Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/a7um/zero-review/auto-envnpx skills add A7um/zero-review --skill auto-envgit clone --depth 1 https://github.com/A7um/zero-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/a7um/zero-review/auto-env)<a href="https://agentmods.dev/skills/a7um/zero-review/auto-env"><img src="https://agentmods.dev/badge/skills/a7um/zero-review/auto-env.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00073 | $0.01723 |
| Opus 5 | $0.00036 | $0.00861 |
| Sonnet 5 | $0.00015 | $0.00345 |
| Haiku 4.5 | $0.00007 | $0.00172 |
Grade A, and why
auto-env scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Auto-env
Use this skill when you need to turn a repository into a usable development or verification environment. The primary output is an environment contract that tells a human or downstream agent how to run commands in the configured environment. Smoke testing is required evidence that the environment works, but end-to-end product testing is a downstream consumer of this skill rather than the skill's core job.
Operating Rules
- Start from the environment goal: what command, service, CLI, or workflow needs to run after setup.
- Read obvious setup surfaces before guessing: README, package manifests, lockfiles, Makefiles, language build files, Dockerfiles, compose files, and env templates.
- Discover environment variables quickly and narrowly. Prefer authoritative templates and docs over broad source greps.
- Prefer the minimal reproducible setup that leaves the repo usable for follow-up development. Do not over-provision services or delete build artifacts.
- Use Docker when isolation, reproducibility, or dependency setup matters. Use an existing user-provided environment when the user already gave one.
- Never claim the environment is ready without concrete smoke-test evidence from commands, logs, HTTP responses, screenshots, or generated artifacts.
- Always leave behind
environment.md,environment.json, andartifacts/command-log.txtin the output directory you create for the run.
Workflow
- Resolve the target repository. Default
repoto the current workspace when no path or URL is named. - Create an output directory, usually
.dev-output/auto-env/<repo>-<timestamp>/, with anartifacts/subdirectory. - Inspect setup surfaces in this order:
- README or setup docs
.env.example,.env.sample,.env.template, or similardocker-compose.yml,compose.yml, Dockerfiles, devcontainer files- package/build manifests such as
package.json,pyproject.toml,requirements.txt,Cargo.toml,go.mod,Makefile, orjustfile - targeted source/config search only when the above are insufficient
- Build an env-var inventory:
- Include required and optional variables that affect startup, external services, auth, providers, databases, or cloud resources.
- Exclude ordinary runtime/tooling variables such as
PATH,HOME,TERM,CI,DEBUG,NODE_ENV, and test-only variables unless the project explicitly requires them for startup. - If a required secret is missing, record it as a blocker or ask only for the minimal set needed for the requested environment goal.
- Choose the setup strategy:
- Existing Dockerfile or compose stack when it already models the app.
- Minimal base container when the repo has no usable Docker setup but isolation is valuable.
- Existing local shell only when the user requested local setup or the current host environment is the intended environment.
- Configure the environment:
- Install only needed system packages, language runtimes, and project dependencies.
- Build or prepare the project enough for development and smoke testing.
- Keep source,
.git, dependency caches, and build artifacts that make the environment useful.
- Define the run contract:
- Record workdir, command template, env vars, ports, services, and how to open a shell.
- If a Docker container or image was created, record its name and the exact
docker execordocker runcommand to reuse it. - If the project has a natural entrypoint, record the command that forwards user args to it.
- Smoke-test the environment using the smallest command that proves it works, such as CLI
--help, build/test startup, HTTP health check, or page load. - Fill the environment artifacts and summarize the readiness status from those artifacts.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 173 lines · 73 tokens per session scan A 57d701d2f453
auto-env is a skill published in the GitHub repository A7um/zero-review (45 stars, last pushed 2mo ago), licensed MIT. It adds 73 tokens to every session and 1,723 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.
chat-perf
Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…