Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BackToCimaCoppi/Praxis --skill deep-research-gategit clone --depth 1 https://github.com/BackToCimaCoppi/PraxisWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/backtocimacoppi/praxis/deep-research-gate)<a href="https://agentmods.dev/skills/backtocimacoppi/praxis/deep-research-gate"><img src="https://agentmods.dev/badge/skills/backtocimacoppi/praxis/deep-research-gate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/backtocimacoppi/praxis/deep-research-gate"><img src="https://agentmods.dev/badge/skills/backtocimacoppi/praxis/deep-research-gate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00424 |
| Opus 5.5 | $0.00021 | $0.00170 |
| Sonnet 5.5 | $0.00011 | $0.00085 |
| Haiku 4.5 | $0.00005 | $0.00042 |
Grade A, and why
deep-research-gate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
扇出与深度研究安全门
分类
判据三问:任务数量是否无法预先计数?子任务是否可以再派生?是否让调查者自行决定调查范围和深度?任一回答“是”,按无界调查处理。已枚举、可计算上界、无递归的叶子任务直接并行。
无界调查开闸
- 写清目标、预计调用与成本、最大并发、最大层数、时间或 token 上限、停止条件和交付物,取得用户同意。
- 检查当前运行时有无递归派生、深度研究或自动工作流功能;可用时关闭自动触发。无法关闭的,缩减为有界任务或明确人工监督,不让叶子代理持有派生权限。
- 只启动获批范围,记录实际扩张。达到预算、深度或时间上限立即收口,未完成部分单独报告。
- 结束时恢复临时改变的运行时配置,并在报告结果前核查恢复状态。
硬规则
- 子任务默认是叶子。授予只读、范围限定的工具,不给派生代理、工作流、外部发布或不必要的写权限。
- 有界并行不可因为无界调查风险而擅自串行化;但不得突破当前运行时的并发上限。
- 运行时若无法提供预期隔离,不声称已建立引擎级保护。改用可验证的任务范围、预算与监督。
- 用户授权的一次无界调查不自动延续到另一轮或另一主题。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago Changed · -92 lines · -16 tokens per session scan B → A a897863043b8
- 1mo ago First seen · 117 lines · 69 tokens per session scan B d145ec15cf10
deep-research-gate is a skill published in the GitHub repository BackToCimaCoppi/Praxis (6 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 53 tokens to every session and 424 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
prompt-master
Generates optimized prompts for AI tools. Activates only when the user explicitly asks to write, fix, improve, or adapt a prompt for a specific AI tool (LLM, Cursor, Midjourney, image AI, video AI, coding agents, etc.). Does not activate for general conversation, coding tasks, document writing, or other…
browser-tools
Safety rules over the upstream agent-browser skill (scraping ethics, auth, request pacing, local URLs). URL policy is the Claude Code sandbox's job when the operator enables it. Use for browser automation.
rag-retrieval
Retrieval-Augmented Generation patterns for grounded LLM responses. Use when building RAG pipelines, embedding documents, implementing hybrid search, contextual retrieval, HyDE, agentic RAG, multimodal RAG, query decomposition, reranking, or pgvector search.
architecture-patterns
Architecture validation and patterns for clean architecture, backend structure enforcement, project structure validation, test standards, and context-aware sizing. Use when designing system boundaries, enforcing layered architecture, validating project structure, defining test standards, or choosing the right…
auto
Intent-classified router, the front door to OrchestKit and the DEFAULT entry point for any goal-shaped request. Classifies a plain-English goal and routes it to the right specialist skill. Routing is never overhead, so use it even when the target skill seems obvious; skip only when already executing inside another…
langgraph
LangGraph 1.x (LTS) Python workflow patterns for state management, delta channels, resilience (node timeouts, error handlers, graceful drain), routing, parallel execution, supervisor-worker, tool calling, checkpointing, human-in-loop, streaming (v2 format), subgraphs, and functional API. Use when building LangGraph…