Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/notque/vexjoy-agent/github-profile-rulesgit clone --depth 1 https://github.com/notque/vexjoy-agentWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00529 |
| Opus 5 | $0.00000 | $0.00264 |
| Sonnet 5 | $0.00000 | $0.00106 |
| Haiku 4.5 | $0.00000 | $0.00053 |
Grade A, and why
github-profile-rules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub Profile Rules Pipeline
Domain
github-profile-rules — extract programming rules and coding conventions from a GitHub user's public profile via API.
Agent
github-profile-rules-engineer (new)
- Triggers: github rules, profile analysis, coding style extraction, github conventions, programming rules
- Category: meta
- Complexity: Medium
Skills
github-profile-rules (main orchestration)
- Triggers: github rules, profile analysis, coding style extraction, github conventions, programming rules extraction
- 7-phase pipeline: PROFILE SCAN -> CODE ANALYSIS -> REVIEW MINING -> PATTERN SYNTHESIS -> RULES GENERATION -> VALIDATION -> OUTPUT
- User-invocable: yes
Subdomain Skills
| Skill | Triggers | Task Type |
|---|---|---|
| github-profile-rules-repo-analysis | github repo analysis, code pattern extraction, api repo scanning | analysis |
| github-profile-rules-pr-review | pr review mining, review pattern analysis, developer preference extraction | analysis |
| github-profile-rules-synthesis | rules compilation, pattern deduplication, confidence scoring | analysis |
| github-profile-rules-validation | rules validation, contradiction detection, rule quality check | analysis |
Scripts
| Script | Purpose |
|---|---|
scripts/github-api-fetcher.py |
GitHub REST API client: repos, file contents, PR reviews |
scripts/rules-compiler.py |
Deduplication, confidence scoring, markdown/JSON formatting |
Reference Files
| File | Location |
|---|---|
rule-categories.md |
skills/workflow/references/github-profile-rules/references/ |
Component Graph
github-profile-rules-engineer (agent)
├── github-profile-rules (main skill)
│ ├── references/rule-categories.md
│ ├── invokes: scripts/github-api-fetcher.py
│ └── invokes: scripts/rules-compiler.py
├── github-profile-rules-repo-analysis (subdomain skill)
├── github-profile-rules-pr-review (subdomain skill)
├── github-profile-rules-synthesis (subdomain skill)
└── github-profile-rules-validation (subdomain skill)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 57 lines · 0 tokens per session scan A c23c452bd755
github-profile-rules is a command published in the GitHub repository notque/vexjoy-agent (417 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 529 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
test-tdd
Run when user calls /test-tdd. Scans modified files, locates their corresponding unit/integration test suites, and runs them.
workflow-foundation-to-design
Run the end-to-end Foundation Sprint + Design Sprint workflow with narrative handoff.
plan-workflow
Generate a skill chain plan for a high-level goal by analyzing the skills registry for input/output compatibility.
find
Search the 1ai-skills library for the skill matching the user's request.
brainstorm-divergent
Generate genuinely different ideas across the solution space, then converge on the strongest few.
overlay-sync
Scaffold/sync this project's overlay skills from .claude/apple-overlays.json, idempotently. Add --check for a no-write CI drift check.