Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/deepractice/rolex/resource-managementnpx skills add Deepractice/RoleX --skill resource-managementgit clone --depth 1 https://github.com/Deepractice/RoleXWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/deepractice/rolex/resource-management)<a href="https://agentmods.dev/skills/deepractice/rolex/resource-management"><img src="https://agentmods.dev/badge/skills/deepractice/rolex/resource-management.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00048 | $0.02186 |
| Opus 5 | $0.00024 | $0.01093 |
| Sonnet 5 | $0.00010 | $0.00437 |
| Haiku 4.5 | $0.00005 | $0.00219 |
Grade A, and why
resource-management scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 258 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Feature: ResourceX Concepts ResourceX is the resource system that powers RoleX's content management. Resources are typed content bundles identified by tag and digest, stored locally in a CAS (Content-Addressable Storage) or in a remote registry.
Scenario: What is a resource Given a resource is a directory containing content and metadata Then it has a resource.json manifest defining name, type, tag, and author And it contains content files specific to its type (e.g. .feature files, SKILL.md) And it is identified by a locator string
Scenario: Tag + digest model Given ResourceX uses a tag + digest model similar to Docker Then tag is a human-readable label — like "stable" or "0.1.0" And tag is mutable — the same tag can point to different content over time And digest is a sha256 content fingerprint — deterministic and immutable And digest is computed from the archive's file-level hashes And the format is sha256:<64-char-hex> And content uniqueness is guaranteed by digest, not by tag
Scenario: Locator formats Given a locator is how you reference a resource Then it can be just a name — nuwa (tag defaults to latest) And it can be a name with digest — name@sha256:abc123... And it can include a path — path/name:tag (e.g. prompts/hello:stable) And it can include a registry — registry.example.com/name:tag And it can be a local directory path — ./path/to/resource or /absolute/path And when tag is omitted, it defaults to latest
Scenario: Resource types in RoleX Given RoleX registers resource types with ResourceX Then "role" type — individual manifests with .feature files (alias: "individual") And "organization" type — organization manifests with .feature files (alias: "org") And "skill" type — SKILL.md files loaded via the skill process
Scenario: resource.json structure Given every resource directory must contain a resource.json Then the structure is: """ { "name": "my-resource", "type": "role", "tag": "0.1.0", "author": "deepractice", "description": "What this resource is" } """ And name is the resource identifier And type determines how the resource is resolved (role, organization, skill) And tag is a human-readable label, not a semantic version — omit for latest
Scenario: Storage location Given resources are stored locally at ~/.deepractice/resourcex by default And the location is configurable via LocalPlatform resourceDir option And prototype registrations are stored at ~/.deepractice/rolex/prototype.json
Feature: Resource Operations Manage resources through the use tool with !resource namespace. Operations cover the full lifecycle: add, push, pull, search, remove.
Scenario: add — import a resource from a local directory Given you have a resource directory with resource.json When you call use with !resource.add Then the resource is archived and stored in local CAS And it gets a digest computed from its content And it can then be pushed to a remote registry And parameters are: """ locator: "!resource.add" args: path: "/absolute/path/to/resource" """
Scenario: push — publish a resource to a remote registry Given a resource has been added to local CAS When you call use with !resource.push Then the resource archive is uploaded to the configured registry And the registry stores it by name, tag, and digest And parameters are: """ locator: "!resource.push" args: locator: "name:tag" registry: "https://..." # optional """
Scenario: pull — download a resource from a remote registry Given a resource exists in a remote registry When you call use with !resource.pull Then the resource is downloaded and cached in local CAS And subsequent resolves use the local cache And parameters are: """ locator: "!resource.pull" args: locator: "name:tag" """
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 258 lines · 48 tokens per session scan A 5d251334617c
resource-management is a skill published in the GitHub repository Deepractice/RoleX (35 stars, last pushed 5mo ago), licensed MIT. It adds 48 tokens to every session and 2,186 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.
chat-perf
Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…