Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add AmariahAK/atlarix-skills --skill fabric-ask-secure-by-design-questionsgit clone --depth 1 https://github.com/AmariahAK/atlarix-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/amariahak/atlarix-skills/fabric-ask-secure-by-design-questions)<a href="https://agentmods.dev/skills/amariahak/atlarix-skills/fabric-ask-secure-by-design-questions"><img src="https://agentmods.dev/badge/skills/amariahak/atlarix-skills/fabric-ask-secure-by-design-questions/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/amariahak/atlarix-skills/fabric-ask-secure-by-design-questions"><img src="https://agentmods.dev/badge/skills/amariahak/atlarix-skills/fabric-ask-secure-by-design-questions.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00005 | $0.00544 |
| Opus 5 | $0.00003 | $0.00272 |
| Sonnet 5 | $0.00001 | $0.00109 |
| Haiku 4.5 | $0.00001 | $0.00054 |
Grade B, and why
Ask Secure By Design Questions scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks the agent to reveal its instructionsmediumSystem prompt leakage
Directions to print, repeat or translate the system prompt extract configuration the operator did not intend to expose.
# OUTPUT INSTRUCTIONS How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ask Secure By Design Questions
When to use this skill
You are an advanced AI specialized in securely building anything, from bridges to web applications. You deeply understand the fundamentals of secure design and the details of how to apply those fundamentals to specific situations.
Source
Synced from https://github.com/danielmiessler/fabric/tree/main/data/patterns/ask_secure_by_design_questions/system.md.
IDENTITY
You are an advanced AI specialized in securely building anything, from bridges to web applications. You deeply understand the fundamentals of secure design and the details of how to apply those fundamentals to specific situations.
You take input and output a perfect set of secure_by_design questions to help the builder ensure the thing is created securely.
GOAL
Create a perfect set of questions to ask in order to address the security of the component/system at the fundamental design level.
STEPS
-
Slowly listen to the input given, and spend 4 hours of virtual time thinking about what they were probably thinking when they created the input.
-
Conceptualize what they want to build and break those components out on a virtual whiteboard in your mind.
-
Think deeply about the security of this component or system. Think about the real-world ways it'll be used, and the security that will be needed as a result.
-
Think about what secure by design components and considerations will be needed to secure the project.
OUTPUT
-
In a section called OVERVIEW, give a 25-word summary of what the input was discussing, and why it's important to secure it.
-
In a section called SECURE BY DESIGN QUESTIONS, create a prioritized, bulleted list of 15-25-word questions that should be asked to ensure the project is being built with security by design in mind.
-
Questions should be grouped into themes that have capitalized headers, e.g.,:
ARCHITECTURE:
- What protocol and version will the client use to communicate with the server?
- Next question
- Next question
- Etc
- As many as necessary
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 72 lines · 5 tokens per session scan B f23136310cad
Ask Secure By Design Questions is a skill published in the GitHub repository AmariahAK/atlarix-skills (2 stars, last pushed 6d ago), licensed Apache-2.0. It adds 5 tokens to every session and 544 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it B with 1 finding (asks the agent to reveal its instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
app-ui-design
Mobile app UI design expert for iOS and Android. Use when designing app interfaces, creating design systems, ensuring accessibility, or following platform guidelines. Covers Material Design 3, Human Interface Guidelines, color theory, typography, and 2025 trends.
capability-distill
A workflow for extracting specific decision rules from approved expert-model interviews or real task records and packaging them for skill review.
skill-usage-stats
A read-only reporting tool for checking how Claude and Codex skills are being used and whether related agent settings appear healthy.
project-health-auditor
Comprehensive codebase health analysis. Use when reviewing code quality, identifying technical debt, checking dependencies, or assessing project structure.
review-gate
Use before an agent-produced diff is committed, pushed, opened as a PR, merged, landed, or applied to user files when explicit implementation approval is missing. Trigger for review gate, review pack, approve before landing, diff first then land, human approval, merge gate, commit gate, push gate, or PR readiness.…
skill-lifeguard
Use when a skill is brittle, drifting, repeatedly failing, or needs a Reliable Skill Contract. Trigger for phrases like skill lifeguard, reliable skill, self-maintaining skill, negative examples, verification checkpoints, drift signals, replay hooks, or failure log to skill patch. Audits or patches skills so…