Borrowing it
Nothing to install: this file belongs to alunduil/alunduil-chezmoi. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/alunduil/alunduil-chezmoi/main/.claude/skills/add-tool/SKILL.mdgit clone --depth 1 https://github.com/alunduil/alunduil-chezmoiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alunduil/alunduil-chezmoi/add-tool)<a href="https://agentmods.dev/skills/alunduil/alunduil-chezmoi/add-tool"><img src="https://agentmods.dev/badge/skills/alunduil/alunduil-chezmoi/add-tool/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/alunduil/alunduil-chezmoi/add-tool"><img src="https://agentmods.dev/badge/skills/alunduil/alunduil-chezmoi/add-tool.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.01202 |
| Opus 5.5 | $0.00020 | $0.00481 |
| Sonnet 5.5 | $0.00010 | $0.00240 |
| Haiku 4.5 | $0.00005 | $0.00120 |
Grade A, and why
add-tool scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Add a tool to bootstrap
First check the tool belongs on the host, then make two decisions independently.
Libraries with no console script
uv tool install needs an executable, so a PyPI library takes one of
two shapes:
- An installed tool imports it (plugins, optional backends): add it
as a pinned
--withextra on that tool, asbeetscarriespyacoustid. - Otherwise, keep it off the host. The caller runs
uv run --with <pkg>==<version> <script>and owns the pin. Stop here: no bootstrap change, nohost-statusentry.
Install a CLI front-end that wraps the library only when its command is itself wanted.
Auth axis
Does the tool need interactive auth (login, browser flow, API token) to do real work?
- Yes (gh, claude, gcx, readwise, tailscale): add a
check_loginline tocheck_loginsindot_local/bin/executable_host-status.tmpl, testing local state the login leaves behind (a credential file, or a command that reads it without the network). Auth state is runtime, never managed by chezmoi. - No (zellij, lazygit, act, gh-poi): no login line.
Missing-tool report
host-status derives apt packages from .chezmoidata/packages.yaml
and pinned tools from mise ls --missing, so those need no entry. A
tool installed any other way (npm, cargo, uv, ghcup, an upstream
installer) goes in its commands array.
Install mechanism
All passes live under .chezmoiscripts/.
Pick the canonical installer for the ecosystem:
| Source | Where | Pattern |
|---|---|---|
| Debian package | .chezmoidata/packages.yaml |
append to packages.apt |
| Pinned binary release | dot_config/mise/config.toml |
mise entry below |
| npm package | run_before_03 |
npm install -g, command -v |
| Cargo crate | run_before_09 |
cargo install, command -v |
| PyPI package | run_after_install-via-mise-tools |
mirror the beets block |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +5 lines · -15 tokens per session 49246fb0a79b
- 2d ago Changed · -4 lines 34547286df3e
- 13d ago Changed · +9 lines 17167fe5b17f
- 24d ago Changed · +9 lines scan C → A 8d5c0578a0d4
- 1mo ago Changed · -1 lines scan E → C 0bd38d7e4e5e
- 1mo ago First seen · 105 lines · 65 tokens per session scan E 29bfb4fd16a0
add-tool is a skill published in the GitHub repository alunduil/alunduil-chezmoi (2 stars, last pushed today), licensed 0BSD. It adds 50 tokens to every session and 1,202 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
batch-grill-me
A relentless interview that asks every frontier question at once, round by round.
dotfiles-bootstrap
Bootstrap a workstation with the dotfiles framework. Takes a GitHub user / owner+repo / explicit clone URL and runs dot config init (which shells out to chezmoi) with the right safety prompts. Honors the active agent profile (ask / plan / apply / audit) so it defaults to dry-run in safer modes and full apply in apply.
vibe
Delegate a coding task to a cheap AI model (Mistral Vibe by default, but any provider Vibe knows about — DeepSeek, Gemini Flash, etc.) and supervise the result via git diff. Claude orchestrates, the cheap model codes. Claude consumes 500-1500 tokens per delegation regardless of how many file reads the delegate does…
repository-history
Explain why code exists: Git blame, renames, reverts, and linked PRs.
draft-doc
Create and update Google Docs with gws: native Markdown with Mermaid/SVG figures, or styled .gdoc.
databricks
Operate Databricks bundles, jobs, pipelines, and Unity Catalog.