Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add coltonbearden/carrel --skill redaction-and-provenancegit clone --depth 1 https://github.com/coltonbearden/carrelWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/coltonbearden/carrel/redaction-and-provenance)<a href="https://agentmods.dev/skills/coltonbearden/carrel/redaction-and-provenance"><img src="https://agentmods.dev/badge/skills/coltonbearden/carrel/redaction-and-provenance/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/coltonbearden/carrel/redaction-and-provenance"><img src="https://agentmods.dev/badge/skills/coltonbearden/carrel/redaction-and-provenance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.01069 |
| Opus 5 | $0.00039 | $0.00535 |
| Sonnet 5 | $0.00016 | $0.00214 |
| Haiku 4.5 | $0.00008 | $0.00107 |
Grade B, and why
redaction-and-provenance scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- It needs tesseract (matches are located by OCR-ing the render); exit 3 → `sudo apt install tesseract-ocr`. Scanned PDFs work the same way; born-digital ones lose their text layer deliberately. How it starts
The opening of the file, as written. The whole thing — 48 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Redaction and provenance with carrel
carrel redact removes matches; carrel sign manifest / carrel sign verify prove what left your hands. This skill is the set of caveats that turn those two commands into a defensible process. Run carrel redact --help and carrel sign --help before composing flags.
1. Text files: replacement you can diff
For txt/md/html/csv/xml/json, carrel redact SRC --builtin email,phone --pattern 'ACME-[0-9]{6}' -o OUT replaces each match with --replacement (default █). JSON and XML are re-parsed afterwards so the output stays valid. Verify with grep -c -E PATTERN OUT (expect 0) and carrel diff SRC OUT to see exactly which lines changed — the diff is your review artifact.
Builtins: email, phone, ssn, ipv4, cc. Custom --pattern is a Python regex; test it on one file first. --fail-empty makes zero matches an exit-5 error, which is the right default in scripts.
2. PDFs: true-raster redaction, and what that costs
A PDF redaction that draws a black box over text leaves the text in the file — copy-paste or pdftotext recovers it. carrel does not do that. carrel redact SRC.pdf ... rasterizes every page, paints over the matched words, and writes a PDF with no text layer at all. Consequences to tell the user:
- Nothing is recoverable from the output — that is the point.
- The output is an image PDF: not searchable, not selectable, larger, and its metadata (title/author) is not carried over.
carrel inspect OUT --jsonshowspagesbut notitle. - It needs tesseract (matches are located by OCR-ing the render); exit 3 →
sudo apt install tesseract-ocr. Scanned PDFs work the same way; born-digital ones lose their text layer deliberately. - Verification:
carrel convert OUT --to txt -o check.txtmust yield an empty/near-empty file. A PDF redaction with zero matches still rasterizes — check the JSON match counts, and when they are 0 say so instead of shipping a pointless image PDF.
Re-OCR afterwards when the recipient needs a searchable file: carrel ocr OUT.redacted.pdf --to pdf -o OUT.redacted.searchable.pdf. OCR reads only what is visible, so painted-over words cannot come back — but grep the OCR text (carrel convert ... --to txt) for your patterns anyway; near-misses (a partially covered digit run) are what you are looking for.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 48 lines · 78 tokens per session scan B fc4cc67b01f5
redaction-and-provenance is a skill published in the GitHub repository coltonbearden/carrel (1 stars, last pushed today), licensed MIT. It adds 78 tokens to every session and 1,069 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
document-processing
Use when the deliverable is a document's bytes or its literal content — text/tables out of PDFs, AcroForm fill and flatten, page merge/split, PDF/DOCX from templates, OCR of image-only scans. NOT schema-typed fields pulled from text (that is structured-extraction), NOT signature routing (e-signature) or spreadsheet…
report-to-pdf
Narrow conversion skill. Invoke only when the user explicitly asks to convert an existing Data Analytics report, dashboard, or inline chart export into a PDF artifact.
pdf-official
Use this skill whenever a PDF file is being produced, opened, transformed, filled, or read. That includes: extracting text or tables from an existing PDF; combining, carving, rotating, cropping, or watermarking pages; composing a fresh PDF (report, invoice, certificate); filling AcroForm fields or overlaying text onto…
paddleocr-doc-parsing
A document-parsing tool configuration for extracting structured Markdown or JSON from complex PDFs and document images, including tables, formulas, charts, and multi-column pages.
paddleocr-text-recognition
An optical character recognition tool configuration for extracting text from images, photos, scans, screenshots, and scanned PDFs. OCR means converting text visible in an image into machine-readable text.
Read, extract, split, merge, rotate, watermark, fill, OCR, or create PDF files with verification of page counts and text extraction.