Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/crumbtraildev/crumbtrail-cli/orphan-cascadenpx skills add CrumbtrailDev/crumbtrail-cli --skill orphan-cascadegit clone --depth 1 https://github.com/CrumbtrailDev/crumbtrail-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/crumbtraildev/crumbtrail-cli/orphan-cascade)<a href="https://agentmods.dev/skills/crumbtraildev/crumbtrail-cli/orphan-cascade"><img src="https://agentmods.dev/badge/skills/crumbtraildev/crumbtrail-cli/orphan-cascade.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.01589 |
| Opus 5 | $0.00036 | $0.00794 |
| Sonnet 5 | $0.00014 | $0.00318 |
| Haiku 4.5 | $0.00007 | $0.00159 |
Grade A, and why
orphan-cascade scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 144 lines — stays where its author put it; the contents beside it link to each section on GitHub.
The dangling reference and orphan cascade
Something was deleted or renamed, and the change did not reach every row, pointer, cached identifier or stored configuration that referenced it. The removal appeared to succeed. The failure arrives later, somewhere else, in whatever dereferences the orphan next.
The repair is where this archetype bites twice. A reference left behind by a rename must be remapped and a reference left behind by a delete must be pruned, and applying the wrong repair deletes live configuration.
Symptom
A removal or a rename was carried out and reported as done. Later, and usually in a different part of the product, something fails: a screen will not load, a report is missing rows, a job throws on a lookup, a saved view points at nothing. The reporter rarely connects the two, so the report describes the detonation and not the removal.
What Crumbtrail can see
Where the database adapter is installed, a session carries the exact rows that changed with their before and after values, pre state reads taken before a mutation, and the query activity that produced them. That is the strongest evidence available for this archetype, because it shows what the delete actually touched rather than what it was supposed to touch.
Named detector signals that speak to it include orphaned_reference,
existing_children_reparented_to_new_row, db_delta_mismatch, db_unrequested_clear,
acknowledged_write_never_landed, acknowledged_batch_rows_missing and
request_target_row_mismatch. Alongside those, the session carries the request that carried the
removal and, when both happened in one recording, the later request that detonated, plus the
console error at the detonation site.
It does not carry rows in tables nothing touched during the recording. Crumbtrail records what the session's queries did, not the state of the database, so it cannot enumerate every dangling pointer that now exists. It also cannot tell a rename apart from a delete followed by an insert unless the queries themselves make that explicit. That second limit matters, because RENAMED versus DELETED is exactly the discrimination the repair depends on, and it is frequently not answerable from telemetry. When it is not, say so and settle it from the schema and the code.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 144 lines · 71 tokens per session scan A 5262a636681c
orphan-cascade is a skill published in the GitHub repository CrumbtrailDev/crumbtrail-cli (0 stars, last pushed yesterday), licensed MIT. It adds 71 tokens to every session and 1,589 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
codegraph
Analyze indexed codebases via graph database (neug) and vector index (zvec). Covers call graphs, dependencies, dead code, hotspots, module coupling, architecture reports, semantic search, impact analysis, bug root cause from GitHub issues, class diagrams (UML), and PR review (risk scoring, conflict detection…
stuck
Diagnose frozen, stuck, or slow Qwen Code sessions on this machine. Scans for problematic processes, high CPU/memory usage, hung subprocesses, and debug logs. Use /stuck or /stuck to focus on a specific process.
structured-debugging
Hypothesis-driven debugging methodology for hard bugs. Use this skill whenever you're investigating non-trivial bugs, unexpected behavior, flaky tests, or tracing issues through complex systems. Activate proactively when debugging requires more than a quick glance — especially when the first attempt at a fix didn't…
memory-leak-debug
Diagnose memory leaks in the Qwen Code CLI using heap snapshots and the chrome-devtools CLI. Use when investigating high memory usage, unbounded growth, or suspected object retention issues.
bugfix
Fix a bug from a GitHub issue, following the reproduce-first workflow. Use when the user asks to fix a bug, investigate a GitHub issue, or debug a user-reported problem. Takes a GitHub issue URL or number as input.
rust-check
Run cargo check on the current Rust project to find compile errors.