dos-skillify

dos-skillify is a skill for Claude Code, Codex from anthony-chaudhary/dos-kernel. It costs 50 tokens per session (2,930 once invoked), scanned A, original, MIT.

A workflow for making an agent skill verify claims through independent checks, called witnesses, instead of trusting the agent's own statements. It creates an additional DOS-aware copy and a report.

In plain words
What is it for?
Use it to audit a SKILL.md, identify places where the skill relies on self-checks, and replace or guard those checks with externally grounded verification.
Why use it?
It reduces false conclusions such as treating an unverified commit or self-reported success as proof that work is complete.

Skill for Claude CodeCodex

Part of the dos-kernel plugin — 18 skills, 3 hooks, 1 MCP server shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/anthony-chaudhary/dos-kernel/dos-skillify
Any agent
npx skills add anthony-chaudhary/dos-kernel --skill dos-skillify
Clone the repo
git clone --depth 1 https://github.com/anthony-chaudhary/dos-kernel

Made for: Claude Code, Codex.

Or install dos-kernel, the plugin that ships this one along with the rest of its 18 skills, 3 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dos-skillify

README.md
[![agentmods](https://agentmods.dev/badge/skills/anthony-chaudhary/dos-kernel/dos-skillify.svg)](https://agentmods.dev/skills/anthony-chaudhary/dos-kernel/dos-skillify)
Your own site
<a href="https://agentmods.dev/skills/anthony-chaudhary/dos-kernel/dos-skillify"><img src="https://agentmods.dev/badge/skills/anthony-chaudhary/dos-kernel/dos-skillify.svg" alt="Measured on agentmods" height="20"></a>
Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,930 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00050 $0.02930
Opus 5 $0.00025 $0.01465
Sonnet 5 $0.00010 $0.00586
Haiku 4.5 $0.00005 $0.00293

Measured 4d ago against content hash 0baac9ac466a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

dos-skillify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

claude-plugin/skills/dos-skillify/SKILL.md · 184 lines

How it starts

The opening of the file, as written. The whole thing — 184 lines — stays where its author put it; the contents beside it link to each section on GitHub.

dos-skillify — make any skill ask a witness instead of believing itself

A skill is a screenplay, not a program — and most screenplays trust the worker. When a skill concludes "the fix shipped" because the agent said it committed, "the goal is met" by re-reading its own transcript, or "all 7 workers returned" by filter(Boolean), the part deciding ground truth is the part being judged. That is consistency, not grounding (docs/138). This skill does not rewrite the job; it changes how the skill knows a step worked — it finds every belief-bit and replaces the self-check with a dos verb whose byte-author is not the agent. The kernel decides; the converted skill narrates.

The shape is domain-free: parse the skill into claim-sites → classify each as ADD / REPLACE / GUARD / LEAVE → emit an additive new copy + a report. The policy (which lanes, which plan grammar, which exit codes) is data read from dos doctor --json, never literals — which is exactly what lets the converted skill run unchanged on a host with different lanes. Full design: docs/345.

When to use this (and when not)

  • Use it when you have a skill (a SKILL.md, an agent prompt, a workflow script) that sets belief bits from self-report and you want those seams grounded — your own skill, a vendored one, or a public skill you're preparing a variant of.
  • Do not use it to rewrite a skill's job, make it "smarter", or convert a pure-prose/taste skill that sets no checkable belief bit — there is no witness to add, and forcing one is the fake-witness anti-pattern this skill refuses.
  • This is a layer-3 helper / screenplay (a PDP, docs/99). It shells existing dos verbs and mints no new verdict. It produces a variant + a report; it decides no ground truth itself. Its OWN output is admitted by witness (Step 5).

The one rule under this skill

The converter is a judged agent. It must never claim "I made this skill DOS-aware" — it must produce a report whose every row a reviewer re-derives from the diff without trusting the converter. A converter that self-certifies its own output is the exact failure DOS exists to fix. That is why Step 4 (the report) and Step 5 (admit-by-witness) are not optional.

Read the full file on GitHub · 184 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 184 lines · 50 tokens per session scan A 0baac9ac466a

Subscribe to this mod's changes

dos-skillify is a skill published in the GitHub repository anthony-chaudhary/dos-kernel (19 stars, last pushed 11d ago), licensed MIT. It adds 50 tokens to every session and 2,930 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.