Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/cboone/agent-harness-plugins/commitnpx skills add cboone/agent-harness-plugins --skill commitgit clone --depth 1 https://github.com/cboone/agent-harness-pluginsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00077 | $0.02606 |
| Opus 5 | $0.00039 | $0.01303 |
| Sonnet 5 | $0.00015 | $0.00521 |
| Haiku 4.5 | $0.00008 | $0.00261 |
Grade A, and why
commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 231 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Commit
Create smart, context-aware git commits with conventional commit messages.
Core Principle: Small Logical Chunks
Always prefer committing in the smallest logical chunks that are appropriate. Each commit should represent a single coherent change: one bug fix, one new function, one refactor, one documentation update, etc. Do not batch unrelated changes into a single commit.
Why this matters:
- Small commits are easier to review, revert, cherry-pick, and bisect.
- Each commit tells a clear story about one thing that changed and why.
- When something breaks, small commits make it straightforward to identify the cause.
What constitutes a "logical chunk":
- A single bug fix (even if it touches multiple files)
- A single new feature or capability
- A refactor that moves or renames code without changing behavior
- A documentation update
- A configuration or tooling change
- Test additions or updates for a specific feature
What does NOT belong in the same commit:
- A bug fix mixed with an unrelated refactor
- A new feature combined with formatting changes to unrelated files
- Documentation updates bundled with code changes they do not describe
Options
The user may provide these options inline:
- --push: Commit and push to remote after committing
- --staged: Commit only staged changes (ignore unstaged changes)
- --plan: Commit only the plan file
- --all: Stage and commit all changes (including untracked files)
Workflow
1. Check for Changes
Run these commands in parallel to understand the current state:
# See all changed and untracked files
git status
# See staged changes
git diff --cached
# See unstaged changes
git diff
# See recent commit messages for style reference
git log --oneline -10
If there are no changes at all (no staged, unstaged, or untracked files), report that there is nothing to commit and stop.
2. Determine What to Commit
First, resolve which files are in scope using these rules in order:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 231 lines · 77 tokens per session scan A adee8667fe17
commit is a skill published in the GitHub repository cboone/agent-harness-plugins (2 stars, last pushed 1mo ago), licensed MIT. It adds 77 tokens to every session and 2,606 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
tavs-setup
TAVS setup, configuration, and profile management assistant. Three workflows: (1) Interactive setup wizard for first-time configuration — detects terminal and agent, asks targeted questions, applies settings. (2) Targeted config changes — modify individual settings with backup, preview, and verification. Supports both…
frame-macos-notification
拟真 macOS 通知 banner + app icon + 标题正文, 适合 video overlay / 产品发布预告.
release-peekaboo
Peekaboo release: notarization, npm/GitHub release, appcast, verify, closeout.
chat-complex-documents
Chat with and search your complex documents — ask questions, extract tables and fields, and get answers grounded in the source. Connects the hosted Unstructured Transform MCP server to parse, structure, and enrich PDFs, Word/Excel/PowerPoint, images, scanned files, emails, and 60+ other formats into clean, AI-ready…
best-practices
Searchable knowledge base of 152+ programming best practices across 30+ languages and frameworks. BM25-powered search over curated resources from industry leaders (Google, Airbnb, Uber, Mozilla, Shopify, OWASP).
macos-tools
Native macOS integrations via AppleScript. No API keys needed — works on any Mac.