Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bostonaholic/team --skill team-designgit clone --depth 1 https://github.com/bostonaholic/teamWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bostonaholic/team/team-design)<a href="https://agentmods.dev/skills/bostonaholic/team/team-design"><img src="https://agentmods.dev/badge/skills/bostonaholic/team/team-design.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 26 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 91 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 95 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00032 | $0.01541 |
| Opus 5 | $0.00016 | $0.00771 |
| Sonnet 5 | $0.00006 | $0.00308 |
| Haiku 4.5 | $0.00003 | $0.00154 |
Grade A, and why
team-design scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Team Design — Where Are We Going?
Run the DESIGN phase. The design-author decides the approach — recording every self-resolved choice as an auditable assumption — and the adversarial design review gates advancement. No mid-run prompt fires.
Input
$ARGUMENTS is the artifact directory: docs/plans/<id>/. If empty, the
discovery command below resolves it.
The design-author reads:
$ARGUMENTS/1-task.md— what we are building (intent)$ARGUMENTS/2-questions.md— the questions that drove research$ARGUMENTS/5-research.md— what exists (facts)
Resolve <team-skill-dir> to the absolute directory containing
skills/team/SKILL.md. From the repository root, run:
"<team-skill-dir>/discover-topic.sh" "${ARGUMENTS:-}" "5-research.md"
- If the command printed a path, use it as
$ARGUMENTSfor the rest of this skill (tier 1 explicit arg, or tier 2 discovery). When the path came from tier 2 (no explicit arg), announce the resolved directory to the user before proceeding, so an auto-picked topic is never silent. - If the command printed nothing (tier 3 — no directory holds
5-research.md), do not hard-error. FireAskUserQuestionwith aSetupheader and labeled options:- Run the producer — run
/team-research docs/plans/<id>/to produce the missing5-research.md. - Give a path — the user supplies the
docs/plans/<id>/directory directly (runls docs/plans/to find your topic directory).
- Run the producer — run
Execution
-
Use the directory resolved in
## Input. -
Dispatch
design-author, which: a. Resolves its own open questions autonomously, recording each in## Decisions mademarked as an assumption (see the agent file) b. Writes$ARGUMENTS/6-design.mdwith frontmatterrevision: 0If
$ARGUMENTS/6-design.mdalready exists, skip this dispatch and resume at step 3 — never re-draft an existing design. Both this skip and step 3's never-re-review skip are idempotent re-runs: converge on the same end state, never duplicate work (principle-idempotent-reruns). -
Design review gate. If the latest
$ARGUMENTS/design-review-<n>.mdalready carries a passing verdict (APPROVE or COMMENT), skip straight to step 4 — never re-review a passed design. Otherwise, before each review dispatch, run the external cross-model pass: call the Skill tool withcross-model-reviewand follow its## Design-review pass— reference that procedure, never duplicate it here. Its one gate: theTEAM_DISABLE_CROSS_MODELkill-switch. Run the runner'sdetectverb, thenrunper ready CLI — each through its own named courier sub-agent per that skill's vendor-courier block, with its inline fallback — naming any unavailable CLI to the user per that skill's## When a vendor CLI is unavailable; a missing runner isskip: cross-model runner not foundper CLI. Fence each CLI's raw output as aDATAblock at capture time (fence longer than any backtick run in the output, per that section), append one## External review inputsection — opening with the untrusted-content line that section specifies — holding the fenced blocks to the review brief, and append the round's transcript to$ARGUMENTS/cross-model-raw.mdin the result-line format that section pins (created on first use; a zero-call round appends nothing). Any skip continues with the reviewer alone — the pass never blocks the gate. Then dispatch the adversarial design review (the## Review brief— call the Skill tool withreviewing-designsto read it, with the artifact directory substituted — run by a fresh-context read-onlyExploresubagent each round) and write the findings + verdict to$ARGUMENTS/design-review-<n>.md, where<n>is the highest existing<n>+ 1 (1 when none exists) — never overwrite an earlier verdict record. Derive theverdict:frontmatter from the last verdict token in the report body — the reviewer's verdict is the terminal line of its report. When the report contains a### Cross-model dispositionsection, append that section as one block to$ARGUMENTS/cross-model-notes.md, blockquote-wrapped — prefix every line with>at append time, per the design-review gate inskills/team/SKILL.md— opening with the orchestrator-authored label line — the literal> **Design round <n>**— prepended inside the wrap; same frontmatter-on-first-append rules as the other gates (schema inskills/artifact-frontmatter/SKILL.md). Then act on the verdict:- APPROVE or COMMENT — the review passes. Advance.
- REQUEST CHANGES — re-dispatch
design-authorwith the reviewer's findings verbatim. The agent re-drafts and incrementsrevision: <n+1>, then a fresh review round runs. The loop ends on the verdict, so REQUEST CHANGES keeps re-drafting for as many rounds as it takes. Recovery runs after an operator stop, a context-exhausted session, or the fail-closed halt below. A person revises$ARGUMENTS/6-design.mdby hand and re-invokes/team-designbare. The run then resumes at this gate, per the resume branch at step 2. Therevisioncounter persists in6-design.mdfrontmatter. - Unparseable verdict or reviewer crash — retry the review once
with the error; on second failure, halt loudly. Fail closed —
never advance on a missing verdict.
A missing verdict counts as not passed (
principle-fail-closed).
-
Stop once
$ARGUMENTS/6-design.mdexists and the latest$ARGUMENTS/design-review-<n>.mdverdict is APPROVE or COMMENT.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · -32 lines · -31 tokens per session f7829e22c2b4
- 4d ago Changed · +5 lines 7034603f410b
- 8d ago First seen · 144 lines · 63 tokens per session scan A 88e9de809df9
team-design is a skill published in the GitHub repository bostonaholic/team (11 stars, last pushed today), licensed MIT. It adds 32 tokens to every session and 1,541 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tutti-agent-workspace-app
Build or evolve a complex agent-enabled Tutti workspace app repository. Use for Tutti apps with web/server/shared monorepos, @tutti-os/agent-acp-kit local agent runtimes, kit-owned TUTTICLI agent/composer discovery, dynamic agent catalogs, run-scoped MCP tool gateways, app-owned package builders, web-first debugging…
assimilate-popular-workflows
This skill should be used when the user asks to "find skills in the wild", "assimilate popular workflows", "discover SKILL.md files in repos", "research external skills", "find workflow patterns", "survey the skill landscape", "what skills exist out there", or wants to investigate public repositories for extractable…
process-builder
Scaffold new babysitter process definitions following SDK patterns, proper structure, and best practices. Guides the 3-phase workflow from research to implementation.
mcp-app-verification
Comprehensive verification checklists for MCP Apps. Tests with basic-host reference, validates handler-before-connect, text fallback, resource URI linking, single-file bundling, host styling, CSP, and legacy pattern detection.
verification-suite
Plan structure validation, phase completeness checks, reference integrity verification, and artifact existence confirmation. Provides the structured verification layer ensuring GSD artifacts are well-formed and complete.
guardrails-ai-setup
Guardrails AI validation framework setup for LLM applications. Implement input/output validation, safety checks, and structured output enforcement.