Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BlackBeltTechnology/pi-agent-dashboard --skill project-initgit clone --depth 1 https://github.com/BlackBeltTechnology/pi-agent-dashboardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blackbelttechnology/pi-agent-dashboard/project-init)<a href="https://agentmods.dev/skills/blackbelttechnology/pi-agent-dashboard/project-init"><img src="https://agentmods.dev/badge/skills/blackbelttechnology/pi-agent-dashboard/project-init.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 14 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 179 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00081 | $0.03555 |
| Opus 5 | $0.00041 | $0.01777 |
| Sonnet 5 | $0.00016 | $0.00711 |
| Haiku 4.5 | $0.00008 | $0.00356 |
Grade A, and why
project-init scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Project Init
Turn the current directory into a configured pi project through a guided, conversational flow. You are running as a first-class interactive session — converse, confirm, and only write files after the user agrees.
Target directory = your current working directory (cwd). All writes land
there. All profile/doctrine paths below are relative to THIS skill's directory
(the folder containing this SKILL.md); call it <skill>.
Step 1 — Resolve the available profiles
A profile is a directory bundle: profile.json (optional, carries
description + dox), AGENTS.md.tmpl, settings.json.tmpl, and
prompts/*.md.
Enumerate profiles from two sources, user wins by name:
- Shipped:
<skill>/profiles/* - User:
~/.pi/project-profiles/*
ls -1 "<skill>/profiles" 2>/dev/null
ls -1 "$HOME/.pi/project-profiles" 2>/dev/null
Merge: a user profile of the same name fully shadows the shipped one. A
directory is only a usable profile when it contains BOTH AGENTS.md.tmpl and
settings.json.tmpl. Read each profile.json for its description and dox
flag (dox defaults to false when absent or unreadable).
Step 2 — Ask which profile
Use ask_user (select) to present the resolved profiles by name +
description. Shipped defaults are coding (TDD/simplicity/surgical, OpenSpec
on, npm ci worktree-init) and docs (writing structure, OpenSpec off, no
build step).
Step 2b — Resolve the technology stack (stack-aware profiles only)
When the chosen profile's profile.json has "stackAware": true (the shipped
coding profile does), its templates carry technology placeholders
({{INSTALL_CMD}}, {{TEST_CMD}}, {{BUILD_CMD}}, {{INIT_GATE}},
{{INIT_COMMAND}}) that must be filled from the project's stack — a coding repo
may be Node, Rust, Go, Python, Java, etc.
Auto-detect + confirm:
-
Detect a best guess from marker files in the target directory:
Marker file(s) Stack install / test / build init gate + run pnpm-lock.yamlpnpm pnpm install --frozen-lockfile/pnpm test/pnpm buildtest ! -d node_modules/pnpm install --frozen-lockfileyarn.lockyarn yarn install --frozen-lockfile/yarn test/yarn buildtest ! -d node_modules/yarn install --frozen-lockfilebun.lockb/bun.lockbun bun install/bun test/bun run buildtest ! -d node_modules/bun installpackage-lock.json/package.jsonnpm npm ci/npm test/npm run buildtest ! -d node_modules/npm ciCargo.tomlcargo cargo fetch/cargo test/cargo buildtest ! -d target/cargo fetchgo.modgo go mod download/go test ./.../go build ./...test ! -f go.sum/go mod downloadpoetry.lockorpyproject.toml+[tool.poetry]poetry poetry install/poetry run pytest/poetry buildtest ! -d .venv/poetry installrequirements.txt/pyproject.tomlpip venv+pip install / .venv/bin/pytest/python -m buildtest ! -d .venv/ venv+pip installpom.xmlmaven mvn -q dependency:go-offline/mvn test/mvn -q package -DskipTeststest ! -d target/mvn -q dependency:go-offlinebuild.gradle(.kts)gradle ./gradlew dependencies/./gradlew test/./gradlew build -x testtest ! -d .gradle/./gradlew dependencies
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- dox-doctrine.md 8.3 KB
- dox-doctrine.md.AGENTS.md 322 B
- profiles/coding/AGENTS.md.tmpl 5.1 KB
- profiles/coding/profile.json 212 B
- profiles/coding/prompts/plan-change.md 277 B
- profiles/coding/prompts/tdd-loop.md 264 B
- profiles/coding/settings.json.tmpl 136 B
- profiles/docs/AGENTS.md.tmpl 1.1 KB
- profiles/docs/profile.json 122 B
- profiles/docs/prompts/draft-page.md 288 B
- profiles/docs/settings.json.tmpl 164 B
- SKILL.md.AGENTS.md 361 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 274 lines · 81 tokens per session scan A f60ec0a11c91
project-init is a skill published in the GitHub repository BlackBeltTechnology/pi-agent-dashboard (276 stars, last pushed today), licensed MIT. It adds 81 tokens to every session and 3,555 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
kano-backlog
Prioritize and refine a GitHub Issues backlog with the Kano model — categorize every open issue as Must-be, Performance, Attractive, Indifferent, or Reverse, apply Kano + priority labels back to GitHub automatically, and recommend the single best next issue to pick up. Use this whenever the user wants to triage…
akidevsync-notes
Read and edit a project's .akidevsync/notes.json task/note file — the per-project task list written by the Aki-Dev-Sync app (github.com/lacvietanh/aki-dev-sync). Use when the user asks to list, add, pin/unpin, mark done, edit, or delete a task in that file, or mentions "task note", "note ghim", "pin task", "mark…
send-feedback
Explicit Codex workflow: Collect reviewed, sanitized rn-dev-agent feedback and create a GitHub issue only with user confirmation.
starfleet
Fleet coordination — comms, concurrency, task capture, and starfleetctl CLI. Load when handling inter-ship messages, setting up parallel work, capturing tasks, or running starfleetctl commands.
agentlas-operations
A set of operating procedures for running Agentlas, a system for coordinating agents, reusable workforces, automation graphs, and shared agent resources. It covers candidate selection, graph creation, asset discovery, and memory rules.
design-debt-tracker
Use when critique or review produces deferred findings, when checking accumulated design compromises, or when deciding what to address in the next iteration. Maintains a living register of design debt — the minor issues, future-iteration notes, and conscious compromises that accumulate across a project.