Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/brownglasses/dotplot-mcp/dotplot-add-trackingnpx skills add brownglasses/dotplot-mcp --skill dotplot-add-trackinggit clone --depth 1 https://github.com/brownglasses/dotplot-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00106 | $0.00760 |
| Opus 5 | $0.00053 | $0.00380 |
| Sonnet 5 | $0.00021 | $0.00152 |
| Haiku 4.5 | $0.00011 | $0.00076 |
Grade A, and why
dotplot-add-tracking scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Add the tracking that's missing
A product that records nothing can't be analyzed — but it can be read. That is what this does: find the holes in the code, fill them, and set a date to come back.
1. Read what the code already logs
Search for existing logging calls before assuming there are none:
logEvent( track( analytics.capture( posthog.capture(
gtag('event' mixpanel.track( amplitude.logEvent( segment.track(
Also check for a database write that serves the same purpose — an events,
activity, or audit_log table being inserted into.
2. Ask the code what's missing
Pass what you found to audit_tracking. It does not need a CSV — call it
with code_events alone when there's no data yet.
It answers the question that matters at this stage: whether anything being
logged could ever show that a user got value. A product logging only open_app
and page_view has tracking and still can't answer anything —
can_measure_value: false is the finding, not an error.
With data, it also splits into what fires, what never fires (broken logging, or a feature nobody uses), and what's in the data but not the code.
3. Find what has no logging at all
This is the part the tool can't do and the part that matters most. Read the code for the product's core actions — the handlers behind the buttons that are the reason the product exists — and check which have no logging near them.
A missing log line appears in neither list. It only shows up if you look.
4. Prescribe, don't report
For each hole, write the one line that belongs in that file, in that function,
matching the surrounding style. Follow the project's existing naming —
follow_artist if the codebase is snake_case, followArtist if camelCase.
Show it, ask, and apply it if they agree. Don't bulk-edit files without asking.
Choose event names for what they mean, not what's easy: purchase not
button_click, send_message not submit. A vanity name can't be undone
later without rewriting history.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 84 lines · 106 tokens per session scan A 2995d53af1c3
dotplot-add-tracking is a skill published in the GitHub repository brownglasses/dotplot-mcp (1 stars, last pushed 19d ago), licensed MIT. It adds 106 tokens to every session and 760 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
data-analysis
业务数据分析助手(电商/增长方向)。连接 MySQL 数据库或读取 CSV/Excel,完成需求澄清 → SQL 查询 → 数据体检 → 全自动清洗 → 自动 EDA 探索 → 漏斗/留存/复购/RFM/指标异动归因分析 → 可视化 → 结论先行分析报告的完整流程;内置只读安全防护、MySQL 8 SQL 模板、10 个开箱即用脚本和演示电商数据,对新手友好。当用户提到分析数据、查数据库、写 SQL、漏斗、留存、转化率、GMV、DAU、复购、用户分群、指标为什么涨/跌、做报表,或给出任何 csv/xlsx/数据库数据想找业务结论时都应使用——用户不必说出"数据分析"四个字。.
call-coach
B2B discovery call coach. Paste any transcript — Granola export, Fireflies, Fathom, plain text, a file path — and get a full coaching report: framework flags, gaps the rep failed to build, admissions captured, and a complete next-call script. Uses local memory files to track deals across multiple calls so coaching…
attio-deepline-enrich
Enrich records inside Attio with a clear cost gate before any credit is spent. Pull a chosen object (companies, people, or custom) from Attio, fill chosen attributes via Deepline providers (emails, phones, firmographics, LinkedIn, ICP fields), show the exact credit and dollar cost, wait for an explicit yes, run it…
cfo-skill
Read-only CFO data dashboard for bootstrapped startups. Two modes, CSV templates (works with any stack: Attio/HubSpot/Salesforce + Qonto/Mercury/Brex + Stripe + Moss/Ramp/Pleo) or live API pull from Attio + Qonto + Stripe + Moss. Computes runway, burn rate, MRR/ARR, NRR, customer concentration, AR aging, DSO, vendor…
cohort-analysis
Build a full SaaS cohort analysis from a CRM (Attio/Stripe/CSV) joined to revenue (Stripe/Attio/CSV). Outputs a styled Excel workbook with conditional formatting (Customer Churn, MRR Churn, CAC Payback) plus per-section CSVs. Use when the user says "/cohort-analysis", "build a cohort table", "cohort analysis for "…
linkedin-self-improvement-loop
A build-measure-learn loop for your LinkedIn. Ingests your Creator analytics export, keeps a persistent belief model of what drives your reach and engagement, reconciles last cycle's beliefs against the new data, proposes ONE experiment to run next, and hands draft briefs to a drafting skill. Run it on a cadence and…