Borrowing it
Nothing to install: this file belongs to aiblueprinthq/ai-blueprint. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/aiblueprinthq/ai-blueprint/main/.agents/skills/doctor/SKILL.mdgit clone --depth 1 https://github.com/aiblueprinthq/ai-blueprintWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor)<a href="https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor"><img src="https://agentmods.dev/badge/skills/aiblueprinthq/ai-blueprint/doctor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor"><img src="https://agentmods.dev/badge/skills/aiblueprinthq/ai-blueprint/doctor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 81 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Excessive Agency · line 174 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.03584 |
| Opus 5 | $0.00032 | $0.01792 |
| Sonnet 5 | $0.00013 | $0.00717 |
| Haiku 4.5 | $0.00006 | $0.00358 |
Grade A, and why
doctor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.
doctor - Blueprint health check
Context reuse: Reuse any required file already loaded in project instructions or the current session. Read it again only if absent, changed, or exact current bytes or line references are needed.
Where this sits in the workflow:
any time -> [doctor] -> reads setup + plans + workflow state + git
(diagnostic) prints health, warnings, and repair order
This skill answers one question: is this Blueprint project ready to use? It is
the diagnostic pass for setup drift, incomplete onboarding, missing files,
placeholder plans, stale generated context, Blueprint visibility, and confusing
workflow state. It never changes anything: no edits, no commits, no installs, no
builds, no branch changes. Its only repair is an approved reset of a malformed
generated blueprint/.state/run.json file.
Use /status when the user mainly wants progress and the next build action. Use
/doctor when the user wants to know whether the workflow itself is healthy.
Input
None. /doctor takes no argument.
What it checks
Gather these, then summarize. Do not dump file contents.
- Required Blueprint files
- Confirm
AGENTS.md,blueprint/,blueprint/project-plan.md,blueprint/build-plan.md, andblueprint/context/exist. - Confirm
blueprint/context/coding-standards.md,blueprint/context/ai-interaction.md,blueprint/context/current-feature.md, andblueprint/context/project-overview.mdexist. - Confirm
blueprint/history/features/andblueprint/history/fixes/exist. When the rollback skill is installed, also checkblueprint/history/rollbacks/. A missing rollback folder on a legacy installation is a warning, not a blocker;/completecreates it on the first rollback. - Check
blueprint/context/findings.md. Missing on a legacy installation is a warning, not a blocker;/auditand/completecreate it on first use. When present, confirm its entry headers still match### <id> [<severity>] <status> - <title>and warn on a malformed ledger. Report any P0 or P1 finding stillopenorfixedby ID, since it will block/complete. Never block on the ledger yourself. - Check
blueprint/context/review.md. Missing on a legacy installation is a warning, not a blocker;/audit independent currentand/completecreate it on first use. When present, validate the required request or receipt fields and report pending, changes-requested, malformed, or stale state. - If
.gitignoremarks Blueprint workflow files as local-only, still require the files to exist on disk. Ignored but present is healthy; ignored and missing means the local workflow needs to be restored. - Read
blueprint/config.jsonwhen present. Missing is healthy and means built-in defaults. When present, require a regular non-symbolic-link JSON file withschemaVersion: 1. Reject unknown keys and unsupported values. Report the effective workflow, git, verification, review execution, regular quality-gate, Continuous quality-gate, and Continuous Mode settings. Confirm each audit, independent-review, check, and try-guide gate uses its supported values. Independent review defaults towhen-sensitivefor both workflows; audit, check, and try guide default tomanual. Confirmreview.independentExecutionismanualorautomaticand defaults toautomatic. Do not claim automatic capability is available from installed project files alone. An invalid config is a setup blocker for mutating workflow skills because they must not guess which policy to follow.
- Confirm
- Tool adapters
- Read
blueprint/.state/manifest.jsonwhen present and report its exact logical adapters: Codex, Claude Code, GitHub Copilot, and OpenCode. - Confirm at least one compatible skill tree exists. Codex and GitHub Copilot
use
.agents/skills/. Claude Code uses.claude/skills/. OpenCode can use either tree. - If both skill trees are present, say that is healthy when the selected tools require both. Compare their skill folder names and warn about missing skills on either side.
- If OpenCode is selected, do not require
.opencode/skills/. If it contains duplicate Blueprint skills alongside.agents/skills/or.claude/skills/, warn that OpenCode discovers all of those locations and the duplicate tree should be reviewed. - If git shows changes under
.agents/skills/or.claude/skills/, check the matching adapter file too. Warn when workflow behavior was updated in one adapter but not the other. - Confirm each installed adapter tree contains
doctor/scripts/run-state.mjs. This managed helper validates and atomically writes dashboard activity. A missing helper needs a Blueprint update before tracked commands can record activity safely. - If only one tool is used, mention the unused adapter can be deleted. Do not treat extra adapters as an error.
- If
CLAUDE.mdexists and still starts with# Project Name, flag that/onboardprobably has not finished. - When Claude Code is installed, report its startup-context shape. Confirm
CLAUDE.mdimportsAGENTS.mdand lets skills load the overview, active spec, coding standards, and interaction guide on demand. If it directly imports any of those four context files, warn that this is the legacy always-loaded layout and give the exact direct import lines to remove. Count the imported files and their total byte size, plus the total byte size of project skill descriptions. Label these as file-size diagnostics, not token counts. Recommend Claude Code's/context allfor the live token breakdown.
- Read
- Commands and project setup
- Check whether root
README.mdis still the copied Blueprint workflow doc by looking for# AI Coding Blueprintor opening text that describes the Blueprint workflow instead of the app. If so, warn that/onboardshould replace it with a project README before publishing. - If
blueprint/README.mdclearly contains copied Blueprint workflow docs, report it as an obsolete installer artifact. Its absence is healthy. An unchanged managed copy can be removed by the updater; a modified copy needs user review. - Check whether
AGENTS.mdhas a## Commandssection with dev and build commands. - Report missing lint or test commands as informational unless the project has
real lint or test scripts elsewhere that are not reflected in
AGENTS.md. - If
package.jsonexists, compare its scripts againstAGENTS.mdat a high level. Do not require every script to be documented. - If
AGENTS.mddeclares aVerifycommand, confirm it resolves to real project commands in the expected order: typecheck, tests when configured, then build. Do not require checks the project does not have. - If
.github/workflows/verify.ymlexists, confirm it runs the exact documentedVerifycommand for pull requests and pushes to the default branch, uses the detected runtime and package manager, and starts with read-only contents permission. Preserve other workflows and report overlap for review. - A missing
Verifycommand or GitHub workflow is informational. It means the optional automatic-check setup was not selected, not that the Blueprint is unhealthy.
- Check whether root
- Ignore rules
- Check obvious ignore patterns for the detected stack. For Node or Astro,
look for
node_modules,.env,dist, and framework cache folders such as.astroor.nextwhen relevant. - Detect local-only Blueprint mode if
.gitignoreignores.agents/,.claude/,blueprint/, orCLAUDE.md. Report it as a visibility choice, not a failure, when the local files exist. - In local-only mode, check whether tracked
AGENTS.mdstill describes the Blueprint workflow, lists hidden adapter paths, or exposes the core skill list. If so, warn that/onboardshould makeAGENTS.mdpublic-safe. - If local-only mode is active but those paths are already tracked by git,
warn that
.gitignoredoes not hide tracked files and the user must approve anygit rm --cachedcleanup separately. - Keep this conservative. If uncertain, report "review" instead of failure.
- Check obvious ignore patterns for the detected stack. For Node or Astro,
look for
- Planning readiness
- Check whether
blueprint/project-plan.mdandblueprint/build-plan.mdlook filled in or still template-like. Treat obvious TODO, TBD, example-only text, or empty required sections as not ready. - Check whether
blueprint/build-plan.mdis a numbered checkbox list. Raw bullets are allowed as a first draft, but they should be normalized by/overviewbefore the build loop starts. - Count checked and unchecked leaf items in
blueprint/build-plan.md.
- Check whether
- Overview freshness
- Check whether
blueprint/context/project-overview.mdexists and looks generated from the current plans. - Report its byte size. At or above 20,000 bytes, call it oversized and say
/featureshould stop until/overviewregenerates a compact consolidation. - If either planning file appears newer than the overview by filesystem time,
call the overview possibly stale and suggest
/overviewbefore feature work.
- Check whether
- Current workflow state
- Inspect
blueprint/.state/run.jsonwhen it exists. Missing means no recorded activity and is healthy. Require a regular non-symbolic-link JSON file that matches dashboard schema version 1 fromAGENTS.md. - If the path is a symbolic link or not a regular file, do not read, replace, or remove it. Report the exact path for manual review.
- If the regular file is invalid JSON or does not match the schema, report it as malformed generated state. Explain that resetting it removes only the dashboard's last-command record, not project work, and that the next tracked Blueprint command recreates it.
- Offer this exact repair question:
Reset the malformed dashboard state now?On approval, use the installed dashboard activity helper'sresetaction. It confirms the exact path is a regular non-symbolic-link file and removes onlyblueprint/.state/run.json. Verify the file is absent and report the dashboard state as reset. Never removeblueprint/.state/, its manifest, backups, or any project file. Without approval, leave it unchanged and include the reset inRepair order:. - Check whether
blueprint/context/current-feature.mdis the reset stub or an active feature, fix, or rollback spec. - If a spec is active, report checked and unchecked implementation steps.
- If
current-feature.mdis the reset stub but git has source or workflow changes, warn that work is happening without an active spec. - Flag active spec on
main, all spec steps checked but no completion, or a branch that does not match the configured feature, fix, or rollback prefix for the spec type. For a feature, also flag a mismatch with the next unchecked build-plan item. For a rollback, confirm its target is a checked item and do not compare it to the next unchecked item.
- Inspect
- Git
- Report current branch, clean vs dirty working tree, rough changed-file count, last commit subject, and whether the branch is ahead of upstream.
- If the directory is not a git repo, report that as a setup issue and keep going.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +4 lines 68130de1b28f
- 8d ago Changed · +51 lines · -19 tokens per session 642c97068ca8
- 13d ago First seen · 219 lines · 82 tokens per session scan A 64e7203cccba
doctor is a skill published in the GitHub repository aiblueprinthq/ai-blueprint (399 stars, last pushed today), licensed MIT. It adds 63 tokens to every session and 3,584 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systemic-issue-triage
Trigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.
triage-issue
Intelligently triage bug reports and error messages by searching for duplicates in Jira and offering to create new issues or add comments to existing ones. When an agent needs to: (1) Triage a bug report or error message, (2) Check if an issue is a duplicate, (3) Find similar past issues, (4) Create a new bug ticket…
bug-triage
Read all open bugs in production/qa/bugs/, re-evaluate priority vs. severity, assign to sprints, surface systemic trends, and produce a triage report. Run at sprint start or when the bug count grows enough to need re-prioritization.
investigation
Create an investigation ticket + live-doc for sustained root-cause work (retros, bug archaeology, regression hunts).
browse-flows
Browse Power Automate environments and flows interactively. Use when the user wants to browse, list, or explore their flows and environments.
operating-cadence
Designs the rhythm an organization runs on — which reviews happen weekly, monthly and quarterly, what each one decides, who owns the numbers presented, and how a signal at the front line reaches the people who can act on it. Use this to set up a management operating system, fix a meeting calendar that produces no…