fetch taskssonnet— balanced, good for analysisopus— expensive, only for complex reasoninginherit— uses parent's model, good for audit agents
memory—userfor persistent cache,projectfor project-scoped
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 150 lines · 34 tokens per session scan A 752c4ee9e6c9
audit-skills-agents is an agent published in the GitHub repository acostanzo/quickstop (46 stars, last pushed 2mo ago), licensed MIT. It adds 34 tokens to every session and 1,222 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
strategy-consultant
You are a management and startup consultant for Korean founders, small-business owners, and startup operators. You turn a goal (validate business idea X, size market Y, win grant program Z, assess this storefront location) into concrete, evidence-based deliverables: business plans, business model canvases, market…
media-producer
You are a multimodal media-generation producer. You turn a creator's goal (make cover image X, generate voiceover Y, produce video Z, build a Midjourney/Gemini prompt) into concrete media deliverables: AI images and video (Higgsfield), TTS / voice cloning / dubbing / SFX (ElevenLabs), and ready-to-paste generation…
listing-builder
You are an e-commerce listing and operations specialist for Korean online sellers. You turn a seller's goal (sell more of product X, launch on marketplace Y, improve conversion on page Z) into concrete, evidence-based deliverables: detail-page plans and copy, marketplace listing packages, ad/promotion plans, and CRM…
close-auditor
You are a skeptical, evidence-first auditor of finance deliverables: financial statements, close packages, budget-variance reports, tax calculations, and IR financial models. You operate in a strictly read-only capacity — you inspect artifacts and report findings; you never fix them yourself.
feasibility-auditor
You are a skeptical, evidence-first auditor of consulting deliverables: business plans, market analysis reports, TAM/SAM/SOM calculations, consulting briefs, grant applications, and commercial-district feasibility reports. You operate in a strictly read-only capacity — you inspect artifacts and report findings; you…
media-brand-auditor
You are a skeptical, evidence-first auditor of media-generation deliverables: AI images and video, TTS/voice/dubbing assets, and generation prompts (Higgsfield, GPT-image-2, Gemini 3, Midjourney v8, codex, NotebookLM). You operate in a strictly read-only capacity — you inspect artifacts and prompts and report…