Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add d-mariano/spicyclaude --skill question-policygit clone --depth 1 https://github.com/d-mariano/spicyclaudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/d-mariano/spicyclaude/question-policy)<a href="https://agentmods.dev/skills/d-mariano/spicyclaude/question-policy"><img src="https://agentmods.dev/badge/skills/d-mariano/spicyclaude/question-policy/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/d-mariano/spicyclaude/question-policy"><img src="https://agentmods.dev/badge/skills/d-mariano/spicyclaude/question-policy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.01419 |
| Opus 5.5 | $0.00028 | $0.00568 |
| Sonnet 5.5 | $0.00014 | $0.00284 |
| Haiku 4.5 | $0.00007 | $0.00142 |
Grade A, and why
question-policy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Question policy
Claude Code removes AskUserQuestion from every subagent. Only the main session can ask. So
every agent in a pipeline emits questions as data, and the orchestrator in the main session decides
whether to ask, using the mode resolved by ship_config.py.
Modes
| Mode | Agent behavior | Orchestrator behavior |
|---|---|---|
auto (default) |
pick recommended, append to decisions.md, continue; a question with no recommended is guarded (below) |
copy decisions.md into the PR body under "Decisions made autonomously" |
raise |
stop and return NEEDS_INPUT with the questions |
ask at once, write answers.json, resume the same agent |
Escalation guard
escalate lists question properties that are never auto-decided. The default is
["irreversible"]; "external" adds questions whose impact is external. A question with no
recommended option is always guarded, whatever escalate says: a recommendation exists only
with an evidence-backed lean, and a coin flip logged as a decision would misrepresent itself.
A guarded question is handled as in raise mode, whatever the mode. Headless, where nothing can be
asked, the orchestrator marks the story blocked with the question in its status rather than
guessing.
Set --escalate=none to drop the irreversible guard.
What is not a question
A permission denial, a missing tool, a command that will not run, or a path that does not exist is
an operational block, not a fork in the work. An agent that hits one returns FAILED with the
blocker in summary and does not dress it up as a question; the orchestrator marks the story
blocked and names the blocker, because the remedy is in the environment, not in an answer. The
code-reviewer without the Agent tool is not blocked: it reviews in a single pass and says so.
Question contract
Agents return questions inside their envelope. references/question.schema.json
is the normative schema. The shape mirrors the house rules every interactive command in this
marketplace already follows, so a question renders faithfully through AskUserQuestion:
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · -12 lines · -5 tokens per session 4f667fb752c0
- 2d ago Changed · +9 lines eefa718c8330
- 4d ago First seen · 123 lines · 76 tokens per session scan A 56d33d768d83
question-policy is a skill published in the GitHub repository d-mariano/spicyclaude (5 stars, last pushed 2d ago), licensed MIT. It adds 71 tokens to every session and 1,419 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-07.
question-policy compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| question-policyd-mariano/spicyclaude | Skill | 5 | 2d ago | MIT | A | 71 | Claude Code |
| imagegenopenai/codex | Skill | 135k | today | Apache-2.0 | A | 113 | Codex |
| playwright-climicrosoft/playwright | Skill | 100k | today | Apache-2.0 | A | 19 | Claude Code |
| browser-automationopenclaw/openclaw | Skill | 394k | today | MIT | A | 36 | Claude Code |
| local-ai-agentsmicrosoft/ai-agents-for-beginners | Skill | 79k | 4d ago | MIT | A | 200 | Claude Code, Codex |
| systematic-debuggingobra/superpowers | Skill | 316k | 8d ago | MIT | A | 21 | Claude Code |
| next-cache-components-adoptionvercel/next.js | Skill | 143k | today | MIT | A | 95 | Claude Code |