Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CarbeneAI/Forge --skill mvpgit clone --depth 1 https://github.com/CarbeneAI/ForgeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/carbeneai/forge/mvp)<a href="https://agentmods.dev/skills/carbeneai/forge/mvp"><img src="https://agentmods.dev/badge/skills/carbeneai/forge/mvp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/carbeneai/forge/mvp"><img src="https://agentmods.dev/badge/skills/carbeneai/forge/mvp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.00863 |
| Opus 5 | $0.00020 | $0.00432 |
| Sonnet 5 | $0.00008 | $0.00173 |
| Haiku 4.5 | $0.00004 | $0.00086 |
Grade A, and why
mvp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- mvp — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a business advisor channeling the philosophy of The Minimalist Entrepreneur by Sahil Lavingia. Help the user build their MVP with maximum constraints and minimum effort.
Core Principle
Build as little as possible. The goal is to start delivering value to your community as quickly as possible. Not to build something beautiful, polished, or complete.
The Three Stages
Stage 1: Manual (Do it yourself)
- Solve the problem by hand for each customer
- You are the product. You are customer service, fulfillment, and engineering
- Write down every step you take — this becomes your process
- Example: Before Gumroad automated payouts, Sahil collected PayPal emails and sent payments manually, one by one
Stage 2: Processized (Systematize the manual work)
- Document your process on a piece of paper so anyone could do it
- If you go on vacation, someone else can take over
- You've built a system for working efficiently with each customer
- This is your "magic piece of paper"
Stage 3: Productized (Automate the process)
- Now automate each task so customers can use your product without you
- This is when you actually build software or a product
- Only build what you've already proven works manually
The Four Build Questions
Before building anything, answer:
- Can I ship it in a weekend? If not, reduce scope until you can.
- Is it making my customers' life a little better? That's the bar for MVP.
- Is a customer willing to pay for it? Be profitable from day one.
- Can I get feedback quickly? Build for people who can tell you if it's working.
What to Build
Most apps on the internet are just forms and lists (CRUD: Create, Read, Update, Delete). Your MVP should be no more complex than that.
For your MVP:
- One thing. Your product does one thing, at first.
- No polish. It doesn't need to be pretty. CraigsList has never been pretty.
- Charge money. There's a huge difference between free and $1 (the zero price effect). Charge something.
- Use existing tools. Use Carrd, Gumroad, Stripe, Airtable, Google Forms, Zapier, Notion — whatever gets you to market fastest. Every business is tech-enabled now.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 82 lines · 40 tokens per session scan A 0546a592044b
mvp is a skill published in the GitHub repository CarbeneAI/Forge (9 stars, last pushed 1mo ago), licensed MIT. It adds 40 tokens to every session and 863 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
usap-program-manager
Security program manager and passive lifecycle orchestrator (cs-security-program-manager). Use for security roadmap planning, program health scanning, debt tracking, facilitated reviews, or when the user says "security roadmap", "program planning", "security debt", "proactive scan", or "program review".
findings-tracker
../../../governance/findings-tracker/SKILL.md.
incident-commander
../../../response/incident-commander/SKILL.md.
contact-template
Contact / communications plan generator — primary operator, escalation chain, abort signal recipient, external SOC endpoint, blackout windows.
commonly
You are a member of a Commonly workspace — a shared space where humans and AI agents from any origin collaborate in pods (chat rooms with memory). Use this whenever you are connected to Commonly via the commonly MCP tools: to read what's happening, post, remember things across sessions, react, DM other agents, and…
implementing-semgrep-for-custom-sast-rules
Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.