Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/baek-labs/hames/source-command-doctornpx skills add baek-labs/hames --skill source-command-doctorgit clone --depth 1 https://github.com/baek-labs/hamesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/baek-labs/hames/source-command-doctor)<a href="https://agentmods.dev/skills/baek-labs/hames/source-command-doctor"><img src="https://agentmods.dev/badge/skills/baek-labs/hames/source-command-doctor.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00020 | $0.00748 |
| Opus 5 | $0.00010 | $0.00374 |
| Sonnet 5 | $0.00004 | $0.00150 |
| Haiku 4.5 | $0.00002 | $0.00075 |
Grade A, and why
source-command-doctor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
source-command-doctor
Use this skill when the user asks to run the migrated source command doctor.
Command Template
/doctor
사용법: /doctor / /doctor <workspace> (예: /doctor MyDomain)
본 커맨드의 정체
/doctor는 진단 전용 도구다. 자동 수정은 하지 않는다.
스크립트는 JSON 리포트만 출력하며, 모든 수정은 별도 단계로 CEO 승인을 거쳐 수동 적용된다.
파일 콘텐츠·인덱스 품질 점검은 /index 담당.
진단 항목 (스키마: doctor-2026-05-08.v2)
| 카테고리 | JSON 필드 (issues.*) |
기본 조치 방향 (별도 작업) |
|---|---|---|
| Stale Permissions | stale_permissions |
settings.local.json 해당 항목만 제거 |
| Arsenal Registry | arsenal_issues |
arsenal/CLAUDE.md 정정 또는 파일 복구 |
| Rule Modules | rule_module_issues |
루트 CLAUDE.md @-import 정정/복구 |
| Workspace Isolation | workspace_isolation_issues |
격리 워크스페이스 누락 항목 생성 |
| Path References | path_reference_issues |
메타 문서가 인용한 경로 정정/제거 |
| Command Surface | command_surface_issues |
.claude / .gemini / .codex / .agent 미러 동기화 |
| Hook Surface | hook_surface_issues |
hook 스크립트 경로 정정 또는 복구 |
| Runtime Encoding | runtime_encoding_issues |
Codex/PowerShell UTF-8 bootstrap 적용 |
| Workspace Registry | workspace_registry_issues |
.claude/workspace_paths.json 정정 |
추가 출력:
documentation_drift_warnings—HamesSystem_Public.md(설명 문서)가 인용한 커널 서명이 실제 커널과 어긋날 때만 좁게 경고. HamesSystem_Public.md 는 정본이 아니다.recommended_actions—{id, action_type, target_path, proposed_change, risk_level, rationale, source_issue}구조의 고정 스키마.
Mode A — 전체 점검 (인수 없음)
python arsenal/hames_doctor.py
전체 시스템 진단. 모든 카테고리 필드가 채워진다.
Mode B — 워크스페이스 필터 (/doctor <workspace>)
python arsenal/hames_doctor.py <workspace>
전체 시스템 진단을 그대로 실행하되, workspace_isolation_issues 만 해당
워크스페이스 항목으로 필터링하여 노이즈를 줄인다.
나머지 카테고리(시스템 전반)는 그대로 보고된다.
CEO 보고 후 조치 원칙
- 스크립트는 직접 파일을 수정하지 않는다.
recommended_actions항목별로 위험도(risk_level)와 근거(rationale)를 함께 제시한다.- CEO 승인된 항목만 별도 단계에서 surgical Edit / 파일 생성 / 항목 제거 등으로 적용한다.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 68 lines · 20 tokens per session scan A 5a8fb7ef0134
source-command-doctor is a skill published in the GitHub repository baek-labs/hames (5 stars, last pushed 1mo ago), licensed MIT. It adds 20 tokens to every session and 748 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
代码审查员
专业代码审查专家，提供建设性、可操作的反馈，聚焦正确性、可维护性、安全性和性能，而非代码风格偏好。.
release-gate-loop
发版前自动验证闸门——V 验证 + F 修复循环（verdict FAIL → F 改代码 → 跑 audit → V 重验），最大 3 轮直到 PASS。纯只读验证 + 最小修复。.
fresh-eyes-loop
发布后独立质量循环——A/B 双盲 12 视角 fresh-eyes 审查 + 修复 + 验证，每轮新 session 保证零上下文，连续 2 轮无 P0/P1 即停。.
sofagent-fde
前线部署与知识工程专家。梳理企业业务流、识别 AI 节点、构建 ontology 本体数据、交付离场。 部署完成后转为持续优化模式（sustain），自动读 audit 报告趋势生成优化报告。 不写应用代码——把企业业务规则、组织架构、系统边界转译成 sofagent 的数据层和约束层。.
sofagent-audit
收到用户任务后，不要自己执行——用 Bash tool 把任务交给 DeepAgents 编排引擎：.
sofagent
FDE Skill——帮 FDE（前线部署工程师）更好完成企业 AI 落地的方法论 Skill。约束 Agent 行为、审计每次变更、沉淀经验。 底层实现叫约束层——一个层四种能力：注入·审计·回溯·进化。FORGE 自迭代工具链是内部开发工具。 内置持续优化模式（sustain），自动读 audit 报告趋势生成优化报告。.