Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/corveil/crow/crow-create-ticketnpx skills add corveil/crow --skill crow-create-ticketgit clone --depth 1 https://github.com/corveil/crowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/corveil/crow/crow-create-ticket)<a href="https://agentmods.dev/skills/corveil/crow/crow-create-ticket"><img src="https://agentmods.dev/badge/skills/corveil/crow/crow-create-ticket.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.02196 |
| Opus 5 | $0.00028 | $0.01098 |
| Sonnet 5 | $0.00011 | $0.00439 |
| Haiku 4.5 | $0.00006 | $0.00220 |
Grade B, and why
crow-create-ticket scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
1. Read the config: `cat {devRoot}/.claude/config.json` How it starts
The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Crow Create Ticket
Create a new ticket (GitHub issue via gh, GitLab issue via glab, or Jira work item
via the jira MCP server) for a repo/project in the current Crow workspace,
assigned to the invoking user and labeled crow:auto. For GitHub/GitLab, Crow's
auto-pickup queue then implements it. (Jira's auto-pickup isn't wired — the label is
for parity/board visibility — but the work item is created with an assignee in one
step, which acli could never do; CROW-528.)
Important: Sandbox Bypass
All gh, glab, and git commands require dangerouslyDisableSandbox: true because
they communicate over the network (TLS) or read outside the sandbox-allowed
directories. They will fail with TLS certificate errors otherwise.
Arguments
$ARGUMENTS— the ticket title (required) and an optional body.- The first quoted string is the title.
- Any remaining text (including multiple lines) is the body.
- If no title can be determined, ask the user for one before proceeding.
Examples:
/crow-create-ticket "Fix tab URL hash routing"
/crow-create-ticket "Add JWT validation" The /auth endpoint should reject expired tokens.
Activation
This skill activates when:
- User invokes
/crow-create-ticketcommand - User asks to "create a ticket", "file an issue", or "open an issue" in Crow
Configuration
Configuration is at {devRoot}/.claude/config.json (managed by the Crow app), the
same file used by /crow-workspace. It maps each workspace to a provider/cli/host:
{
"devRoot": "/Users/name/Dev",
"workspaces": {
"Corveil": { "provider": "github", "cli": "gh" },
"MyGitLab": { "provider": "gitlab", "cli": "glab", "host": "gitlab.example.com" }
},
"defaults": { "provider": "github", "cli": "gh" }
}
Provider Detection
Workspace taskProvider |
Tool | Notes |
|---|---|---|
github (or unset) |
gh | — |
gitlab |
glab | workspace host |
jira |
jira MCP |
project jiraProjectKey |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 206 lines · 56 tokens per session scan B ea44d20a1a46
crow-create-ticket is a skill published in the GitHub repository corveil/crow (18 stars, last pushed 3d ago), licensed Apache-2.0. It adds 56 tokens to every session and 2,196 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
orchestrate-monitor
/orchestrate のワーカー監視レシピ(capture 解析・状態判定・介入判断・完了検証)を、bash 3.2 互換の実行可能スクリプトと fixture ベーステストとして資産化したもの。並列ワーカーを監督するときに使う。.
demo-video
CommandMate の 30 秒デモ動画(日本語版・英語版)を隔離環境で全自動生成する。絵コンテ駆動のシーン録画・テロップ焼き込み・ffmpeg 合成・尺検証まで。「デモ動画」「demo video」「デモを録画」等の指示で使う。.
catalog-reconcile
組み込みスラッシュコマンドのカタログを各 CLI の権威ソースへリコンサイルする(--check で規模把握 → --write → 人手レビュー → attestation の採り直し → 検証).
cmate-verify
リポジトリの検証ゲート(lint / typecheck / test / build 等)を .commandmate/verify.yaml に宣言し、worktree の cwd で逐次実行して exit code で合否を判定する。verify.yaml が無いリポジトリでは CI 定義から起案する。作業完了を主張する前の検証や、並列ワーカーの完了判定に使う。.
release
Skill "release" from Kewton/CommandMate, covering リリーススキル, 使用方法, 前提条件, 全体の流れ and この手順が「なぜこの形か」.
video-to-gif
録画済みの mp4 / webm / mov を、GitHub の markdown ビューアが実際に再生できる GIF に変換する。バイト予算を指定すると解像度・fps・パレットを段階的に落として収まるまで再試行し、収まらなければ書かずに落ちる。「GIF を作って」「GIF 化」「mp4 を GIF に」「README に貼れる動画」等の指示で使う。.