Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Alex8791-cyber/cognithor --skill backupgit clone --depth 1 https://github.com/Alex8791-cyber/cognithorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alex8791-cyber/cognithor/backup)<a href="https://agentmods.dev/skills/alex8791-cyber/cognithor/backup"><img src="https://agentmods.dev/badge/skills/alex8791-cyber/cognithor/backup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/alex8791-cyber/cognithor/backup"><img src="https://agentmods.dev/badge/skills/alex8791-cyber/cognithor/backup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 30 Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.Fix: Limit tool chaining depth and validate the output of each tool before passing it to the next. Require explicit user approval for multi-step chains.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00484 |
| Opus 5 | $0.00026 | $0.00242 |
| Sonnet 5 | $0.00010 | $0.00097 |
| Haiku 4.5 | $0.00005 | $0.00048 |
Grade A, and why
backup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Backup
Automated backup skill that creates timestamped archives of Cognithor configuration, skills, and data on a cron schedule (0 * * * * — hourly by default).
Steps
- Check prerequisites — verify backup target exists and has write access:
BACKUP_DIR="${COGNITHOR_HOME:-$HOME/.cognithor}/backups" mkdir -p "$BACKUP_DIR" && test -w "$BACKUP_DIR" - Create timestamped archive of config, skills, and data:
STAMP=$(date +%Y%m%d_%H%M%S) tar czf "$BACKUP_DIR/cognithor_$STAMP.tar.gz" \ -C "${COGNITHOR_HOME:-$HOME/.cognithor}" \ config/ skills/ data/ - Validate integrity — verify the archive is readable:
tar tzf "$BACKUP_DIR/cognithor_$STAMP.tar.gz" > /dev/null - Prune old backups — keep the last 24 hourly snapshots:
ls -1t "$BACKUP_DIR"/cognithor_*.tar.gz | tail -n +25 | xargs rm -f - Return status — the skill returns
{"status": "ok", "automated": true}on success
Example
User > Starte ein Backup meiner Cognithor-Daten
Cognithor > Backup erstellt: cognithor_20260420_140000.tar.gz (12 MB)
Nächstes automatisches Backup: 15:00 Uhr
Error Handling
- Disk full: Log warning, skip archive creation, alert user to free space
- Permission denied: Verify
$BACKUP_DIRownership and retry with correct permissions - Corrupt archive: Re-run backup immediately; if persistent, check filesystem health
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 47 lines · 51 tokens per session scan A 02342e7a4d38
backup is a skill published in the GitHub repository Alex8791-cyber/cognithor (154 stars, last pushed 3d ago), licensed Apache-2.0. It adds 51 tokens to every session and 484 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
forkmind-archivist
Use when conversation context should be saved and then removed from the live model window — context is getting full, a sub-topic is finished, a large file dump or tool transcript is done being useful, or the user says "offload my context", "save this conversation and clear it", "archive this as a DAG", "restore that…
forkmind
Use when debugging, comparing, or regression-testing LLM / agent calls — when the user wants to capture LLM traffic, see a conversation as a branchable DAG, fork an alternative prompt or model from a past turn, or pin good outputs as baselines to catch drift. ForkMind is local-first (no cloud, no account) and proxies…
dws
A command-line guide for DingTalk, a workplace platform with chat, documents, calendars, approvals, tasks, and other business tools.
package-author
A packaging guide for turning scripts, skills, or an MCP service into a standard plugin package. MCP is a way for an AI assistant to connect to external tools.
notes
Skill "notes" from Pinvou/pinvou-agent, covering ima notes, operations, write rules, examples and response handling.
visual-design
A design skill for turning content into complete, self-contained HTML pages and visual materials such as websites, banners, posters, reports, resumes, and portfolios. It follows a defined visual design system and does not use outside images or code libraries.