Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/dbhq-uk/legwork-skill/agents-mdgit clone --depth 1 https://github.com/dbhq-uk/legwork-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/dbhq-uk/legwork-skill/agents-md)<a href="https://agentmods.dev/instructions/dbhq-uk/legwork-skill/agents-md"><img src="https://agentmods.dev/badge/instructions/dbhq-uk/legwork-skill/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01582 | $0.01582 |
| Opus 5 | $0.00791 | $0.00791 |
| Sonnet 5 | $0.00316 | $0.00316 |
| Haiku 4.5 | $0.00158 | $0.00158 |
Grade A, and why
legwork-skill AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 77 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Guidance for AI agents (and people) working in this repository.
What this is
Legwork - a decision-research skill for AI coding agents. It produces cited findings where every claim states how well it is supported, judges a source by whether it suits the claim it backs, and refuses to ship a finding it cannot support. It follows the Agent Skills layout (skills/<name>/SKILL.md) and ships as a Claude Code plugin.
Layout
.claude-plugin/plugin.json # plugin manifest
skills/legwork/SKILL.md # the skill (agent-facing instructions)
skills/legwork/scripts/ # python, standard library only
skills/legwork/reference/ # methodology (four phases), quality gates, subagent brief
skills/legwork/templates/ # brief + report
skills/legwork/tests/ # offline, no network
hooks/gate_on_stop.py # Stop hook - gates any report written in a session
evals/ # behaviour evals + the baseline protocol
install.sh / install-codex.sh # local symlink installers (Claude / Codex)
docs/design-notes.md # why the skill is shaped the way it is
Conventions
- Standard library only. No
requirements.txt, no virtualenv. This is load-bearing: it is what lets the same paths work across Claude, Codex and plugin installs. CI asserts it, so an added third-party import fails the build rather than quietly breaking the install story. - Python floor is 3.9. Every script carries
from __future__ import annotationsso PEP 604 syntax parses there. - SKILL.md references scripts via
${CLAUDE_SKILL_DIR}(the skill's own directory), which Claude Code substitutes for personal, project and plugin installs alike.install.shtherefore symlinks the whole skill directory into~/.claude/skills/with no rewrite.install-codex.shrewrites the variable, since Codex does not substitute it. - Bright Data is a fallback, never a requirement. Anything that assumes it is installed is a bug: the built-in
WebSearch/WebFetchare the primary providers and a run must complete without a CLI present. - Tests are hermetic - no network, ever. The gate makes no network calls at all.
- Corroboration must be counted on the layer the pipeline does not amplify. Gather deliberately fans out to find more sources per finding, so a source count measures our own effort. Independence groups reached from different search angles is the real signal. A change that makes corroboration rise with breadth has broken the check, whatever the tests say.
- The index is keyed on the folder, never the topic. Topics get reworded between runs; the folder is stamped once and never moves. Upserting on the folder is what makes a refresh update its row in place instead of leaving two rows competing to describe one report. For the same reason the index header is identified by position, not by a cell reading "Topic" - a run whose topic is worded like a column heading is still a run.
- A blank matrix cell is never acceptable.
[unknown]records that the question was asked and came back empty; a blank records nothing and reads as a confident "no". Table cells are not sentences, so no other layer of the gate can see inside them. - The platform is not the party.
party_oftreats multi-tenant hosts as what they are: two orgs on one code host are two voices, three unrelated papers on one preprint server are three, and evidence read from disk is always one. A change that makes tenancy raise corroboration for sources found down a single angle has broken the check -test_party_tenancy.pypins both directions. - A run that fails its gate is never filed.
finish.pygates before it writes to the index, because the index is what a later session trusts instead of searching again. Filing a failed run launders a conclusion the evidence does not support. - Prose is a cost, not a free win. The measured constraint on this skill is instruction density, not mechanism count: adherence collapses well before the number of rules legwork already carries, and the observed failure mode is an agent reporting compliance it did not achieve. Prefer moving a rule into the gate, a script or the hook over writing it down again. A change that adds standing procedure should say what it is buying and what it displaces.
- House style: British English, plain hyphens (no em or en dashes).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 77 lines · 1,582 tokens per session scan A b99fb74b8dce
legwork-skill AGENTS.md is an instructions file published in the GitHub repository dbhq-uk/legwork-skill (3 stars, last pushed 16d ago), licensed MIT. It adds 1,582 tokens to every session, about $0.0079 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
lastsearch CLAUDE.md
Claude Code instructions for LastSearch-HQ/lastsearch, covering claude.md — lastsearch, what this project is, monorepo structure, two-repo architecture and key commands.
wheeler CLAUDE.md
Claude Code instructions for maxwellsdm1867/wheeler, covering claude.md, what this codebase is, commands, remains supported for contributors without uv installed and or.
statewave-grounded-shop-assistant AGENTS.md
Instructions for smaramwbc/statewave-grounded-shop-assistant, covering agents.md — guide for contributors and coding agents, setup, build, test, layout, conventions and pull requests.
cite-citadel copilot-instructions.md
Instructions for MarkusNeusinger/cite-citadel, covering github copilot instructions — cite-citadel, what this is, commands, test corpora and self-verification (feedback loops).
youtube-mcp-server CLAUDE.md
Claude Code instructions for coyaSONG/youtube-mcp-server, covering claude.md, development commands, build and run commands, http transport migration and docker commands.
sourceright AGENTS.md
AGENTS.md instructions for edithatogo/sourceright, covering sourceright codex instructions, codev - ai agent instructions, project overview, available protocols and file resolution (how codev finds protocols and templates).