Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add darellchua2/opencode-config-template --skill autoresearch-code-skillgit clone --depth 1 https://github.com/darellchua2/opencode-config-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/darellchua2/opencode-config-template/autoresearch-code-skill)<a href="https://agentmods.dev/skills/darellchua2/opencode-config-template/autoresearch-code-skill"><img src="https://agentmods.dev/badge/skills/darellchua2/opencode-config-template/autoresearch-code-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/darellchua2/opencode-config-template/autoresearch-code-skill"><img src="https://agentmods.dev/badge/skills/darellchua2/opencode-config-template/autoresearch-code-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01361 |
| Opus 5.5 | $0.00016 | $0.00544 |
| Sonnet 5.5 | $0.00008 | $0.00272 |
| Haiku 4.5 | $0.00004 | $0.00136 |
Grade C, and why
autoresearch-code-skill scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- `autoresearch-core-skill/references/iteration-safety.md` — Verify/Guard separation; never modify `.env`, `node_modules/`, or run `rm -rf`. How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
What I do
I run an autonomous code-optimization loop. Each iteration: read the audit trail → hypothesize one atomic code change → apply → commit → run the benchmark evaluator → run the Guard command → run the Consumer Coverage check → keep the commit if {"pass":true,"score":N} shows improvement AND the guard stays green AND no downstream consumer is broken, else git reset --hard HEAD~1. I am Tier 1 (mechanical evaluator) — every keep/revert decision comes from a program, never from LLM self-judgment. I overlap with tdd-workflow-skill, but I am autonomous-loop-flavored (iterate to a target overnight) where TDD is single-cycle (write-one-test-then-implement).
Triggers
Load me (or route to autoresearch-code-subagent) when the user says any of:
- "optimize code", "optimize until", "iteratively improve"
- "test coverage", "increase coverage to N%"
- "bundle size", "reduce bundle"
- "performance", "reduce runtime", "speed up"
- "fix errors", "reduce error count", "drive failures to zero"
- "autoresearch code", "git-as-memory optimization"
Do not trigger for ML training (→ autoresearch-ml-skill) or literature review (→ autoresearch-research-skill).
Citations
autoresearch-core-skill/references/evaluator-contract.md— the{"pass":bool,"score":N}shape my benchmark evaluator emits.autoresearch-core-skill/references/stuck-detection.md— 3-strike pivot (switch from micro-opt to algorithmic change; target a different hotspot).autoresearch-core-skill/references/iteration-safety.md— Verify/Guard separation; never modify.env,node_modules/, or runrm -rf.autoresearch-core-skill/references/audit-trail.md— the 8-column TSV I append to (<skill>-results.tsv).autoresearch-core-skill/references/crash-recovery.md— syntax error → free fix; guard failure → revert.
Skill-specific overrides
- TDD mapping (the key override). When the metric is "test pass-count":
pass: trueGREEN (all targeted tests pass)pass: falseRED (any targeted test fails)scorepass-count (number of tests passing)- This makes
tdd-workflow-skilland this skill mechanically equivalent when the metric is test-pass; the difference is I iterate to a target autonomously rather than running one RED→GREEN cycle.
- Verify vs Guard vs Consumer Coverage. Verify emits
{"pass":bool,"score":N}(e.g.pytest --cov→ coverage %). Guard is a separate command that must stay green (e.g.npm test). Consumer Coverage is a third mandatory check that enumerates downstream callers of every changed symbol and forces revert on any broken reference. A failing Guard or a failing Consumer Coverage check forces revert regardless of Verify — you cannot trade test-green for a broken downstream consumer. - Tier 1 (mechanical evaluator). No agent-as-evaluator fallback.
- Git-as-memory. Commit before Verify so revert is one command. Never edit the working tree without committing first — an uncommitted change cannot be cleanly reverted.
- Bounded-by-default.
Iterations: 25default. Lower for fast benchmarks (e.g.Iterations: 10fornpm run buildcycles). - Consumer Coverage sub-step (mandatory, between Guard and Keep/Revert). Guard is necessary but not sufficient — Guard validates a fixed suite (e.g.
npm test), but it cannot detect downstream breakage in code paths the suite does not exercise. The Consumer Coverage sub-step traces the actual call graph of the symbols this iteration touched:- With
.codegraph/:codegraph_callerson each changed symbol; revert if any caller is broken. - Without
.codegraph/:grep -r/globfor importers and references of each changed symbol; revert if any grep hit references the old (now-renamed/removed) symbol. - Log
discardwithconsumer-brokennote in*-results.tsvwhen this gate forces a revert. Cross-references the agent's implementation inautoresearch-code-subagent.md§Consumer Coverage Gate.
- With
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 70 lines · 40 tokens per session scan C 8839b708e664
autoresearch-code-skill is a skill published in the GitHub repository darellchua2/opencode-config-template (6 stars, last pushed 28d ago), licensed Apache-2.0. It adds 40 tokens to every session and 1,361 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
creating-a-coral-task
Author a new CORAL task — the three pieces that must line up (task.yaml, seed/, a packaged grader/), the coral init → coral validate → smoke-test loop, and how to pick a grader pattern (stdout float, test pass-rate, ratio-vs-baseline, multi-metric, or an LLM rubric judge). Use whenever the user wants to create a CORAL…
codex-autoresearch
Triage improvement work and run or resume accepted measured loops in a local project. Architecture, documentation, UX, product study, open research, taste, and one-shot fixes stay direct unless the user explicitly requests repeated measurement with a complete experiment contract.
write-tests
Write tests that pin real behavior instead of implementation details, config values, or lucky samples. Use when adding tests for new behavior, writing a regression test, fixing a brittle or flaky test, reviewing a test diff, or when a test breaks after a refactor or config change that didn't change behavior.
audit-tests
Audit whether tests earn their maintenance cost and which suite owns each contract. Use when pruning redundant tests, investigating implementation coupling or test-only production hooks, reviewing the value of proposed coverage, or auditing an entire subsystem. Use write-tests to implement the resulting test changes.
eval-skills
Eval and improve a skill against golden cases — run the target skill blind in a fresh, context-free subagent on each example input, grade the artifact against the expected outcome, and let the gaps drive the edits. Use when the user wants to test/eval/improve/harden a skill, says "this skill keeps producing X / keeps…
arbor-agent-merge-eval
Merge and evaluation discipline for Arbor. Use for TreeSetMeta metadata, Bdev/Btest separation, eval command templates, score parsing, GitMergeBranch behavior, protected paths, required outputs, metricdirection, trunk/test score updates, medal detection, and final evaluation before stopping.