ss-debug

ss-debug is a skill for Codex from bonnguyenitc/specship. It costs 97 tokens per session (2,052 once invoked), scanned A, original, MIT.

A method for investigating software defects, such as failing tests or incorrect behavior, by finding and fixing their underlying cause. It records the investigation in the task that owns the work.

In plain words
What is it for?
Use it to reproduce a problem, identify its root cause, make the smallest correct fix, verify the result, and document what happened.
Why use it?
It prevents temporary fixes that only hide symptoms and keeps the reasoning available to the team. It also tracks whether the bug is blocking the task.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: model in frontmatter; mentions subagents; mentions Claude Code.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/bonnguyenitc/specship/ss-debug
Any agent
npx skills add bonnguyenitc/specship --skill ss-debug
Clone the repo
git clone --depth 1 https://github.com/bonnguyenitc/specship

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ss-debug

README.md
[![agentmods](https://agentmods.dev/badge/skills/bonnguyenitc/specship/ss-debug.svg)](https://agentmods.dev/skills/bonnguyenitc/specship/ss-debug)
Your own site
<a href="https://agentmods.dev/skills/bonnguyenitc/specship/ss-debug"><img src="https://agentmods.dev/badge/skills/bonnguyenitc/specship/ss-debug.svg" alt="Measured on agentmods" height="20"></a>
Per session 97 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,052 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00097 $0.02052
Opus 5 $0.00048 $0.01026
Sonnet 5 $0.00019 $0.00410
Haiku 4.5 $0.00010 $0.00205

Measured 6d ago against content hash 48a348b7af08, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

ss-debug scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ss-debug/SKILL.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Debug

Goal: find the root cause of a defect and fix it with the smallest correct change — never patch symptoms. Record the investigation so it's not lost.

When to use

  • A test fails, the app misbehaves, or a regression appears.
  • Asked to "debug", "fix this bug", or "why is this failing".
  • Can be triggered at any point in the workflow (during coding, during review, or on a bug found later).

Shared task state

Part of the task pipeline — see ../WORKFLOW.md for the full contract. ss-debug attaches to a task rather than being a fixed pipeline stage.

  • Hydrate: resolve the owning TASK-<ID> (see "Attach the bug to a task" below), read its task.md, and spec.md/plan.md as needed. If no task owns it, create a new one.
  • Checkpoint: append the BUG# entry to debug.md; update task.md — set debug artifact open-bugs/clear, set status: blocked while a blocker bug is open (note it in Blocked by:), bump updated:, append a Pipeline Log line carrying your agent label (format: ../WORKFLOW.md → Agent handoff). Clear back to active when fixed and return to the stage you came from. (blocked is involuntary; see ../WORKFLOW.md → Status values.)
  • Lessons: read tasks/LESSONS.md at hydrate and apply its rules; if the bug's root cause was a process mistake (e.g. a skipped verify, a stale plan), fix the process trace too and append an L# entry there (see ../WORKFLOW.md → Lessons).

Attach the bug to a task

  • If the bug belongs to an existing task (it's in code that task touched, or found during its coding/review): track it in that task's folder → tasks/TASK-<ID>/debug.md.
  • If it's a standalone bug with no task: create a new tasks/TASK-<ID>/ (from a ticket id, or generated per ../WORKFLOW.md → "Choosing TASK-<ID>") and record it there. A spec.md is optional for a pure bugfix, but always keep the debug record.
  • If unsure which task owns it, ask the user before picking.

Method — scientific debugging

Work from evidence, one hypothesis at a time. Don't guess-and-change.

Read the full file on GitHub · 83 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 83 lines · 97 tokens per session scan A 48a348b7af08

Subscribe to this mod's changes

ss-debug is a skill published in the GitHub repository bonnguyenitc/specship (2 stars, last pushed 28d ago), licensed MIT. It adds 97 tokens to every session and 2,052 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.