Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/alanvaa06/forge-master/forge-runnpx skills add alanvaa06/forge-master --skill forge-rungit clone --depth 1 https://github.com/alanvaa06/forge-masterWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00106 | $0.03813 |
| Opus 5 | $0.00053 | $0.01906 |
| Sonnet 5 | $0.00021 | $0.00763 |
| Haiku 4.5 | $0.00011 | $0.00381 |
Grade A, and why
run scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
run — forge-master Master Loop
You are the orchestrator. You ORCHESTRATE and VERIFY. You implement ONLY light phases inline (inline execution — cheap, no dispatch overhead); heavy implementation ALWAYS lives in disposable phase subagents (subagent-driven development). Live state lives on disk, not in your context.
INIT
- Read the contract. Read
docs/forge/plans/plan-NNN.md(ask which N if more than one and ambiguous) for the phases and Run Config — you needbranchandisolationbefore touching disk. (On a worktree resume the plan may live only on the run branch; if it isn't in the current dir, the worktree list in step 2 leads you to it.) - Establish the run root (Run Config
isolation). This decides WHERE every later step reads and writes — do it before the scaffold, resume, and harness checks.worktree(default): the run gets its own git worktree, so the primary dir — the user's editor and any other session — keeps its branch untouched. In-place checkout only looks isolated; a worktree is what makes "the user keeps working on their branch" actually true.- Resume first: run
git worktree list. If../<repo-dirname>-forge-NNN(branchforge/NNN-<slug>) already exists, that IS the run root — cd in, do not recreate. - Fresh run:
git worktree add ../<repo-dirname>-forge-NNN -b forge/NNN-<slug>from the current HEAD, then cd in. Quote paths on Windows; the sibling layout keeps the worktree outside the repo root and any watcher scope. If the approved plan / spec / PRD or thedocs/context/scaffold are not yet committed on this branch, write the content you read in step 1 into the worktree and commit it as the run's seed commit — the contract must live on the run branch.
- Resume first: run
in-place:git checkout -b forge/NNN-<slug>in the current dir. This moves the shared working dir onto the run branch, so any concurrent session or open editor collides. Use ONLY when this is the sole session on the repo; ifgit worktree listor recent commits on another branch suggest other live work, warn the user and switch toworktree.- From here, the run root = wherever you just landed. Every read, write, commit, and phase worktree below happens there.
- Scaffold check. In the run root, verify
docs/context/exists. If missing, run the user'sscaffoldskill first, then continue. - Resume detection. In the run root, run
node <skill-dir>/scripts/forge-state.mjs seed docs/forge/plans/plan-NNN.md— idempotent: it seeds one[pending]entry per phase, or reportsresume: truewhen this plan's entries already exist (you are RESUMING;nextpicks up at the first executable phase). Then readdocs/context/lessons.md. Fallback — node missing, ortodo.mdholds this plan's entries in a pre-script format — do the same by hand per the State discipline rules. - Test harness check: detect the repo's test framework. If none exists, insert an implicit phase P0: setup test harness and run it first — nothing can be verified without a runner.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 125 lines · 106 tokens per session scan A d602907f9781
run is a skill published in the GitHub repository alanvaa06/forge-master (1 stars, last pushed 1mo ago), licensed MIT. It adds 106 tokens to every session and 3,813 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
goal-flight
Portable Goal Flight workflow for long-running repo work: planning, dispatch, review, recovery, file-backed resume.
gossipcat
Use when installing or setting up gossipcat multi-agent orchestration (parallel review, consensus, adaptive dispatch) in Claude Code or Cursor. Installs the gossipcat MCP server and hands off to gossipstatus() for all live rules.
code-review
Orchestrates code review by detecting the project language and architecture, then routing to the appropriate specialized review skill (code-review-go, code-review-typescript, code-review-python, code-review-php, code-review-architecture). Falls back to the generic checklist when no specific skill applies. Invoked when…
new-gh-issue-orchestration
Orchestrates a GitHub-issue-driven delivery workflow from issue intake to PR creation using reviewer-first then worker execution. Invoked when the user provides a GitHub issue link/number and asks to start end-to-end delivery.
surge
Use when a user provides a PRD, spec, or detailed requirements document and needs a full project delivered through iterative expert orchestration — multi-round analyze/research/design/implement/QA cycles with convergence detection. NOT for: single-file edits, quick prototypes, simple Q&A, or tasks without a written…
agentic-infrastructure-2026
Build and adopt production AI agent infrastructure in 2026. Covers framework selection (LangGraph, CrewAI, AutoGen, MCP), orchestration patterns, evaluation, observability, memory systems, and tool use. Also covers the SOCIAL dimension: how to sell agent infrastructure internally, change management, measuring ROI…