Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add danilods/matilha-skills --skill matilha-scoutgit clone --depth 1 https://github.com/danilods/matilha-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/danilods/matilha-skills/matilha-scout)<a href="https://agentmods.dev/skills/danilods/matilha-skills/matilha-scout"><img src="https://agentmods.dev/badge/skills/danilods/matilha-skills/matilha-scout/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/danilods/matilha-skills/matilha-scout"><img src="https://agentmods.dev/badge/skills/danilods/matilha-skills/matilha-scout.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.00831 |
| Opus 5 | $0.00017 | $0.00415 |
| Sonnet 5 | $0.00007 | $0.00166 |
| Haiku 4.5 | $0.00003 | $0.00083 |
Grade B, and why
matilha-scout scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- **"subagent dispatch fails"**: Check Task tool availability (Codex requires `multi_agent = true` in `~/.codex/config.toml`). How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
When this fires
User wants to explore a feature's problem space before writing a spec. project-status.md shows current_phase: 0 or 10. The skill dispatches research subagents (market, user needs, competitive, technical, regulatory if relevant) in parallel and synthesizes their output.
Preconditions
- Feature slug provided (or inferable from prompt).
- matilha-scout lazy-bootstraps project structure;
project-status.mdis created if absent.
Execution Workflow
- Lazy bootstrap: Ensure
docs/matilha/research/exists (mkdir -p). Ifproject-status.mdmissing, write a minimal stub (current_phase: 0,phase_status: in_progress,project_slug: <from cwd or prompt>,next_action: "matilha-scout running"). Readproject-status.md; verifycurrent_phase ≤ 10(if present and higher, warn user — scout is Phase 10 territory). - Dispatch 3-5 research subagents via Task tool IN PARALLEL (one Task call per scope: market analysis, user-needs mapping, competitive landscape, technical options, regulatory if applicable).
- Wait for all subagents to complete.
- Synthesize outputs into
docs/matilha/research/<slug>-research.mdwith sections per subagent + a "Key findings" synthesis at the end. - Update
project-status.md:current_phase: 10,phase_status: in_progress,next_action: "Run matilha-plan to write spec + plan".
Rules: Do
- Use parallel subagent dispatch (multiple Task tool calls in a single message).
- Cite sources in research output.
- Separate findings from recommendations.
- Update project-status on success only.
Rules: Don't
- Write the spec yourself (that's matilha-plan).
- Recommend decisions (research surfaces options, user decides).
- Advance
current_phasepast 10.
Expected Behavior
Output is a 500-1500 word markdown with structured sections. User reads it, forms a mental model, then invokes matilha-plan. If research surfaces blockers, log them in project-status.md:pending_decisions.
Quality Gates
- Research output exists and is non-empty.
project-status.mdshowscurrent_phase: 10.pending_decisionspopulated if blockers found.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 76 lines · 34 tokens per session scan B 95a5ddef9365
matilha-scout is a skill published in the GitHub repository danilods/matilha-skills (2 stars, last pushed 4mo ago), licensed MIT. It adds 34 tokens to every session and 831 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
skill-dev
Use this skill when creating or refining Claude Code skill definitions. Skills are model-invoked capabilities that Claude activates autonomously based on context. Helps design focused skills with discovery-optimized descriptions, proper directory structures, and supporting resources. Automatically invoked when user…
command-dev
Use this skill when creating or refining custom Claude Code slash commands. Slash commands are user-invoked reusable prompts that can accept arguments, reference files, and execute bash operations. Helps design command syntax, argument handling, file references, bash execution, and frontmatter configuration.…
plugin-dev
Use this skill when creating or refining Claude Code plugins. Plugins are bundled collections of agents, skills, commands, hooks, and MCP servers that provide cohesive functionality. Helps design proper directory structures, plugin.json configuration, marketplace distribution, and installation workflows. Automatically…
agent-dev
Use this skill when creating or refining Claude Code sub-agent definitions. Helps design specialized AI assistants with proper YAML frontmatter, system prompts, tool access, and example-driven descriptions. Automatically invoked when user requests "create an agent", "design a sub-agent", "make a specialist", or…
mcp-server-dev
Create MCP servers — multi-tool services exposed via Model Context Protocol. Use this skill whenever users mention MCP servers, building servers, server scaffolding, tool registration, or want to package tools for distribution via uvx or npx. Also use when the conversation involves stdio transport, server lifecycle…
mcp-tool-dev
Create MCP tools — individual tool functions exposed via Model Context Protocol. Use this skill whenever users mention MCP tools, tool handlers, tool functions, tool definitions, or want to add capabilities to an MCP server. Also use when the conversation involves designing tool schemas, writing tool descriptions, or…