Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add darkroomengineering/cc-settings --skill fixgit clone --depth 1 https://github.com/darkroomengineering/cc-settingsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/darkroomengineering/cc-settings/fix)<a href="https://agentmods.dev/skills/darkroomengineering/cc-settings/fix"><img src="https://agentmods.dev/badge/skills/darkroomengineering/cc-settings/fix/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/darkroomengineering/cc-settings/fix"><img src="https://agentmods.dev/badge/skills/darkroomengineering/cc-settings/fix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 40 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.02016 |
| Opus 5.5 | $0.00021 | $0.00806 |
| Sonnet 5.5 | $0.00010 | $0.00403 |
| Haiku 4.5 | $0.00005 | $0.00202 |
Grade A, and why
fix scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bug Fix Workflow
Standalone Codex
Skip Claude's !command interpolation below. Run git branch --show-current, git log --oneline -5, and git status --porcelain
explicitly. Create each new agent with spawn_agent, continue a live agent with
send_message, trigger another turn for an idle existing agent with
followup_task, wait with wait_agent, and stop a current turn with
interrupt_agent only when necessary. Never spawn codex-verifier and never
run codex-run.ts from inside Codex.
Writers share the working tree unless the live host explicitly offers isolation. Give every writer non-overlapping ownership and serialize the test-writer, implementer, and verification writer phases. Only read-only reviewers may overlap. Wait until the explorer finishes before starting a test writer; wait until that writer finishes before implementation. Codex implementers are not promised Claude worktree isolation.
Use Context7 only when the user configured it. Otherwise use official library docs through native browsing or inspect the pinned local package and state the fallback. This package does not auto-run unpinned registry MCP packages.
You are in Maestro orchestration mode. Delegate immediately to specialized agents.
Current State
- Branch: !
git branch --show-current 2>/dev/null || echo "unknown" - Recent commits: !
git log --oneline -5 2>/dev/null || echo "no commits" - Uncommitted changes: !
git status --porcelain 2>/dev/null | head -10
Workflow
- Clarify - If the report admits more than one reading (which surface, which environment, what "fixed" looks like), run clarifying rounds through the host's question tool until no fork is left, before exploring; a report that names the file, the symptom, and the expected behaviour skips this. When a round runs and the user named no Linear issue, add one question: create one now (recommended: yes)? Create it per the
shipskill's "Linear issue" step and put its ID in the branch name. Never open a round only for this:/shipcreates the issue anyway - Explore - Spawn
exploreagent to understand the affected codebase area - Reproduce - Spawn
testeragent to create a failing test if possible - Diagnose - Analyze findings to identify root cause. Commits named in the bug report are hypotheses, not conclusions — blame the actually-affected file's history before fixing; regressions often ride in earlier on the same branch as the change that got blamed. Before blaming, fetch the team-knowledge index and read any note whose title matches the error's nouns; the fetch command is in docs/knowledge-system.md (fail-open — skip if
ghis unavailable)- A prediction must name something not yet looked at (another code path, an observable the first hypothesis did not touch). One that restates the symptom or only re-reads the suspect line is rejected.
- The user's own uncommitted edits are hypothesis 1. Test them:
git stash push -u -m <unique-tag>, rerun the reproducer, then restore only the entry this run created, found by its tag (git stash apply --indexit so staged state comes back too, and drop it only after the apply succeeds). Never pop other entries. If the push reports nothing to save, restore nothing. - No fix until the causal chain from trigger to symptom is complete, with file:line evidence at each link. "Somehow X leads to Y" is a gap.
- Implement - Spawn
implementeragent to fix the issue - Verify - Spawn
testeragent to confirm the fix - Learn - If this was a non-obvious fix, the auto-memory system in
~/.claude/CLAUDE.mdcaptures it; for team-wide gotchas use/share-learningto post to the team-knowledge repo
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 18e59a200c79
- 2d ago Changed · -3 lines 2a9d31cf0e70
- 10d ago Changed 6b01f3657cf0
- 16d ago Changed fba11de0139a
- 1mo ago Changed · +2 lines 873fd246655b
- 1mo ago Changed · -11 tokens per session 5431594a4073
- 1mo ago Changed · -3 lines 3233bac6c19c
- 1mo ago First seen · 155 lines · 63 tokens per session scan A d596cf77e52c
fix is a skill published in the GitHub repository darkroomengineering/cc-settings (51 stars, last pushed yesterday), licensed MIT. It adds 52 tokens to every session and 2,016 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
resolve-handoff
Emit the complete Resolve handoff with exact modes, outcomes, test evidence, and publication state.
resolve-publish
Commit the validated fix and follow local-only, workflow-owned, or direct PR publication.
resolve-inputs
Select the Resolve mode, recover its input, check the workspace, and discover existing fixes.
fix-issue
Fixes GitHub issues using parallel analysis agents for root cause investigation, code exploration, and regression detection. Reads issue context from gh CLI, searches codebase and memory for related patterns, generates a fix with tests, and links the resolution back to the issue via PR. Includes prevention analysis to…
triage-issue
First-contact triage for a GitHub issue.
debug-systematic
Systematic 4-phase debugging methodology for complex, intermittent, or mysterious issues. Use when investigating bugs, race conditions, or unexplained failures.