Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cynthiajones34/GBrain --skill soul-auditgit clone --depth 1 https://github.com/cynthiajones34/GBrainWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cynthiajones34/gbrain/soul-audit)<a href="https://agentmods.dev/skills/cynthiajones34/gbrain/soul-audit"><img src="https://agentmods.dev/badge/skills/cynthiajones34/gbrain/soul-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cynthiajones34/gbrain/soul-audit"><img src="https://agentmods.dev/badge/skills/cynthiajones34/gbrain/soul-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.00833 |
| Opus 5 | $0.00027 | $0.00417 |
| Sonnet 5 | $0.00011 | $0.00167 |
| Haiku 4.5 | $0.00005 | $0.00083 |
Grade A, and why
soul-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to soul-audit — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Soul Audit — Agent Identity Builder
Generate the agent's identity and operational configuration through an interactive interview. Each phase produces a file. Any phase can be re-run independently to update.
IMPORTANT: This skill generates content from the USER'S OWN ANSWERS. It NEVER
ships pre-filled content. The templates in templates/ are scaffolds, not defaults.
Contract
This skill guarantees:
- SOUL.md generated from user's description of agent identity, vibe, mission
- USER.md generated from user's self-description (role, projects, key people)
- ACCESS_POLICY.md generated with configurable access tiers
- HEARTBEAT.md generated with operational cadence the user chooses
- Each phase is independent and re-runnable
- Default mode (skip soul-audit): installs minimal templates from
templates/
Phases
Phase 1: Identity Interview
Ask: "What is this agent to you? Research partner? Executive assistant? Thinking partner? All of the above?" Generate: SOUL.md identity section.
Phase 2: Vibe Calibration
Show 3-4 communication style examples:
- Formal: "I've prepared a comprehensive analysis of the situation..."
- Direct: "Here's what's happening. Three things matter."
- Technical: "The root cause is in the connection pooling. Here's the fix."
- Casual: "Yeah so basically the thing is broken because X. Easy fix." Ask which feels right. Generate: SOUL.md vibe + communication style sections.
Phase 3: Mission Mapping
Ask: "What are your top 3-5 goals? What are you trying to accomplish?" Generate: SOUL.md mission + operating principles sections.
Phase 4: User Profile
Ask: "Tell me about yourself. What do you do? What are you working on? Who are the key people in your world?" Generate: USER.md with role, projects, key people, communication preferences.
Phase 5: Boundaries
Ask: "Who should have access to your brain? Are there people who should see some but not all? Anyone to keep out entirely?" Generate: ACCESS_POLICY.md with 4 tiers (Full/Work/Family/None).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 86 lines · 54 tokens per session scan A 7f162dddcc51
soul-audit is a skill published in the GitHub repository cynthiajones34/GBrain (0 stars, last pushed 1mo ago), licensed MIT. It adds 54 tokens to every session and 833 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to soul-audit, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
memory-proactive
Proactive layered recall and generic domain-aware routing.
memory-archivist
A set of scripts for archiving conversations, syncing them to a knowledge graph, updating summaries, and managing stored memories over time. A knowledge graph is a linked collection of information and relationships.
memory-starter-kit
Historical starter note for the memory sidecar stack.
mind
Local project memory with recall, provenance, policy, and dreams.
personal-knowledge-graph
Use when maintaining a LoomKG/Obsidian knowledge graph.
hunt-auth-bypass
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024)…