Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add corezoid/corezoid-ai-plugin/plugin install corezoidWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/corezoid/corezoid-ai-plugin/corezoid-edit)<a href="https://agentmods.dev/skills/corezoid/corezoid-ai-plugin/corezoid-edit"><img src="https://agentmods.dev/badge/skills/corezoid/corezoid-ai-plugin/corezoid-edit.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00098 | $0.03325 |
| Opus 5 | $0.00049 | $0.01663 |
| Sonnet 5 | $0.00020 | $0.00665 |
| Haiku 4.5 | $0.00010 | $0.00332 |
Grade A, and why
corezoid-edit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Edit an Existing Corezoid Process
You are a specialist in modifying Corezoid BPM processes using the corezoid MCP server.
Identify the Process (MANDATORY FIRST STEP)
Before doing anything else, resolve PROCESS_PATH:
-
Check whether the user already provided a process identifier — a file path, process name, or process ID — in the current message or conversation history.
-
If no identifier is provided, ask:
"Please specify the process — you can provide a file path (e.g.
123_payment.conv.json), a process name, or a process ID."Do not call any MCP tools until the user provides an identifier.
-
If the user gave a name or ID (not a file path), search the local working directory for the matching
.conv.jsonfile using thefindorgrepBash tools (the project is already pulled locally). -
Once
PROCESS_PATHis known and the file exists locally, open and analyze it before making any changes.
Step 1: Analyze the Process
Open and analyze PROCESS_PATH to understand the current structure and logic. Pay attention to:
- Processes related to the requested changes
- IDs of processes that may be called from the target process
- Existing naming conventions and patterns
Step 2: Implement the Changes
Apply changes to PROCESS_PATH.
Core rules
- Connect nodes only through the
gofield - Every node that can fail must have
err_node_id— point it directly at a Final Error node (obj_type: 2) unless the error path needs logic (reply to caller, retry routing). Never create an Escalation node (obj_type: 3) that only contains a barego— that is a passthrough anti-pattern flagged bylint-process - Node IDs must be unique 24-character hex strings:
^[0-9a-f]{24}$. Alwayspull-processbefore editing and reference only canonical, server-assigned IDs — IDs you invented in a previous push were reassigned by the server and no longer exist. New nodes added now get placeholder IDs that the server will likewise reassign on push. Existing nodes' IDs are preserved. See Node ID Lifecycle. - Use descriptive node
titlevalues (e.g., "Call Payment Process", not "RPC") - Leave new nodes at placeholder coordinates
x: 0, y: 0—push-processauto-places them near their graph neighbours (preserve mode: existing nodes keep their positions; inserting a node above an existing one slides that node's downstream subtree down to open a gap; error nodes land to the right of their parent). Keep thex/yof nodes you are NOT moving — do not rebuild the scheme without them. As a safety net, if the file reaches push with every node's coordinates missing, push re-hydrates them from the server (reportsRestored N node coordinate(s)) so a laid-out process is never re-arranged by accident. Only when auto-placement is disabled (COREZOID_AUTOLAYOUT=off) position nodes manually — error nodes to the right of their parent (x + 300). Do NOT re-layout the whole process unless the user asks — see thecorezoid-node-layoutskill's authorship policy
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 177 lines · 98 tokens per session scan A 840e4d9e33fb
corezoid-edit is a skill published in the GitHub repository corezoid/corezoid-ai-plugin (73 stars, last pushed yesterday), licensed MIT. It adds 98 tokens to every session and 3,325 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
stop-that-shit
Keep coding agents focused on requested and necessary work. Use when a request sets a read-only, answer-only, file, action, or stopping boundary; when evidence shows scope creep, speculative hardening, unnecessary hashing or dependencies, repeated audit loops, or valueless delegation; or when the user invokes Stop…
stss
Reduce defensive disclaimers, stacked hedging, and self-protective narration in proposals and decision-facing writing. Use when the user asks to rewrite or audit a proposal, plan, research contribution, executive summary, or similar text for directness. Do not use for ordinary code work or unrelated prose.
superloopy-loop
Use Superloopy's lightweight strict-evidence loop for Codex tasks that need durable progress, criteria, and artifact-backed completion.
superloopy-clone
Use when the user asks for Superloopy clone or asks to clone, rebuild, reverse-engineer, replicate, or copy a website or page into a Superloopy-governed implementation. Triggers on "loopy clone", target URLs plus requests such as "clone this site", "rebuild this page", "make a copy of this website", "pixel-perfect…
superloopy-doctor
Use when diagnosing Superloopy doctor, install, wrapper, plugin cache, hook bootstrap, bundled agents, marketplace, Codex, Claude Code, stale-version, evidence-floor, or host-wiring health problems.
inspect-codex-trajectory
Inspect or show a local Codex task trajectory, including turns, approximate model steps, assistant messages, reasoning summaries, tool calls, failures, compaction, token usage, and timing. Use when the user asks for a trajectory, execution trace, task timeline, slow-tool analysis, visual event ledger, or live…