Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add brandhaug/b2b-saas-starter --skill implementgit clone --depth 1 https://github.com/brandhaug/b2b-saas-starterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/brandhaug/b2b-saas-starter/implement)<a href="https://agentmods.dev/skills/brandhaug/b2b-saas-starter/implement"><img src="https://agentmods.dev/badge/skills/brandhaug/b2b-saas-starter/implement/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/brandhaug/b2b-saas-starter/implement"><img src="https://agentmods.dev/badge/skills/brandhaug/b2b-saas-starter/implement.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00022 | $0.01786 |
| Opus 5.5 | $0.00009 | $0.00714 |
| Sonnet 5.5 | $0.00004 | $0.00357 |
| Haiku 4.5 | $0.00002 | $0.00179 |
Grade A, and why
implement scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Implement
Default endpoint: a reviewed PR ready to merge, without merging. Honor a narrower user request.
Implement each change as if the desired outcome had been a requirement from the start, reshaping the affected system into its simplest coherent design.
Supporting skills are pinned repo dependencies. Before invoking one, follow
dependency verification and setup for that skill.
Read .agents/skill-dependencies/<name>/SKILL.md explicitly and pass that path to workers.
Repository policy takes precedence over external guidance. Load only the skills needed
for the current task; optional design guidance may fall back as documented there.
-
Read the issue and comments using tracker guidance. Keep issue numbers and acceptance-criteria (AC) IDs only in GitHub issue/PR traceability. Use descriptive behavioral names in repository code, docs, comments, test titles, filenames, and other tracked implementation content; never embed issue numbers or AC IDs there. Preserve legitimate external dependency references and unrelated numeric values. Map criteria to test evidence in the PR. Apply feature acceptance when defining criteria and selecting verification; inspect existing callers, operation catalog and capability contracts before deciding applicability. Use
grillingfor unresolved product decisions andto-ticketsfor independently verifiable slices. -
Implement in the main session by default. The session already holds the issue, the grilling, and the plan; a worker briefed from a summary loses that context and produces worse fixes. Delegate implementation only when the change has two or more independent file boundaries and parallel work saves wall-clock. Then give each worker the full issue text, the agreed spec, and its owned files, not a compact brief. Pass saved spec paths rather than pasting the implementation conversation. Assign one writer to shared wiring and preserve others' edits. Keep the session model for implementation. Follow repository reviewer-model policy; otherwise use a configured cheaper same-provider model for targeted documentation review and browser verification. Keep the session model for behavior review unless the repository explicitly selects another model. Keep the session's provider unless the user requests a switch. The main session alone dispatches reviews and includes this ownership rule in any worker brief. Implementers and reviewers do not dispatch additional reviewers. If delegation is unavailable, review locally and report that review was not independent.
When delegating, start workers with fresh context using the active tool schema:
- Codex: set
fork_turns: "none"when exposed; its default can inherit the full conversation. If the tool exposesfork_contextinstead, set it tofalse. - Claude Code: start a new
Agentwithsubagent_type: "general-purpose"or a configured non-fork subagent. These start fresh;forkcopies history. - OpenCode: start a new
taskwith a compactpromptand omittask_id. Supplyingtask_idresumes an existing worker's context.
Resume an existing implementation worker when continuing its assigned task. Keep reviewer contexts fresh, with diff/spec/rule/check-evidence paths and access to surrounding source. Where supported, expose only the role's required tools; do not assume tool restrictions remove inherited catalogs.
Locate files before reading bounded ranges. Reuse unchanged guidance already in context. Save full command output to logs and return exit status plus relevant excerpts; expand the read when understanding the code requires it.
- Codex: set
-
For Effect code, apply
effectwith repo examples,codebase-designfor module interfaces,effect-service-designfor service ownership/Layers, andimpeccablefor UI. Follow the root testing policy when choosing tests and implementation order. If a supporting skill is missing, follow skills setup. -
Finish related implementation, tests and docs before dispatching review. Run the affected format/lint/type checks and required focused tests first; fix actionable failures and save a compact summary with commands, revision, results and log paths. Map applicable entry points and supported recovery/denial cases to that evidence; preserve exclusions and unverified paths for the PR. Reuse results only while inputs, tool versions and environment match. Preserve blockers as unverified work. Docs and mechanical edits get one targeted reviewer. For behavior changes, use
code-reviewagainst a fixed base/head and the agreed spec, with its separate Standards and Spec reviewers. Bothcode-reviewandthermo-nuclear-code-quality-revieware required dependencies for this behavior-review branch; if verification remains blocked, report review incomplete. The Standards reviewer appliesthermo-nuclear-code-quality-reviewin the same pass and deduplicates overlapping findings. Include official-SDK selection in Standards: for new or extended vendor HTTP calls, verify the existing adapter or official SDK's exact operation, package version and runtime fit against fetched vendor docs. Flag duplicated transport, auth, pagination or response types when the SDK covers them without a concrete constraint. Unsupported endpoints, runtime incompatibility or demonstrated bundle constraints can justify narrow HTTP adapters. Report unavailable verification; SDK preference alone is not a correctness blocker. Keep Spec independent; run a separate deep audit only on explicit request. -
Consolidate findings before assigning fixes. Batch related accepted repairs before another review round; avoid concurrent rounds on a changing snapshot. Structural suggestions need a concrete benefit. Apply accepted repairs in the main session; if a worker owns the affected files, resume that worker with the full findings rather than a summary. Use the repository's incremental-review mechanism when one exists, retaining the whole-branch diff as context and obeying its full-review fallback. Otherwise re-review the full diff against base. Reuse an unchanged completed review only when its scope, spec and standards still match; changed inputs require renewed review. If two repair rounds fail, stop and reassess the cause in the main session, then report the unresolved blockers. Repeat the broader review only when design or behavior changes substantially.
-
For UI acceptance gaps, use available browser tooling to run one smoke path. Give the verifier the URL, credential source, actions, expected visible outcomes, and a limit of 12 browser actions. Stop on the first failure and return pass/fail evidence; gather screenshots or console/network diagnostics as needed. Prefer existing Playwright coverage for regression checks. If browser tooling is unavailable, report the unverified acceptance criteria. Do not run browser suites concurrently when they share database state, authentication fixtures, build output, or report directories; overlapping runs can invalidate each other's results.
-
Run
pnpm run checkbefore committing andpnpm run validateon the integrated result before PR handoff. Save repeatable E2E evidence per the root testing policy. Reuse current results when unchanged; fixes from validation return through affected checks and review. Commit and create/update the PR using the repo template. -
When the host exposes a PR watcher, the parent handles existing failures/comments, registers the watch, and ends the turn. Resume on events; stop watching before handoff. Do not launch a competing polling agent. Without a host watcher, run
gh pr checks --required --watchwith a 30-minute deadline per head. Fix actionable failures and reverify after pushes. Before declaring readiness, confirm required checks/reviews and mergeability for the current head. Report pending checks, optional failures and external blockers accurately.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +5 lines b01daf35a31c
- 3d ago Changed · +3 lines 3450bd5ed661
- 9d ago Changed · +3 lines c8fb32b5fc22
- 16d ago Changed · +44 lines 9a69e39e366b
- 1mo ago Changed · +2 lines 2562df661714
- 1mo ago Changed · -2 lines 1acd57d78146
- 1mo ago Changed · +5 lines 4e6bec25c1d6
- 2mo ago First seen · 70 lines · 22 tokens per session scan A c32aa6fe9fb8
implement is a skill published in the GitHub repository brandhaug/b2b-saas-starter (52 stars, last pushed yesterday), licensed MIT. It adds 22 tokens to every session and 1,786 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
implement compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| implementbrandhaug/b2b-saas-starter | Skill | 52 | yesterday | MIT | A | 22 | Claude Code, Codex |
| add-a-liblonormaly/builders-stack | Skill | 42 | 1mo ago | MIT | A | 81 | Claude Code, Codex |
| turborepovercel/turborepo | Skill | 31k | yesterday | MIT | A | 50 | Claude Code, Codex |
| better-t-stackAmanVarshney01/create-better-t-stack | Skill | 5.9k | 13d ago | MIT | A | 149 | Claude Code, Codex |
| firebase-auth-better-authyultyyev/better-auth-firebase-auth | Skill | 20 | 3d ago | MIT | A | 82 | Claude Code, Codex |
| apps-ayokoding-www-developing-contentwahidyankf/ose-public | Skill | 12 | 4d ago | MIT | A | 68 | Claude Code, Codex |
| plan-writing-gherkin-criteriawahidyankf/ose-public | Skill | 12 | 4d ago | MIT | A | 52 | Claude Code |