Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add Borda/AI-Rig/plugin install foundryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/borda/ai-rig/manage)<a href="https://agentmods.dev/skills/borda/ai-rig/manage"><img src="https://agentmods.dev/badge/skills/borda/ai-rig/manage.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00185 | $0.12703 |
| Opus 5 | $0.00093 | $0.06352 |
| Sonnet 5 | $0.00037 | $0.02541 |
| Haiku 4.5 | $0.00018 | $0.01270 |
Grade B, and why
manage scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
**For update (rename):** Count files grep returns. **≤ 3 files**: apply inline with Edit tool. **> 3 files**: spawn **foundry:curator** subagent. For hook renames: also update hook entry in `.claude/settings.json` `hooks Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
- All subprocess calls must use execFileSync or spawnSync (args array — no execSync with shell strings) How it starts
The opening of the file, as written. The whole thing — 784 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Note:
disable-model-invocation: true—/manageuser-invoked only, noSkill()chaining from orchestrators. When suggesting/manageas follow-up, invoking skill must present as user-run command, not auto step.
Manage lifecycle of agents, skills, rules, hooks in .claude/. Handles creation with rich domain content, atomic renames with cross-ref propagation, content editing (trivial edits inline; .md files → foundry:curator; code files *.js/*.py/*.ts → foundry:sw-engineer; rule edits inline), clean deletion with broken-ref cleanup. Keeps MEMORY.md inventory in sync with disk.
-
$ARGUMENTS: required, one of:
create agent <name> "description"— create new agent with generated domain contentcreate skill <name> "description"— create new skill with workflow scaffoldcreate rule <name> "description"— create new rule file with frontmatter and sectionsupdate <name> <new-name>— rename; type auto-detected from diskupdate <name> "change description"— content-edit; trivial → inline,.md→ foundry:curator, code → foundry:sw-engineer, rule → inlineupdate <name> <spec-file.md>— content-edit from spec file; trivial → inline,.md→ foundry:curator, code → foundry:sw-engineer, rule → inlinedelete <name>— delete; type auto-detected from disk (agents, skills, rules, hooks); asks user if ambiguousadd perm <rule> "description" "use case"— add permission to settings.json allow list and permissions-guide.mdremove perm <rule>— remove permission from settings.json allow list and permissions-guide.md
-
Names must be kebab-case (lowercase, hyphens only)
-
Descriptions must be quoted when containing spaces
-
Permission rules use Claude Code format:
WebSearch,Bash(cmd:*),WebFetch(domain:example.com) -
--skip-audit— optional flag: skip Step 9/auditvalidation (use insideaudit fixloop to avoid recursion) -
Spec-file paths must be quoted —
update <name> <spec-file.md>requires the spec path quoted if it contains any whitespace (e.g.update my-agent "docs/My Spec.md"); unquoted paths with spaces split into multiple arguments and trigger argument-shape mismatch. Recommended: keep spec filenames free of spaces.
Update/delete mode — name looked up across agents, skills, rules automatically:
- One match on disk → proceed with that type
- Multiple matches →
AskUserQuestion: (a) agent, (b) skill, (c) rule - No match → report error and stop
Update second-argument discrimination:
- Two bare kebab-case args (second arg no spaces, no
.mdextension) → rename mode - One name + quoted string → content-edit mode (trivial → inline;
.md: foundry:curator; code*.js/*.py/*.ts: foundry:sw-engineer; rule: inline) - One name + path ending in
.md→ content-edit mode (trivial → inline;.md: foundry:curator; code*.js/*.py/*.ts: foundry:sw-engineer; rule: inline)
Examples:
/foundry:manage create agent task-planner "Planning specialist for decomposing epics into actionable tasks"/foundry:manage update my-agent "add a section on error handling patterns"/foundry:manage update optimize docs/specs/YYYY-MM-DD-<spec-name>.md/foundry:manage delete old-agent-name/foundry:manage add perm "Bash(jq:*)" "Parse and filter JSON" "Extract fields from REST API responses"
- AGENTS_DIR:
.claude/agents - SKILLS_DIR:
.claude/skills - RULES_DIR:
.claude/rules - HOOKS_DIR:
.claude/hooks - AVAILABLE_COLORS: indigo, lime, magenta, teal, violet
Each Step 4 spawn applies the health monitoring in _shared/agent-spawn-protocol.md §8b — rely on the harness completion notification, then read the agent's output file; optional single health_sentinel.py probe per turn (no sleep loop). Substitute only its own <ID> suffix and output-file glob; do not re-paste the snippet per spawn.
Colors in use are read from the live Grep in Step 3 (authoritative) — no static used-color list to maintain. AVAILABLE_COLORS is the candidate pool for a new agent; pick the first entry not already in the Step-3 set.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 784 lines · 185 tokens per session scan B b7db822b8031
manage is a skill published in the GitHub repository Borda/AI-Rig (26 stars, last pushed 2d ago), licensed Apache-2.0. It adds 185 tokens to every session and 12,703 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it B with 2 findings (reads agent configuration directories, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
file-headers
MANDATORY for every coding agent (Claude Code, Codex, or any other) on every change-set — every applicable source file the agent creates or updates MUST start with the project's copyright/authorship header (file overview + exact author line). Use automatically whenever writing a new file or editing an existing one; do…
productivity-score
Calculate a productivity score using actual Agent Monitor metrics — session completion rates, cache efficiency (cacheread vs input), compaction pressure (baseline tokens), turn velocity (turncount / totalturndurationms), tool success ratio (PreToolUse vs PostToolUse), and the workflow intelligence API's complexity and…
budget-set
Define a spend budget for Claude Code and, optionally, create a cost alert rule that fires when usage crosses the limit, via POST /api/alerts/rules on the Agent Monitor dashboard. Reads current spend from /api/pricing/cost to size the budget sensibly and explains every rule field before writing. Use when setting a…
dashboard-status
Quick dashboard health and status overview — checks the Agent Monitor API (port 4820), reports session/agent/event counts from /api/stats, confirms WebSocket connectivity, reads the redacted hook status returned by /api/settings/info, and shows data freshness (last event timestamp). Use to verify the monitoring system…
dag-map
Render the multi-agent orchestration DAG for a session — parent→child subagent edges, tree depth, and fan-out — from the Agent Monitor workflow intelligence API. Cross-checks the orchestration dataset against the raw agent records and session detail. Use when visualizing how a session's agent structure was organized.
run-agent
Launch and supervise Claude Code or Codex through the CCAM Run API. Use when the user wants to start a monitored agent, select a model, approval policy, sandbox, or working directory, send a follow-up, inspect live output, resume a native session, or stop a dashboard-launched run.