Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add broomva/skills/plugin install orchestrationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/broomva/skills/ctx-core)<a href="https://agentmods.dev/skills/broomva/skills/ctx-core"><img src="https://agentmods.dev/badge/skills/broomva/skills/ctx-core/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/broomva/skills/ctx-core"><img src="https://agentmods.dev/badge/skills/broomva/skills/ctx-core.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00374 | $0.07497 |
| Opus 5.5 | $0.00150 | $0.02999 |
| Sonnet 5.5 | $0.00075 | $0.01499 |
| Haiku 4.5 | $0.00037 | $0.00750 |
Grade B, and why
ctx-core scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Registering hooks is human-gated. No agent edits `~/.claude/settings.json`, Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- `curl` the Paseo MCP endpoint with the bearer token in its own argv. The How it starts
The opening of the file, as written. The whole thing — 443 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ctx-core: the shared board (phase 1)
In the 09-26 → 09-29 run, coordination state lived in the coordinator's
context window. Compaction kept dropping it, and no worker session could see
another. Phase 1 of the shared context core
(design,
docs/specs/2026-09-29-shared-context-core.html) puts the minimum of that
state on disk: which sessions exist in a scope, where they are (cwd, branch),
the keyword of their last ARC-STATUS line, and whether they died. Every
session gets the relevant slice of it at start.
It is read and publish only. There is no mailbox, no wake-up, and no retention.
What it stores: structured fields, no free text
| Field | From | Kept as |
|---|---|---|
session_id, paseo_agent_id |
hook input, PASEO_AGENT_ID |
id-shaped strings ([A-Za-z0-9][A-Za-z0-9._:-]{0,127}), otherwise omitted |
cwd, repo, branch |
the filesystem and git | flattened to one line |
type, ts |
the hook | session.start, session.stop or session.died; UTC milliseconds |
arc_status, arc_line |
Stop's last_assistant_message |
The last line matching exactly ^ARC-STATUS: [A-Z]+. The keyword is MERGED, CLOSED, DONE, BLOCKED, or OTHER, plus at most the first 120 characters of that line |
error (the row's died_error) |
StopFailure | The error class (rate_limit, billing_error, …). Claude Code 2.1.280 sends it as error; the reference documents it as error_type. A value that is not class-shaped is stored as unknown. error_details and the message text are never read |
Nothing else is written: no model, source, role, prose, message text or error
text. The schema is enforced on read too, so a hand-written log line with free
text, an unknown key, or a guard-failing field is skipped by the fold.
Schema: references/event-schema.md.
One cheap guard (guard_ok) runs on every stored string. It drops a field
in either of two cases:
- The field contains
crm/,Bearer,ghp_,gho_,github_pat_,sk-,xoxorAKIA. These match case-insensitively, and only at the start of a token, sofix/task-listandmycrm/pass. - The field contains a run of 32 or more ASCII letters and digits.
What ships with it
44 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- CHANGELOG.md 9.2 KB
- references/event-schema.md 5.0 KB
- references/s1-gate.md 19 KB
- references/s1-latency.md 1.9 KB
- references/s1-params.candidate.json 502 B
- references/s1-params.json 465 B
- references/s1-stage-probe.md 3.3 KB
- scripts/ctx_compare.py 16 KB runs code
- scripts/ctx_hook.py 5.7 KB runs code
- scripts/ctx_keys.py 20 KB runs code
- scripts/ctx_s1_cli.py 1.3 KB runs code
- scripts/ctx_s1_eval.py 44 KB runs code
- scripts/ctx_s1_hook.py 4.9 KB runs code
- scripts/ctx_s1_replay.py 41 KB runs code
- scripts/ctx_s1.py 36 KB runs code
- scripts/ctx_s2_ppr.py 2.8 KB runs code
- scripts/ctx_s2.py 34 KB runs code
- scripts/ctx-hook.sh 853 B runs code
- scripts/ctx-s1-hook.sh 1.5 KB runs code
- scripts/ctx.py 58 KB runs code
- scripts/register_s1_hooks.py 7.2 KB runs code
- tests/conftest.py 8.4 KB runs code
- tests/mutation_check_s1.py 22 KB runs code
- tests/mutation_check.py 12 KB runs code
- tests/requirements-dev.txt 14 B
- tests/s1_latency_bench.py 4.0 KB runs code
- tests/s1_support.py 10 KB runs code
- tests/s1_synthetic.py 3.6 KB runs code
- tests/test_compare.py 13 KB runs code
- tests/test_fail_open.py 7.6 KB runs code
- tests/test_guard.py 7.4 KB runs code
- tests/test_hook_deadline.py 6.2 KB runs code
- tests/test_hooks.py 14 KB runs code
- tests/test_lock_contention.py 5.6 KB runs code
- tests/test_rebuild_determinism.py 8.9 KB runs code
- tests/test_s1_boundaries.py 11 KB runs code
- tests/test_s1_e1_synthetic.py 2.8 KB runs code
- tests/test_s1_eval.py 26 KB runs code
- tests/test_s1_failopen.py 9.3 KB runs code
- tests/test_s1_gate.py 16 KB runs code
- tests/test_s1_register.py 5.0 KB runs code
- tests/test_s2_cache.py 5.0 KB runs code
- tests/test_s2_sources.py 6.6 KB runs code
- tests/test_scope_isolation.py 12 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 23d ago Changed 133ea170b3ac
- 1mo ago Changed · +106 lines · +107 tokens per session 62400a38c51a
- 1mo ago First seen · 337 lines · 267 tokens per session scan B 5971bc59410e
ctx-core is a skill published in the GitHub repository broomva/skills (5 stars, last pushed 2d ago), licensed MIT. It adds 374 tokens to every session and 7,497 once invoked, about $0.0015 per session on Opus 5.5. A static security scan graded it B with 2 findings (reads agent configuration directories, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-30.
ctx-core compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| ctx-corebroomva/skills | Skill | 5 | 2d ago | MIT | B | 374 | Claude Code |
| gossipcatgossipcat-ai/gossipcat-ai | Skill | 41 | 27d ago | MIT | A | 50 | Claude Code, Codex |
| swarmclawswarmclawai/swarmclaw | Skill | 706 | 4mo ago | MIT | B | 67 | Claude Code, Codex |
| using-aoUntrivial-ai/agent-orchestrator | Skill | 14k | 2d ago | Apache-2.0 | A | 71 | Claude Code, Codex |
| comet-memoryrpamis/comet | Skill | 3.3k | today | MIT | A | 38 | Claude Code, Codex |
| relevance-coarse-filterelvisun/newsjack | Skill | 1.7k | 2d ago | MIT | A | 57 | Claude Code |
| award-calendarborski/travel-hacking-toolkit | Skill | 926 | today | MIT | A | 52 | Claude Code |