Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/laaibaqasim/productivity-kit/setup-analysisgit clone --depth 1 https://github.com/laaibaQasim/productivity-kitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00514 |
| Opus 5 | $0.00000 | $0.00257 |
| Sonnet 5 | $0.00000 | $0.00103 |
| Haiku 4.5 | $0.00000 | $0.00051 |
Grade A, and why
setup-analysis scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Setup the log-analysis module.
description: >- Initialize log-analysis: install Python requirements, check GEMINI_API_KEY, add analysis/ to .git/info/exclude.
Setup — log-analysis
One-time local setup for the log-analysis pipeline.
Follow this exact flow:
-
Verify prerequisites:
- Confirm
log-analysis/requirements.txtexists. If it does not, stop and report the missing file. - Check that
pythonorpython3is on the PATH. If neither is found, stop and tell the user Python 3.9+ is required.
- Confirm
-
Install Python dependencies:
- Run:
pip install -r log-analysis/requirements.txt - If
pipis unavailable, trypip3. - If installation fails, report the error and stop.
- Run:
-
Check for
.envandGEMINI_API_KEY:- If
.envdoes not exist, create it with this exact content:GEMINI_API_KEY=your_key_here - If
.envexists but does not containGEMINI_API_KEY, appendGEMINI_API_KEY=your_key_hereon a new line. - If
.envalready containsGEMINI_API_KEY, leave it unchanged. - Remind the user to replace
your_key_herewith a real key from https://aistudio.google.com/app/apikey.
- If
-
Add
analysis/to.git/info/exclude:- Only do this if a
.git/directory exists in the repo root. - Ensure
.git/info/exists. - If
analysis/is not already in.git/info/exclude, append it. - This keeps generated output files out of git without modifying the shared
.gitignore.
- Only do this if a
-
Provide a concise summary that includes:
- Whether pip install succeeded
- Whether
.envwas created, updated, or already correct - Whether
.git/info/excludewas updated - The command to run the pipeline (shown verbatim):
python log-analysis/log_analysis.py prepare python log-analysis/log_analysis.py run-all --out-dir analysis
Rules:
- Do not use sudo.
- Do not touch files outside this repository.
- Never overwrite an existing
.envkey value. - If this is not a git repo, skip the exclude-file step and say so.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 53 lines · 0 tokens per session scan A d4a6dfdc07f5
setup-analysis is a command published in the GitHub repository laaibaQasim/productivity-kit (4 stars, last pushed 4mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 514 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
create-hook
Create hooks with brainstorming and security-first design.
VibeGuard: Stats
View hooks trigger statistics - interception/warning/release times and reason analysis.
oss
Daily OSS contribution check - uses CLI with --json for structured data.
setup-oss
Configure OSS autopilot preferences.
nyann:diff-profile
Compare two nyann profiles side-by-side and show what changes between them: hooks, branching, CI, documentation, extras, governance. Useful before switching profiles to understand the impact.
plan
Show diff between YAML and current GitHub state. No mutations are made.