Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/cdbattags/ai/github-repo-triagenpx skills add cdbattags/ai --skill github-repo-triagegit clone --depth 1 https://github.com/cdbattags/aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cdbattags/ai/github-repo-triage)<a href="https://agentmods.dev/skills/cdbattags/ai/github-repo-triage"><img src="https://agentmods.dev/badge/skills/cdbattags/ai/github-repo-triage.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.01640 |
| Opus 5 | $0.00033 | $0.00820 |
| Sonnet 5 | $0.00013 | $0.00328 |
| Haiku 4.5 | $0.00007 | $0.00164 |
Grade A, and why
github-repo-triage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub Repo Triage
Phase 1: Reconnaissance
Gather full state before proposing anything.
# Open issues and PRs
gh issue list --state open --limit 50
gh pr list --state open --limit 50
# Forks (spot community work not submitted as PRs)
gh api repos/{owner}/{repo}/forks --jq '.[].full_name' --paginate
# Recent releases
gh release list --limit 5
# Branches
git branch -a
Present findings as a ranked table with tiers:
| Tier | Criteria |
|---|---|
| 1 - Critical | Security issues, data loss, broken CI |
| 2 - High | Bugs affecting users, ready-to-merge PRs |
| 3 - Medium | Feature PRs needing rework, enhancements |
| 4 - Low | Nice-to-have, docs, cosmetic |
| 5 - Close | Won't-fix, stale, already resolved |
Phase 2: PR Assessment
For each open PR, evaluate before touching code:
- Read the diff:
gh pr diff <N> - Check quality: syntax errors, missing error handling, debug logging, unrelated changes mixed in
- Check base: is it against current HEAD or a stale branch?
- Check tests: does it include tests? Do they follow existing patterns?
- Check author info:
gh api repos/{owner}/{repo}/pulls/<N>/commits --jq '.[].commit.author'
Decision Matrix
| Quality | Tests | Action |
|---|---|---|
| Good, clean | Yes | Cherry-pick as-is with attribution |
| Good logic, minor issues | Yes/No | Cherry-pick, fix issues, add tests |
| Good idea, bad implementation | No | Rewrite from scratch, credit author |
| Broken or wrong approach | N/A | Close with explanation |
Phase 3: Cherry-Pick Workflow
When manually integrating a PR (not using GitHub merge):
# 1. Make the code changes (edit files directly, don't git cherry-pick)
# 2. Add tests if missing
# 3. Run the test suite
# 4. Stage only the relevant files
git add <files>
# 5. Commit with attribution and auto-close
git commit -m "$(cat <<'EOF'
feat: description of what was added
Longer explanation if needed.
Co-authored-by: Full Name <[email protected]>
Closes #N
EOF
)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 234 lines · 66 tokens per session scan A 6ffaa967a99f
github-repo-triage is a skill published in the GitHub repository cdbattags/ai (4 stars, last pushed 6mo ago), licensed MIT. It adds 66 tokens to every session and 1,640 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cognitive-version-snapshot
为L1文档创建新的x.0版本快照，标志一次重大变更的里程碑。触发词：「创建新版本」「打一个快照」「这是v2.0了」「这次改动很大」「记录一下这个版本」。.
template-helpers
Catalog of the reusable building blocks shipped with this Android template — BaseActivity/BaseFragment, the helpers/ extension files (navigation, lifecycle, toast, snackbar, dialogs, images, permissions, theme, locale, settings intents, date, delay), common/ (Firebase, network, observers), and…
android-feature
Workflow for implementing a new Android feature, screen, fragment, activity, dialog, adapter, or enhancement in this XML/MVVM template. Use whenever the user asks to add, build, implement, or extend functionality — before writing any code. Covers planning, the MVVM/MVI skeleton, the Android configuration checklist…
android-new-project
Workflow for turning a fresh copy of this Android template into a new app — renaming the package/namespace/applicationId, branding (icons, splash, palette, fonts), Firebase setup, signing config, stripping unused sample screens, and verifying the foundation. Use when the user says they are starting a new app…
android-upgrade
Workflow for changing an existing working Android project — upgrading dependencies, AGP/Gradle or SDK levels, migrating deprecated APIs, refactoring, and fixing bugs, without breaking what already works. Covers baseline verification, scoping the diff, targetSdk behaviour changes, SharedPreferences/Room data…
android-build-config
Gradle and build configuration rules for this template — AGP 9 / Gradle 9 DSL (built-in Kotlin, compileSdk block, optimization block instead of minify/proguard), the gradle/libs.versions.toml version catalog, R8 keep rules in keepRules/.keep, gradle.properties defaults, and manifest registration. Use when editing…