Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add AdamBien/airails --skill concernsgit clone --depth 1 https://github.com/AdamBien/airailsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/adambien/airails/concerns)<a href="https://agentmods.dev/skills/adambien/airails/concerns"><img src="https://agentmods.dev/badge/skills/adambien/airails/concerns/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/adambien/airails/concerns"><img src="https://agentmods.dev/badge/skills/adambien/airails/concerns.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00183 | $0.01226 |
| Opus 5 | $0.00092 | $0.00613 |
| Sonnet 5 | $0.00037 | $0.00245 |
| Haiku 4.5 | $0.00018 | $0.00123 |
Grade A, and why
concerns scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.
One annotation, @Concern(KIND), records why a class or package exists when that reason is a
technical concern rather than the BC's responsibility. An import search says what a class
touches; the marker says what it is for. One search over the marker returns a complete,
intent-based surface — including members no import search finds (an in-process engine binding
is an external system without a single network import).
The Annotation
- one
Concern.javain the project root package — an application-wide vocabulary no BC owns @Documented,@Retention(SOURCE),@Target({TYPE, PACKAGE}), single elementKind value(), nestedenum Kind- SOURCE retention — every consumer (reader, agent, javadoc) reads source; the jar stays free of the metadata
- full template with both starter kinds: references/concern-template.md
Placement
- package-level (on
package-info.java) when the whole BC serves the concern — state it once, not on every class - type-level when members are scattered across BCs that serve something else
- never the same kind on both a package and a type inside it — one fact, one place
- a type may carry a kind its package does not declare
The Sole-Purpose Rule
- mark only what would not exist without the concern; litmus: "this class would not exist without ___"
- participation is not membership — a domain class emitting an event in passing, or an orchestrator triggering provider calls, is not marked
- each kind's doc comment states what does not qualify; the exclusions are where the marker earns its keep
Kind Admission
- keep the enum a small closed set (about five kinds); every added constant dilutes the others
- a kind that fits nearly every class carries no information — no
LOGGING - a concern is implemented by the application, not provided by the platform (Java SE, MicroProfile, Jakarta EE) — building on a platform API (JFR, OTEL) still counts as application-implemented; a feature the platform provides outright (container transactions, health machinery) does not
- corollary: do not duplicate a canonical stack marker —
@Transactional,@Liveness,@Retryalready say it; a second vocabulary for the same fact drifts - grep-findability does not disqualify a kind — naming the intent is worth it even when an import search finds the set
- heuristic: a kind usually names the essential implementation of a non-functional requirement — caching for performance, observability for diagnosability — significant, but not domain-related, and at least partially scattered across BCs; trace it to the requirement it implements; a candidate that is neither is a business component or noise, not a kind
- a kind whose membership must be argued case by case is a tagging system, not a classification — sharpen the definition or drop the kind
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +19 tokens per session 831153152333
- 5d ago First seen · 64 lines · 164 tokens per session scan A f32e95e9b974
concerns is a skill published in the GitHub repository AdamBien/airails (50 stars, last pushed 3d ago), licensed MIT. It adds 183 tokens to every session and 1,226 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
authoring-java-sdk-tasks
Writes Airflow task logic in Java, Kotlin, or any JVM language using the Airflow Java SDK. Use when the user wants to implement Airflow tasks in Java/JVM, asks about @Builder.Dag/@Builder.Task/@Builder.XCom, the Task/BundleBuilder interfaces, reading connections/variables/XComs from Java, the JSON-to-Java type…
configuring-airflow-language-sdks
Configures Airflow to run language SDK tasks (Java, Go, and future native SDKs) — register a coordinator, map a queue to it, ensure the runtime/artifact on workers, and tune coordinator options. Use when the user wants Airflow to route a queue to a native-language coordinator, asks about the [sdk]…
jackson-3-migration
Migrer Jackson 2.x til Jackson 3.x (tools.jackson) i Kotlin/Java-prosjekter — automatisert OpenRewrite-pass pluss manuell Kotlin-spesifikk opprydding og verifisering.
java-to-kotlin
Trinnvis Java-til-Kotlin-migrering med rammeverk-bevisste transformasjoner for Spring, Ktor og Nav-mønstre.
js-gof
Apply Gang of Four and related design patterns in JavaScript and TypeScript. Use when implementing creational, structural, or behavioral patterns, or when the user mentions factories, builder, prototype, flyweight, singleton, object pool, adapter, wrapper, decorator, proxy, bridge, composite, facade, chain of…
data-structures
Implements custom JavaScript data structures: queues, deques, stacks, linked lists, cons lists, circular buffers, unrolled lists, tries, heaps, graphs, LRU caches, CRDTs, pools, structs. Use when building or choosing non-native collections, optimizing enqueue/dequeue, designing persistent lists, or when the user asks…