Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/congbao/failure-memory/recall-failure-lessonsnpx skills add CongBao/failure-memory --skill recall-failure-lessonsgit clone --depth 1 https://github.com/CongBao/failure-memoryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/congbao/failure-memory/recall-failure-lessons)<a href="https://agentmods.dev/skills/congbao/failure-memory/recall-failure-lessons"><img src="https://agentmods.dev/badge/skills/congbao/failure-memory/recall-failure-lessons.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.00438 |
| Opus 5 | $0.00017 | $0.00219 |
| Sonnet 5 | $0.00007 | $0.00088 |
| Haiku 4.5 | $0.00003 | $0.00044 |
Grade A, and why
recall-failure-lessons scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Recall Failure Lessons
Call recall_failure_lessons once with compact task evidence in text. Add
component only when it is already known. Do not invent an invariant, cause, or
prevention action merely to make the query look complete.
Normally omit mode, top_k, and min_relevance; the tool applies its calibrated
relevance threshold, authoritative lifecycle filter, pattern collapse, and dynamic
zero-to-three result limit.
Treat top_k only as a maximum and min_relevance as an optional stricter floor.
Never lower the threshold, broaden, or retry to fill a result list.
Accept an empty result and continue. Apply returned lessons only as proposed cautions after validating them against the current task.
If later evidence in the same task clearly establishes whether the recall was applied,
not applicable, contradicted, or prevented/failed to prevent recurrence, call
report_memory_outcome once with the returned attempt_id, the affected returned
lesson IDs, a compact evidence_code, the supported source and evidence_kind, and
an observation window of 1, 7, or 30 days. Omitted optional outcome metadata uses the
tool's documented defaults. Do not pause the task to manufacture an outcome or report
one when it remains unknown.
Only when the tool capability is absent before invocation, pass the identical JSON on
standard input to failure-memory recall once. Do not use the fallback after a timeout
or ambiguous tool failure. After such a tool failure, continue without memory guidance
and mention it once only when relevant. If the command is absent, continue without
memory guidance and mention the installation issue once.
Do not inspect plugin files or SQLite, install anything, create temporary files, or include raw prompts, secrets, personal data, or unnecessary paths. Similarity is not proof, policy authority, or permission to merge lessons.
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 38 lines · 35 tokens per session scan A ae172319fcf2
recall-failure-lessons is a skill published in the GitHub repository CongBao/failure-memory (0 stars, last pushed 5d ago), licensed MIT. It adds 35 tokens to every session and 438 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.
Other skills, from other repositories
claude-api
Build, debug, and optimize Claude API / Anthropic SDK apps. Apps built with this skill should include prompt caching. Also handles migrating existing Claude API code between Claude model versions (4.5 → 4.6, 4.6 → 4.7, retired-model replacements). TRIGGER when: code imports anthropic/@anthropic-ai/sdk; user asks for…
agent-coordination
Find other agents, list participants in a conversation, send routed messages, attach files, and recover earlier conversation context (history / resolve a fuzzy reference / read a quoted message / read compressed summaries). Use whenever you need to delegate to another agent, address a peer in a multi-agent…
claim-agent-ownership
Orchestrator skill for resolving multi-daemon binding contention. Use when you (the orchestrator) detect an agent.binding.contested sync event indicating two daemons are racing for the same agent — explicitly rebind ownership to a chosen target daemon so subsequent dispatches route deterministically. Implements Gap…
image-generate
Generate an image from a text prompt via the cloud LLM image proxy, persist it as a content-addressed workspace asset, and return a ContentBlock that downstream renderers can attach. Use whenever the user asks "draw / generate / make an image of …", an agent needs a diagram / illustration as a follow-up artifact, or a…
assets
Locate, inspect, and read content-addressed workspace assets — search by filename/metadata, describe before reading bytes, then read bounded ranges. Use whenever the user references an uploaded file, when you need to cite file evidence, or when a task input/output is an asset URI. Executes via the cloud asset CLI and…
human-approval
Request human approval before performing a SAFETY-CRITICAL, IRREVERSIBLE, or SCOPE-EXPANDING action — submit a structured context (action, scope, risk, consequence) plus options, then STOP the current turn. The platform redispatches the agent after the human decides. NEVER use for routine deliverables (writing docs /…