Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CCDawn/codex-skills --skill briefbound-simplification-auditgit clone --depth 1 https://github.com/CCDawn/codex-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ccdawn/codex-skills/briefbound-simplification-audit)<a href="https://agentmods.dev/skills/ccdawn/codex-skills/briefbound-simplification-audit"><img src="https://agentmods.dev/badge/skills/ccdawn/codex-skills/briefbound-simplification-audit.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00931 |
| Opus 5 | $0.00026 | $0.00465 |
| Sonnet 5 | $0.00011 | $0.00186 |
| Haiku 4.5 | $0.00005 | $0.00093 |
Grade A, and why
briefbound-simplification-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Briefbound 精简审计
目标
只读审计仓库或子系统中的可移除复杂度，形成按价值和风险排序的精简队列。它补充项目健康审查，不替代 briefbound-project-review。
Briefbound task contract
- Context Boundary: 仓库/子系统范围、入口与依赖、已知架构约束、生成代码/第三方代码排除范围。
- Output Contract: 证据化复杂度 findings、保留项、精简候选队列和后续 owner。
- Allowed Action: 只读；不修改文件、不卸载依赖、不移动分支、不改 index。
- Success Evidence: 每个候选都有路径/引用/依赖或调用证据，并说明收益、风险和验证要求。
- Stop Condition: 审计范围不明、缺少源码/依赖证据、建议涉及行为或架构取舍、或问题主要属于正确性/安全/性能。
- Route Out:
briefbound-project-review、briefbound-performance-engineering、briefbound-planning、对应开发 owner、briefbound-router或 BLOCKED。
统一调用契约
- 只处理 Briefbound task contract 范围；不匹配时回
briefbound-router或更具体 owner，复合任务不吞其他 owner。 - 用户可见内容默认中文，完成只报状态、产出、证据和剩余风险；代码、命令、路径、错误原文、API/协议、skill 名和枚举保留原样；Route Out 仅以 Briefbound task contract 为准，末行写
下一步建议: <一个具体动作>。
审计规则
- 先定位入口、依赖清单和高变更/高耦合区域，不为“全面”盲扫全仓。
- 重点检查：重复依赖、标准库/平台已有能力、单实现接口、单产品工厂、只转发的 wrapper、废弃 flag/config、并存的 legacy 路径、重复事实源和跨文件样板。
- 排除生成代码、vendored/third-party 代码、迁移期间明确保留的兼容层，以及安全、无障碍、数据恢复和真实平台适配约束。
- 每项区分“确认可删”“需 probe”“架构取舍”；证据不足不能写成确定结论。
- 正确性、测试、安全和总体健康交
briefbound-project-review；需实测的性能问题交briefbound-performance-engineering；实施方案交briefbound-planning。
优先级：P1 高收益、P2 中收益、P3 低收益、需证据。
输出
精简审计:
- 结论: LEAN / OPPORTUNITIES_FOUND / NEEDS_EVIDENCE / BLOCKED
- 范围与排除项: ...
Findings:
- P1/P2/P3/需证据: [位置] 复杂度来源；证据；最小替代；收益；风险。
保留项:
- 必须存在的复杂度及原因。
精简队列:
- 1. ... [SAFE_DIRECT / PLAN_THEN_EXECUTE / DEFERRED / BLOCKED]；验证条件...
组合路由:
- 项目健康/正确性/安全 -> briefbound-project-review
- 性能测量 -> briefbound-performance-engineering
- 多项结构调整 -> briefbound-planning
下一步建议: <一个具体动作>
只在可复现计数后报告精确净减行数或依赖数，不拿外部 benchmark 冒充当前仓库收益。
本 skill 的复杂度视角借鉴 Ponytail（MIT），并按 Briefbound 的中文输出、证据和 owner 契约重新组织。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 64 lines · 53 tokens per session scan A c0936b4e09fe
briefbound-simplification-audit is a skill published in the GitHub repository CCDawn/codex-skills (4 stars, last pushed 25d ago), licensed MIT. It adds 53 tokens to every session and 931 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
chinese-code-review
A Chinese-language code-review communication guide with templates and severity levels for review comments.
receiving-code-review
A guide for handling code-review feedback carefully. Code review is the process of checking proposed changes before they are accepted into a project.
requesting-code-review
A code-review procedure for checking completed work against its requirements before it spreads or is merged. A code reviewer is a person or agent who looks for defects and missing parts.
code-review-self
A self-review checklist for checking code before committing it or opening a pull request, which is a request for teammates to review proposed changes.
legacy-safe-edit
A set of practices for changing existing or old codebases safely. It focuses on finding dependencies, following local coding conventions, and making small changes that can be checked and reverted.
security-review
A code-security review guide covering common risks such as injection, weak login protection, unauthorized access, and sensitive-data exposure. It is written in Chinese and includes rules and examples for safer code.