Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add buildingopen/bouncer --skill skillgit clone --depth 1 https://github.com/buildingopen/bouncerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/buildingopen/bouncer/skill)<a href="https://agentmods.dev/skills/buildingopen/bouncer/skill"><img src="https://agentmods.dev/badge/skills/buildingopen/bouncer/skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/buildingopen/bouncer/skill"><img src="https://agentmods.dev/badge/skills/buildingopen/bouncer/skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00121 | $0.00847 |
| Opus 5.5 | $0.00048 | $0.00339 |
| Sonnet 5.5 | $0.00024 | $0.00169 |
| Haiku 4.5 | $0.00012 | $0.00085 |
Grade A, and why
bouncer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bouncer - On-Demand Quality Audit
Works for any task type: code, creative work, videos, advice, research, operations.
Mode Selection
- Quick (default):
/bounceror "score" or "audit" - Deep:
/bouncer deepor "deep audit" or "verify everything"
Quick Audit
Step 1: Gather context (adapt to the task type)
For code changes: Run git diff:
git diff --stat --no-color
git diff --no-color
git diff --cached --stat --no-color
git diff --cached --no-color
For non-code work (videos, stories, advice, research): Skip git diff. The assistant_text summary is the primary input.
Step 2: Read CLAUDE.md from the current working directory (if it exists).
Step 3: Build a JSON object and pipe it to the bouncer script:
assistant_text: THE MOST IMPORTANT FIELD. A thorough summary of what you did this session. Be specific:- For code: files changed, bugs fixed, tests written, commands run
- For creative: what you created, the goal, the audience, key decisions made
- For videos: the script/story, visual choices, duration, format, iterations
- For advice: the question asked, your recommendation, reasoning, alternatives considered
- For research: what you found, sources checked, conclusions drawn
- CRITICAL: If the staged diff includes changes from prior sessions, note this.
diff_stat: Git diff stat (empty string if no code changes or not applicable)diff_text: Git diff (empty string if not applicable)context: The CLAUDE.md contents (empty string if no CLAUDE.md)
Step 4: Run:
echo '<the JSON object>' | python3 ~/.claude/skills/bouncer/scripts/bouncer-check.py
Step 5: Present results exactly as printed.
Deep Audit
For code-heavy tasks where you want Gemini to independently verify claims.
Step 1: Gather context (same as quick audit).
Step 2: Read CLAUDE.md from the current working directory (if it exists).
Step 3: Build a JSON object with:
assistant_text: Same thorough summary as quick auditdiff_text: Git diff (empty string if not applicable)context: The CLAUDE.md contents (empty string if no CLAUDE.md)cwd: The current working directory (absolute path)
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 92 lines · 121 tokens per session scan A e3cdf567e1d0
bouncer is a skill published in the GitHub repository buildingopen/bouncer (5 stars, last pushed 6mo ago), licensed MIT. It adds 121 tokens to every session and 847 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-review-workflow
Review a change in a fixed order — context, correctness, security, then style — and write feedback that is actionable and ranked by severity. Use when the user asks for a code review, wants a pull request or diff reviewed before merge, asks whether a change is safe to ship, or when the task involves reviewing a patch…
react-expert
Expert-level React development with hooks, performance optimization, state management, and modern patterns. Use when the user mentions frontend, hooks, JSX, TypeScript, or Next.js, or when the task involves Modern React, State Management, Forms, or Performance Optimization.
development
An index of programming guidance for Python, Go, Rust, TypeScript, Java, C++, and shell scripting.
bionic-decision-engine
Unified mathematical arbitrator for all resource allocation decisions — money, time, energy, relationships. Absorbs 46 decision protocols + 24 strategy protocols into one dense engine.
trading-risk-gate
Unified pre-trade safety gate: Ruin check (Law #1), ergodicity audit, and win-rate dominance validation. Absorbs: ergodicity-check, law-of-ruin, win-rate-dominance.
video-perception
Use when the user mentions a video file (.mp4, .mov, .avi, .mkv, .webm), a YouTube URL, asks to watch/analyze/review a video, or references video content in conversation.