Borrowing it
Nothing to install: this file belongs to dip497/hivemind. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dip497/hivemind/main/.claude/skills/adding-an-agent-provider/SKILL.mdgit clone --depth 1 https://github.com/dip497/hivemindWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dip497/hivemind/adding-an-agent-provider)<a href="https://agentmods.dev/skills/dip497/hivemind/adding-an-agent-provider"><img src="https://agentmods.dev/badge/skills/dip497/hivemind/adding-an-agent-provider/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dip497/hivemind/adding-an-agent-provider"><img src="https://agentmods.dev/badge/skills/dip497/hivemind/adding-an-agent-provider.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 55 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 56 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00090 | $0.04007 |
| Opus 5.5 | $0.00036 | $0.01603 |
| Sonnet 5.5 | $0.00018 | $0.00801 |
| Haiku 4.5 | $0.00009 | $0.00401 |
Grade A, and why
adding-an-agent-provider scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 250 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Adding an agent provider
Why this exists
An agent is one manifest — agent.yaml, plus the hook asset it ships if it injects
hooks or resumes. That is not where agent PRs go wrong. They go wrong one step earlier — in
what the author believed about the CLI.
A real example: a PR added an agent and stated "no hook system exposed, status is
screen-scrape only". That CLI ships agentSpawn / userPromptSubmit / preToolUse /
postToolUse / stop hooks with a JSON stdin contract and a blocking exit code — the
same shape hivemind already consumes for claude. Nobody had run --help. The result
would have shipped as a "fully-wired agent" that silently cannot be driven.
Today the capabilities you declare are what the control plane believes: declare
turnSignal: true for a runtime that never reports a turn and hive ctl read times
out on it; declare false and hive ctl workflow --agent <id> refuses up front with
exit 7. A wrong capability is a wrong contract. This skill is the procedure that
makes the declaration true: research first, tier second, manifest third, and a lifecycle
proof that says out loud what works.
The rule
An agent is done when a human can drive it on the canvas and the control plane
can drive it as a worker. If you can only reach the first, that is a legitimate PR —
but it ships with turnSignal: false and a note, so the UI, the CLI and HCP all
say so, never silently.
Nothing agent-specific is compiled into the app. Agents are published to the HiveHub registry and added to a user's machine automatically when their CLI is found. The authoring format for a PR is the same format a user writes by hand — a manifest cannot do anything a user's own file cannot.
Phase 1 — Probe the CLI (never skip, never infer)
Three rules:
- Probe the binary that is actually installed.
--helpbeats memory, every time. - Cite a source per answer — a doc URL, a
--helpline, a file you grepped. - "I could not find it" is a valid answer. Write it that way. Never write "X does not exist" unless you looked and can say where you looked.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +2 lines 7b87a9e18081
- 12d ago Changed · +17 lines 2293e6c0248f
- 1mo ago Changed · +35 lines 510b53500101
- 1mo ago Changed · -17 lines · +6 tokens per session 637af1e476c9
- 2mo ago First seen · 213 lines · 84 tokens per session scan A 6bf575ebc040
adding-an-agent-provider is a skill published in the GitHub repository dip497/hivemind (17 stars, last pushed yesterday), licensed MIT. It adds 90 tokens to every session and 4,007 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
termcanvas-agent-sync-debugging
Diagnose TermCanvas agentmux nodes that fail to appear and terminal canvases that become janky, resize repeatedly, or show corrupted/unreadable xterm text as terminal count grows, plus duplicate terminal views created after a release relaunch. Use when a child agent is missing, restored terminals duplicate or move to…
agentmux
Manage TermCanvas agentmux agents on a canvas. Use this whenever the user wants to inspect a TermCanvas canvas, operate the agent graph, spawn child agents, connect agents, delegate with ask, send prompts, read logs, stop or delete agents, understand AGENTMUX session state, or operate TermCanvas as an agent control…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
winapp-maui
Package and sign .NET MAUI Windows apps with winapp: publish the Windows head first, then point packaging at the resolved resizetizer manifest. Use for a MAUI MSIX or signed unpackaged build, MAUI packaging in CI, or 'manifest contains unresolved placeholders' errors from winapp package.
winui-setup
Install and verify WinUI 3 prerequisites — .NET SDK 8.0.100+, WinApp CLI 0.7+, and Developer Mode; identify additional Native AOT and Windows Sandbox requirements. Use when the user asks to set up or repair the toolchain, or when another WinUI skill finds a missing or outdated prerequisite.
vchart-development-assistant
A coding assistant for VChart, a JavaScript chart library used to build visualizations such as bar, line, and pie charts.