Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Mun1to/VibesetWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/mun1to/vibeset/marketplace)<a href="https://agentmods.dev/plugins/mun1to/vibeset/marketplace"><img src="https://agentmods.dev/badge/plugins/mun1to/vibeset/marketplace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/mun1to/vibeset/marketplace"><img src="https://agentmods.dev/badge/plugins/mun1to/vibeset/marketplace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
vibeset marketplace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "vibeset",
"description": "Agent skills from Vibeset: instructions you hand your coding agent once and it knows for good.",
"owner": {
"name": "Mun1to"
},
"plugins": [
{
"name": "finito",
"source": {
"source": "url",
"url": "https://github.com/Mun1to/Finito.git"
},
"description": "Closes a working session with a summary you can read, a handoff block for compacting now and a resume block for coming back another day.",
"license": "MIT",
"author": {
"name": "Mun1to"
}
},
{
"name": "diretto",
"source": {
"source": "url",
"url": "https://github.com/Mun1to/Diretto.git"
},
"description": "Forces the agent to answer in numbered steps you can execute, with the exact command inside each step and no filler.",
"license": "MIT",
"author": {
"name": "Mun1to"
}
},
{
"name": "smart-defaults",
"source": {
"source": "url",
"url": "https://github.com/Mun1to/SmartDefaults.git"
},
"description": "Makes a website start in the visitor's own theme and language, with no flash and no forced redirects.",
"license": "MIT",
"author": {
"name": "Mun1to"
}
},
{
"name": "spanish-cave-man",
"source": {
"source": "url",
"url": "https://github.com/Mun1to/SpanishCaveMan.git"
},
"description": "Caveman-style token efficiency, spoken with a real Spanish regional accent: eleven dialects, two intensity levels.",
"license": "MIT",
"author": {
"name": "Mun1to"
}
},
{
"name": "siteindex",
"source": {
"source": "url",
"url": "https://github.com/Mun1to/SiteIndex.git"
},
"description": "Leaves a website ready to be found: robots.txt, sitemap, canonical, Open Graph, JSON-LD and the AI-crawler decision, ending in a measurement.",
"license": "MIT",
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +12 lines 9d0afba75624
- 1mo ago First seen · 94 lines scan A d14d50b5edf4
vibeset marketplace is a plugin published in the GitHub repository Mun1to/Vibeset (4 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
edulab
A collection of educational skills that turn school subject questions into interactive teaching webpages. It covers 3D geometry, analytic geometry, conic sections, and chemical reactions.
master-skill
A collection of Buddhist AI assistant skills based on Buddhist texts and commentaries, covering teachers and traditions from India, China, Tibet, and Theravāda Buddhism.
explainer-video
Short explainer videos made with ManimCE, narrated when the speech plugin is installed and silent otherwise. The produce skill plans the beats, writes one scene script whose scene changes follow the narration's word timings, renders at low quality first, muxes narration and captions with ffmpeg, and checks every…
hypha
Hypha is the AI agent of the Mycelium ecosystem: a connecting filament between engineers and the SysML v2 specification. Provides skills and subagents for KerML/SysML v2 metamodel lookup, standard model library lookup, normative spec citation, and SysML v2 textual-notation validation.
understanding
Understand a topic, a bug, or a Claude Code workflow: minimal explanations, root-cause diagnosis, execution traces.
maia-skill
Tododeia — Multi-agent investment analysis system for market research, portfolio recommendations, and interactive reporting across crypto, stocks, forex, and commodities.