probe-first-scout

probe-first-scout is a skill for Claude Code, Codex from blackzhanzhan/Cyber-Ming-Protocol. It costs 51 tokens per session (730 once invoked), scanned A, original, MIT.

A small investigation workflow for uncertain technical situations, such as an unknown external service or unclear system boundary. It finds the first real failure before a larger implementation is planned.

In plain words
What is it for?
For designing and running a minimal, non-mutating probe, recording expected failure and success signals, and handing the findings to whoever plans the implementation.
Why use it?
It helps avoid making a detailed plan based on guesses when the main technical risk is not yet understood.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit For designing and running a minimal, non-mutating probe, recording expected failure and success signals, and handing the findings to whoever plans the implementation.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add blackzhanzhan/Cyber-Ming-Protocol --skill probe-first-scout
Clone the repo
git clone --depth 1 https://github.com/blackzhanzhan/Cyber-Ming-Protocol

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for probe-first-scout

README.md
[![agentmods](https://agentmods.dev/badge/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout/github.svg)](https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout)
Your own site
<a href="https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout"><img src="https://agentmods.dev/badge/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for probe-first-scout

Your own site · 80×15
<a href="https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout"><img src="https://agentmods.dev/badge/skills/blackzhanzhan/cyber-ming-protocol/probe-first-scout.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 51 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 730 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00051 $0.00730
Opus 5 $0.00026 $0.00365
Sonnet 5 $0.00010 $0.00146
Haiku 4.5 $0.00005 $0.00073

Measured 10d ago against content hash f733a756ed25, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

probe-first-scout scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skill/probe-first-scout/SKILL.md · 55 lines

How it starts

The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Probe-First Scout

Prerequisite: read and obey the repository parent policy at skill/global_rules/SKILL.md first.

Use When

  • The task touches an unknown external system, unclear runtime boundary, suspicious integration seam, or hidden environment constraint.
  • A full implementation plan would be premature because the first question is still “what is the real failure?”
  • You need the smallest possible probe before planning the main campaign.

Goal

  • Surface the real red light with minimum blast radius.
  • Define the green light that would justify larger implementation planning.
  • Hand the result to the planning layer instead of pretending certainty.

Output Contract

Your response must include:

  1. a short stop-before-main-implementation notice
  2. a minimal probe plan
  3. expected red light and expected green light
  4. explicit no-touch scope
  5. target artifacts or logs to bring back
  6. architecture uncertainty or affected architecture nodes, if any
  7. data-model uncertainty or affected data entities, if any
  8. an approval gate before writing probe code

Planning Rules

  • Prefer the smallest probe that can answer the operational uncertainty.
  • Do not let the probe mutate into the real implementation.
  • Keep the probe isolated from mainline behavior and broad refactors.
  • If the repo has no dev_repo/ runtime yet, make runtime bootstrap an explicit precondition or first micro-slice instead of silently probing without process truth.
  • If the repo has no dev_repo/architecture/ and the uncertainty is architectural rather than operational, make architecture census the first precondition instead of pretending a small runtime probe can solve it.
  • If durable data semantics are unknown and the probe may affect persistence, schemas, migrations, runtime state, or API data contracts, make ER/data-model census the first precondition instead of pretending a small runtime probe can solve it.
  • If the probe may change architecture boundaries, public interfaces, dependency direction, runtime flow, or invariants, it is not a probe-only task; route to an architecture amendment contract.
  • If the probe may change entities, relationships, cardinality, identity, source/derived classification, migration, or backfill semantics, it is not a probe-only task; route to a data-model amendment contract.
  • A probe may mark architecture nodes as unknown, but it must not silently rewrite graph.json, index.json, or invariants.md unless the approved probe explicitly owns those files.
  • A probe may mark data entities or relationships as unknown, but it must not silently rewrite entities.json, relationships.json, ER.md, or invariants.md unless the approved probe explicitly owns those files.
  • If the user writes imperially, the outer shell may be ceremonial, but the probe plan must remain technically explicit.
  • If the user writes in English, use plain English operational language and avoid Chinese-only ritual terms.

Read the full file on GitHub · 55 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 55 lines · 51 tokens per session scan A f733a756ed25

Subscribe to this mod's changes

probe-first-scout is a skill published in the GitHub repository blackzhanzhan/Cyber-Ming-Protocol (56 stars, last pushed 4mo ago), licensed MIT. It adds 51 tokens to every session and 730 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.