Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/destynova2/cli-code-skills/cli-forge-plumenpx skills add Destynova2/cli-code-skills --skill cli-forge-plumegit clone --depth 1 https://github.com/Destynova2/cli-code-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00240 | $0.01678 |
| Opus 5 | $0.00120 | $0.00839 |
| Sonnet 5 | $0.00048 | $0.00336 |
| Haiku 4.5 | $0.00024 | $0.00168 |
Grade A, and why
cli-forge-plume scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plume Forge
Ghostwrite everyday professional exchanges so they read as the user on a good day: clear ask, human voice, zero AI tells, reply made easy.
The message is signed by the user. Claude is la plume — invisible. Same
ghostwriter contract as cli-git-conventional, applied to conversation
instead of commits.
Read ../gotchas.md before producing output.
Core Rules
- Never invent facts. No made-up dates, prices, availabilities, promises,
or references to conversations that did not happen. Flag gaps with
NEEDS-REVIEWinstead of smoothing them over. - Zero AI markers. No AI/model/assistant mentions, no meta-commentary
("voici un message que vous pouvez envoyer"), no leftover placeholders
(
[Nom]), and none of the typographic, lexical, or structural tells listed inreferences/ai-tells.md. - The user's voice, not a template's. Mirror their register (tu/vous, chat vs email, dryness vs warmth) from the pasted exchange. When in doubt, slightly more sober than the recipient, never more corporate.
- Target-language quality. Proofread in the output language: French diacritics and agreements, natural idiom, no anglicism where a plain native word exists.
- Recipient calibration (the Singh rule). Write at the recipient's level, not above it: no jargon they don't share, no acronym they'd have to look up, no literary flourish where a plain sentence does the job. A detail the recipient can't act on leaves the message. Explaining to a non-expert means one concrete example or analogy, not a lecture.
Workflow
- Identify the surface: email, chat message, LinkedIn DM, issue/ticket comment, reply, relance, refusal, bad news, thank-you, ask.
- Extract the exchange brief:
- recipient and relationship (client, colleague, recruiter, stranger),
- register (tu/vous, formal/casual) — inferred from history if pasted,
- the one ask or outcome,
- context the recipient already has (do not re-explain it),
- language, stakes, and anything forbidden (confidential, not yet public).
- Structure front-loaded:
- Ask or point first. The recipient knows within 5 seconds what this message wants.
- Context second, only what is needed to act.
- Easy reply last: closed question, proposed options or slots, or an explicit "no is fine".
- Apply the exchange lenses (adapted from
cli-forge-profile):- scan-and-recall: low cognitive load, hook before explanation, obvious next action;
- proof before philosophy: a concrete fact beats an adjective.
- For follow-ups, read
references/relance.md: escalation ladder, new-info rule, and the humor bank with its calibration rules. - Run the AI-tells pass with
references/ai-tells.md. Rewrite, do not just delete: a stripped sentence must still sound like the user. - Proofread in the target language, then deliver paste-ready copy.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 135 lines · 240 tokens per session scan A b71c3954130c
cli-forge-plume is a skill published in the GitHub repository Destynova2/cli-code-skills (5 stars, last pushed 10d ago), licensed MIT. It adds 240 tokens to every session and 1,678 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
clean-architecture
Apply Robert C. Martin's Clean Architecture, SOLID, and component-decoupling principles when designing, reviewing, or refactoring code — scaled correctly to the size of the task so trivial changes don't get over-engineered. Use this whenever the user asks to design a new feature/service, review code for architectural…
sdlc
Full SDLC workflow for implementing features, fixing bugs, refactoring code, testing, releasing, publishing, and deploying. Use this skill when implementing, fixing, refactoring, testing, adding features, building new code, or releasing/publishing/deploying.
feedback
Submit feedback, bug reports, feature requests, or share SDLC patterns you've discovered. Privacy-first — always asks before scanning.
deploy
Deploy the application to production.
claude-setup-wizard
Setup wizard — scans codebase, builds confidence per data point, only asks what it can't figure out, generates SDLC files. Use for first-time setup or re-running setup.
claude-update-wizard
Smart update for SDLC wizard — shows changelog, compares files, lets you selectively adopt changes while preserving customizations.