Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dewtech-technologies/dare-method/dare-axnpx skills add dewtech-technologies/dare-method --skill dare-axgit clone --depth 1 https://github.com/dewtech-technologies/dare-methodWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00070 | $0.01662 |
| Opus 5 | $0.00035 | $0.00831 |
| Sonnet 5 | $0.00014 | $0.00332 |
| Haiku 4.5 | $0.00007 | $0.00166 |
Grade A, and why
dare-ax scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DARE AX Skill (Agent Experience)
Você é um especialista em integração entre projetos e agentes de código (Claude Code, Cursor, Antigravity, etc.). Seu papel é garantir que todo projeto DARE seja navegável, usável e defensivo quando consumido por uma IA.
Quando usar esta skill
- Está bootstrapando um projeto novo via
dare inite precisa do baseline AX - Está auditando um projeto existente e quer saber se ele é "AX-friendly"
- Está adicionando uma feature que muda a superfície pública (endpoints HTTP, CLI, docs)
- Vai integrar o projeto com um agente externo (LangChain, OpenAI Agents, MCP server)
Os três planos AX
Plano 1: Discovery — o agente acha o que precisa
| Sinal | Onde mora | Conteúdo mínimo |
|---|---|---|
llms.txt |
raiz do repositório | nome do projeto, descrição em 1 parágrafo, links para docs principais, comandos make/npm run, endpoints expostos, exemplos |
README.md |
raiz | bootstrap em 5 minutos, link para llms.txt, link para OpenAPI |
| Estrutura previsível | src/, tests/, docs/, DARE/ |
sem pastas exóticas (thing/, stuff/) |
Plano 2: Usage — o agente consegue operar
| Sinal | Obrigatório quando |
|---|---|
openapi.json em /openapi.json ou public/openapi.json |
projeto expõe HTTP |
Flag --json em todos os comandos CLI |
projeto expõe CLI |
Dockerfile + docker-compose.yml validados |
qualquer projeto que toque serviços externos |
.env.example versionado |
qualquer projeto |
Plano 3: Defense — o agente não pode quebrar produção
| Defesa | Implementação típica |
|---|---|
| Rate limit | rack-attack (Rails), express-rate-limit (Node), tower-governor (Rust), slowapi (FastAPI) |
| Validação de input | FormRequests (Laravel), Pydantic (FastAPI), Zod (Node), serde + validator (Rust) |
| Secrets só via env | .env no .gitignore, .env.example sem valores reais |
llms.txt sem secrets |
scan automático no CI bloqueando padrões api_key=, password=, DATABASE_URL= |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 153 lines · 70 tokens per session scan A dd6a95a3e533
dare-ax is a skill published in the GitHub repository dewtech-technologies/dare-method (5 stars, last pushed 1mo ago), licensed MIT. It adds 70 tokens to every session and 1,662 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
implement-telegram-bot
Implement Telegram bot interactions with command handlers, message parsing, and inline keyboards for conversational interfaces.
write-unit-tests
Write comprehensive unit tests with proper setup, assertions, and coverage of happy paths, edge cases, and error scenarios.
blazor-component-design
Design Blazor components with proper parameter binding, event callbacks, lifecycle management, and render optimization. Use when creating new Blazor Server or WASM components, refactoring component hierarchies, implementing cascading values, or optimizing component rendering performance.
hedgehog-planning-intake
Use on any core for first-run planning intake — Phase 0 runs the vendored BMAD-METHOD planning shelf, shared by every core, and Phase 1 (mining 04-prd.md into intent records plus the Add-ons/sync-and-remote-entities decision) is full-stack-app's and pwa-app's shared procedure — identical mechanics, a different…
status
Show a comprehensive project status dashboard: task queue, blocked items, session state, verification, and git status.
tech-preflight-dotnet
Verify .NET SDK compatibility, map project dependency graphs, and run baseline builds before code changes. Use when starting a new task, onboarding to a .NET solution, checking environment readiness, or diagnosing build failures from SDK mismatches.