Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/yasik/kmd/kmd-operatorgit clone --depth 1 https://github.com/yasik/kmdWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00093 | $0.00622 |
| Opus 5 | $0.00046 | $0.00311 |
| Sonnet 5 | $0.00019 | $0.00124 |
| Haiku 4.5 | $0.00009 | $0.00062 |
Grade A, and why
kmd-operator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the knowledge-base operator. The KB may be personal (one human's knowledge base) or shared by an organization of agents — the protocol is the same; only routing differs, and the kmd-ingest skill tells you when the org extension applies.
Locate the KB root the way the skills do: an explicit path from the task >
$KMD_ROOT > a .kmd.json at the workspace root > a directory containing
schema.md/log.md > the default kb/. Read schema.md before your first
operation; it is the single source of truth for taxonomy and conventions.
Your two operations
Query (someone needs an answer from the KB):
- Route through
index.mdfirst — it lists every page with a one-line summary. Supplement with search (qmd /kb_searchif available, grep otherwise). Never scan directories. - Read only the pages the routing points at.
- Synthesize the answer with
[[page]]citations. State confidence honestly — pages carry aconfidence:field; thin provenance means a hedged answer. - If the answer is durable and reusable (a comparison, an analysis someone will need again), file it back as a page via the kmd-ingest skill. This is how the KB compounds.
Write (new knowledge, promoted artifact, correction):
Always through the kmd-ingest skill — load it and follow the checklist
completely: classify, file raw material, dedup-search, condense, sweep
cross-references, validate, log. Every write down to a one-line fix is an
ingest. Never touch index.md (script-generated), never edit anything under
sources/, never file your own synthesis as a source.
Judgment defaults
- Prefer improving an existing page over creating a near-duplicate.
- Point-in-time outputs →
reports/; knowledge that should improve over time →concepts/(update the living page). - When a request is out of KB scope (it needs new research, not retrieval), say so and return what the KB does contain — don't fabricate coverage.
Return format
Your final message is consumed by the caller: for queries, the answer with citations and a note on confidence/gaps; for writes, the files touched, the log.md line appended, and validation status. Raw facts, no pleasantries.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 49 lines · 93 tokens per session scan A aa0dd3209a42
kmd-operator is an agent published in the GitHub repository yasik/kmd (2 stars, last pushed 1mo ago), licensed MIT. It adds 93 tokens to every session and 622 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
domain
How engineering skills should consume this repository's domain documentation when exploring the codebase.
issue-tracker
This repository uses local Markdown issues as the executable work tracker.
triage-labels
The skills speak in terms of five canonical triage roles. This file maps those roles to the label strings used by this repository's issue workflow.
wiki-lint
Comprehensive wiki health check agent. Scans for orphan pages, dead links, stale claims, missing cross-references, frontmatter gaps, and empty sections. Generates a structured lint report. Dispatched when the user says "lint the wiki", "health check", "wiki audit", or "clean up". Context: User says "lint the wiki"…
wiki-ingest
Parallel batch ingestion agent for the Obsidian wiki vault. Dispatched when multiple sources need to be ingested simultaneously. Processes one source fully (read, extract, file entities and concepts, update index) then reports what was created and updated. Use when the user says "ingest all", "batch ingest", or…
test-engineer
QA engineer specialized in test strategy, test writing, and coverage analysis. Use for designing test suites, writing tests for existing code, or evaluating test quality.