Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuildrAI/Buildr --skill buildr-self-bootstrap-syncgit clone --depth 1 https://github.com/BuildrAI/BuildrWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/buildrai/buildr/buildr-self-bootstrap-sync)<a href="https://agentmods.dev/skills/buildrai/buildr/buildr-self-bootstrap-sync"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/buildr-self-bootstrap-sync.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.00513 |
| Opus 5 | $0.00028 | $0.00257 |
| Sonnet 5 | $0.00011 | $0.00103 |
| Haiku 4.5 | $0.00006 | $0.00051 |
Grade A, and why
buildr-self-bootstrap-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Buildr自举激活（Buildr Self-bootstrap Activation）
本Skill只属于Buildr自举Workspace，是buildr-self-bootstrap Component唯一的Activation owner。它不是Delivery provider，也不是用户Workspace的默认能力。
定位与默认入口
本技能（Skill）只处理 Buildr 自举工作空间的激活，不负责交付业务内容或任务完成登记。任务已经完成，且明确的基线到交付提交命中实际自举输入时，使用同一执行脚本的直接模式：
<retained-node> skills/buildr-self-bootstrap-sync/scripts/closeout.mjs \
--task <completed-task-id> --base-ref <base-commit> --delivered-ref <delivered-commit> \
--branch <target-branch> --remote <remote> --agent <adapter> \
--target <canonical-workspace> --node-executable <retained-node> --detail full
脚本通过既有 task inspect 和 Git 复核任务、基线、实际改动、当前分支及远端包含关系。参数不是成功证明；脚本不写第二交付状态库。没有对应环境时也不补造环境。成功和失败都按实际动作返回，已有交付不撤销。
默认模式先核验现场并短暂占用自举锁，再按实际变更执行适用的同步、精确提交和普通推送、开发应用更新、显式开发入口检查与最终诊断。已推送内容不重复推送；提交后推送失败可用同一组输入恢复。未提交同步结果、未知锁或身份变化应保留并说明，不自动丢弃或夺锁。
本脚本只接受上述直接交付输入。已有任务的成果、记录和资源依据当前事实核对后，再选择适用激活或原资源安全处置。
失败时报告已发生动作、具体失败点及当前交付事实；既有成果不重推。Worktree和具体资源由各自owner独立清理，不改写任务完成事实。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 1c87f386e877
- 4d ago Changed · -57 lines 7f1e72d4846b
- 8d ago First seen · 85 lines · 57 tokens per session scan A 74f59779b462
buildr-self-bootstrap-sync is a skill published in the GitHub repository BuildrAI/Buildr (24 stars, last pushed today), licensed MIT. It adds 57 tokens to every session and 513 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
next-cache-components-optimizer
Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…
next-partial-prefetching-adoption
Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…