Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add blockmatic/basilic --skill workflowgit clone --depth 1 https://github.com/blockmatic/basilicWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blockmatic/basilic/workflow)<a href="https://agentmods.dev/skills/blockmatic/basilic/workflow"><img src="https://agentmods.dev/badge/skills/blockmatic/basilic/workflow.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.01298 |
| Opus 5 | $0.00017 | $0.00649 |
| Sonnet 5 | $0.00007 | $0.00260 |
| Haiku 4.5 | $0.00003 | $0.00130 |
Grade A, and why
workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Basilic workflows
With no argument, list the shortcuts below and stop. Do not start a lifecycle or execute all playbooks.
For /workflow <token>, resolve a shortcut below or a full name from the index, read that child SKILL.md, and follow it. Preserve the remaining request as its task context. Unknown token: show the index and stop; never guess a publishing command.
Direct /<name> loads the same child. Names in an old conversation such as /b-plan-feature can be translated to /plan-feature; they are not separate installed aliases. FIRST /f-* owns durable decisions and remains a separate catalog. Install with pnpm dlx skills@latest add blockmatic/first (reviewed revision). Do not fork that tree here. Use the repository's FIRST load order when that boundary is relevant.
Shortcuts
| Invocation | Playbook |
|---|---|
/workflow plan |
plan-feature |
/workflow build |
build |
/workflow review |
code-review |
/workflow debug |
debug-issue |
/workflow test |
run-all-tests-and-fix |
/workflow commit |
git-commit |
/workflow push |
git-push |
/workflow pr |
git-create-pr |
/workflow retro |
retro |
/workflow ui |
use-frontend |
build ends at verified local changes. commit, push, pr, and exec-push request their named Git actions; none requests merging or deploying. Use /git-push to publish an already-committed branch; /fix-push after fixing a failed push; /exec-push only when the user asked for implement through a described PR.
Full index
- /add-documentation
- /add-error-handling
- /audit-accessibility
- /build
- /clarify-task
- /code-review
- /coderabbit
- /council
- /debug-browser
- /debug-issue
- /deslop
- /diagrams
- /docker-logs
- /exec-push
- /fix-compile-errors
- /fix-git-issues
- /fix-github-actions
- /fix-push
- /fix-vercel-build
- /generate-api-docs
- /generate-pr-description
- /git-commit
- /git-create-pr
- /git-pr-comments
- /git-push
- /info-architecture
- /light-review-existing-diffs
- /lint-fix
- /lint-suite
- /nextjs-form
- /onboard-new-developer
- /optimize-performance
- /overview
- /plan-architecture
- /plan-feature
- /refactor-code
- /release-review
- /retro
- /review-plan
- /roadmap
- /run-all-tests-and-fix
- /security-audit
- /security-review
- /use-frontend
- /use-shadcn
- /use-tdd
- /use-v0
- /visualize
- /write-api-test
- /write-unit-tests
- /yolo
What ships with it
53 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- add-documentation/SKILL.md 1.5 KB
- add-error-handling/SKILL.md 1.3 KB
- audit-accessibility/SKILL.md 1.0 KB
- build/SKILL.md 1.8 KB
- clarify-task/SKILL.md 1.1 KB
- code-review/SKILL.md 2.4 KB
- coderabbit/SKILL.md 1.1 KB
- council/SKILL.md 1.5 KB
- debug-browser/SKILL.md 1.3 KB
- debug-issue/SKILL.md 1.9 KB
- deslop/SKILL.md 1.1 KB
- diagrams/SKILL.md 1.6 KB
- docker-logs/SKILL.md 838 B
- exec-push/SKILL.md 1.6 KB
- fix-compile-errors/SKILL.md 652 B
- fix-git-issues/SKILL.md 1.2 KB
- fix-github-actions/SKILL.md 1.6 KB
- fix-push/SKILL.md 1.1 KB
- fix-vercel-build/SKILL.md 1.1 KB
- generate-api-docs/SKILL.md 1.0 KB
- generate-pr-description/SKILL.md 959 B
- git-commit/SKILL.md 1.4 KB
- git-create-pr/SKILL.md 1.5 KB
- git-pr-comments/SKILL.md 1.3 KB
- git-push/SKILL.md 1.2 KB
- info-architecture/SKILL.md 1.1 KB
- light-review-existing-diffs/SKILL.md 1.1 KB
- lint-fix/SKILL.md 693 B
- lint-suite/SKILL.md 824 B
- nextjs-form/SKILL.md 3.0 KB
- onboard-new-developer/SKILL.md 1.2 KB
- optimize-performance/SKILL.md 1.1 KB
- overview/SKILL.md 1.1 KB
- plan-architecture/SKILL.md 1.3 KB
- plan-feature/SKILL.md 1.9 KB
- refactor-code/SKILL.md 1.2 KB
- references/authoring.md 2.0 KB
- references/completion.md 1.7 KB
- release-review/SKILL.md 1.3 KB
- retro/SKILL.md 1.4 KB
- review-plan/SKILL.md 1.5 KB
- roadmap/SKILL.md 1.2 KB
- run-all-tests-and-fix/SKILL.md 880 B
- security-audit/SKILL.md 1.1 KB
- security-review/SKILL.md 1.0 KB
- use-frontend/SKILL.md 2.9 KB
- use-shadcn/SKILL.md 1.6 KB
- use-tdd/SKILL.md 1.0 KB
- use-v0/SKILL.md 1.8 KB
- visualize/SKILL.md 903 B
- write-api-test/SKILL.md 1.5 KB
- write-unit-tests/SKILL.md 1.0 KB
- yolo/SKILL.md 1.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +79 lines · -12 tokens per session 12df1ceb73e0
- 3d ago Changed · +2 lines a776e1a24d20
- 4d ago First seen · 8 lines · 46 tokens per session scan A ce6a564007c3
workflow is a skill published in the GitHub repository blockmatic/basilic (89 stars, last pushed yesterday), licensed MIT. It adds 34 tokens to every session and 1,298 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
gsd-quick
Execute a quick task with GSD guarantees (atomic commits, state tracking) but skip optional agents.
gsd-quick-batch
Batch several /gsd:quick-shaped tasks together — planned, dispatched, and merged as one run.
gh-issues
Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assignee @me] [--fork user/repo] [--watch] [--interval 5] [--reviews-only] [--cron] [--dry-run] [--model glm-5]…
gsd-pause-work
Create context handoff when pausing work mid-phase.
gsd-ship
Create PR, run review, and prepare for merge after verification passes.
mcore-split-pr
Split a PR into multiple PRs to reduce the number of required CODEOWNERS reviewer groups.