Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add christopherkarani/ryk --skill initgit clone --depth 1 https://github.com/christopherkarani/rykWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/christopherkarani/ryk/init)<a href="https://agentmods.dev/skills/christopherkarani/ryk/init"><img src="https://agentmods.dev/badge/skills/christopherkarani/ryk/init/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/christopherkarani/ryk/init"><img src="https://agentmods.dev/badge/skills/christopherkarani/ryk/init.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00334 |
| Opus 5.5 | $0.00000 | $0.00134 |
| Sonnet 5.5 | $0.00000 | $0.00067 |
| Haiku 4.5 | $0.00000 | $0.00033 |
Grade A, and why
init scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- ryk-init — 91% identical, 8 lines differ
What it actually says
init
Create or repair an ryk policy for the current repository.
When to use
Use this skill when starting a new project, when .ryk/policy.yaml is missing, or when you want to reset to a known-good policy preset.
Commands
Initialize an ryk policy with the Claude Code preset:
ryk init --preset claude-code
Validate the resulting policy:
ryk policy check .ryk/policy.yaml
Preset fallback
If the claude-code preset is not available in your ryk build, use the closest plugin-safe preset:
ryk init --preset generic-agent
Or, for stricter defaults:
ryk init --preset strict-local
The generic-agent preset is a conservative starting point for local coding agents. Review the generated .ryk/policy.yaml before trusting it.
Safety rules
- Do not silently overwrite
.ryk/policy.yaml. If a policy already exists, review it first. - If you need to recreate it, back up the old file:
cp .ryk/policy.yaml .ryk/policy.yaml.bak - Always run
ryk policy checkafter creating or editing a policy.
Notes
- This skill modifies only
.ryk/policy.yamlin the current workspace. - No host configuration is changed.
- The plugin does not collect telemetry. Release CLI commands may record only fixed anonymous metadata; see
docs/telemetry.md. - The generated policy does not contain real secrets.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 54 lines · 0 tokens per session scan A 5043cf88a71d
init is a skill published in the GitHub repository christopherkarani/ryk (42 stars, last pushed 1mo ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 334 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
beacon-memory-distill
Turn recorded agent sessions (Beacon traces from Claude Code, Cursor, Codex, OpenCode, and other harnesses) into reviewed, reusable project memory. Scores selected traces, reads the source trace behind each high-signal candidate, drafts a grounded lesson, and approves it only after the user confirms. Use when the user…
create-custom-grader
Use when converting an existing benchmark, rubric, verifier, task YAML/JSON, or domain check into SkillEvaluator BYOG/BYOT custom evaluation.
agent-safety
Use when bounding an LLM agent that already runs — scoping its task domain, gating tools to least privilege, defending against prompt injection in untrusted web/email/RAG text, requiring human approval on irreversible actions, capping runtime and cost, or triaging what it already did. NOT building the loop, tools, or…
swiftui-expert-skill
Write, review, or improve SwiftUI code following best practices for state management, view composition, performance, macOS-specific APIs, and iOS 26+ Liquid Glass adoption. Use when building new SwiftUI features, refactoring existing views, reviewing code quality, or adopting modern SwiftUI patterns.
varlock-claude-skill
Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits.
blueprint-work-order
Create a work-order for isolated subagent execution, optionally linked to a GitHub issue. Use when breaking a PRP into delegatable tasks or spawning from an issue.