token-master

token-master is a skill for Claude Code from All-The-Vibes/TokenMasterX. It costs 74 tokens per session (864 once invoked), scanned A, original, MIT.

A setup skill that builds a structural map of the current repository and routes code-relationship questions through it. The map records parts of the code and links such as function calls.

In plain words
What is it for?
Use it with /token-master to answer questions such as who calls something or what a change could break; it can use a basic mapper and optionally a more precise JavaScript or TypeScript call resolver.
Why use it?
It gives the coding agent a reusable view of the project, reducing repeated searches and file reading when tracing changes.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the token-master plugin — 1 skill shipped together

Good fit Use it with /token-master to answer questions such as who calls something or what a change could break; it can use a basic mapper and optionally a more precise JavaScript or TypeScript call resolver.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/all-the-vibes/tokenmasterx/token-master
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add All-The-Vibes/TokenMasterX --skill token-master
Clone the repo
git clone --depth 1 https://github.com/All-The-Vibes/TokenMasterX

Made for: Claude Code.

Or install token-master, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for token-master

README.md
[![agentmods](https://agentmods.dev/badge/skills/all-the-vibes/tokenmasterx/token-master/github.svg)](https://agentmods.dev/skills/all-the-vibes/tokenmasterx/token-master)
Your own site
<a href="https://agentmods.dev/skills/all-the-vibes/tokenmasterx/token-master"><img src="https://agentmods.dev/badge/skills/all-the-vibes/tokenmasterx/token-master/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for token-master

Your own site · 80×15
<a href="https://agentmods.dev/skills/all-the-vibes/tokenmasterx/token-master"><img src="https://agentmods.dev/badge/skills/all-the-vibes/tokenmasterx/token-master.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 74 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 864 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00074 $0.00864
Opus 5.5 $0.00030 $0.00346
Sonnet 5.5 $0.00015 $0.00173
Haiku 4.5 $0.00007 $0.00086

Measured 1mo ago against content hash 55e2bc15a5ab, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

token-master scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 21 executable files (brainspace_benchmark.py, brainspace_mcp.py, brainspace_posttooluse.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

token-master-plugin/skills/token-master/SKILL.md · 64 lines

How it starts

The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/token-master

This skill turns on TokenMaster's token-efficient routing for the repository the user is working in. It is the on-switch: it builds the code graph and installs the routing engine.

What it does

  1. Builds a structural code graph of the repo with graphify (no LLM, fast) — the default, cheapest backend.
  2. Stores it at .token-master/graph.json and adds .token-master/ to the repo's .gitignore.
  3. Best-effort installs a second codegraph backend (AST-resolved call edges) for precision escalation, and indexes the repo with it. This needs node + npm; if they are missing the plugin still works graphify-only (the agent is written without the codegraph server).
  4. Installs/refreshes the token-master routing agent (user scope) and its graph MCP servers.

The two backends are not interchangeable: graphify is the cheap default; codegraph is a targeted escalation for precision-critical or sparse-call-graph cases (see "After setup"). If graphify's call graph is sparse for the repo (common in JavaScript/TypeScript), setup prints a warning — that is the signal codegraph will do the call-resolution work on that repo.

How to run it

The setup script lives in this skill's own directory. Locate it reliably, then run it:

  1. Run /skills info token-master and read the skill's directory path from the output.
  2. Run the script, passing that directory and the repo root (normally the current working directory):
python "<skill-dir>/setup.py" "<repo-root>"

Then relay the script's summary output to the user verbatim.

  • If the script reports that graphify (or uv) is not installed, tell the user to install the missing tool — uv tool install graphify (see https://github.com/safishamsi/graphify) or uv itself (https://docs.astral.sh/uv/) — then run /token-master again.
  • The routing agent is loaded at CLI startup, so the user must restart their CLI before routing takes effect (unless it is already active). The setup script prints the exact host-specific restart command in its summary — relay that line as-is rather than guessing the host.

Read the full file on GitHub · 64 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 64 lines · 74 tokens per session scan A 55e2bc15a5ab

Subscribe to this mod's changes

token-master is a skill published in the GitHub repository All-The-Vibes/TokenMasterX (3 stars, last pushed 2d ago), licensed MIT. It adds 74 tokens to every session and 864 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

building

Use when writing production code test-first: the RED-GREEN-REFACTOR cycle, false-RED detection, vertical slicing, scope escalation, test process discipline, and code generation patterns.

romiluz13/cc10x · 43 tokens

diff-driven-docs

Use when a BUILD phase completes, a commit is staged, or a PR is about to be created, and the diff has not yet been reflected in documentation. Also use when the user says "update docs", "sync docs", "document this", or asks whether documentation is up to date.

romiluz13/cc10x · 64 tokens

exploration

Two-mode exploration skill: (1) design dialogue — turn rough ideas into validated designs through collaborative interview before planning; (2) spike — throwaway code answering ONE design question, deleted or absorbed, never shipped. Router invokes mode via dispatch context.

romiluz13/cc10x · 56 tokens

memory-and-handoff

Two-mode skill: (1) session memory — load/persist durable workflow state under .cc10x/ (activeContext, patterns, progress) so context survives compaction; (2) handoff package — portable, secrets-redacted export for a coworker, different tool, or fresh non-cc10x session.

romiluz13/cc10x · 70 tokens

agent-common

Use when a cc10x agent starts a task: the shared preamble for the memory protocol, the contract format, and the output rules.

romiluz13/cc10x · 32 tokens

cc10x-guide

Answers questions about cc10x itself — what it is, how to install and configure it, how the router, workflows, memory, and hooks operate, and how to troubleshoot. Use this skill when: the user asks ABOUT cc10x — "what is cc10x", "how do I configure cc10x", "why isn't cc10x activating", "how do cc10x workflows work"…

romiluz13/cc10x · 231 tokens