mako-neighborhoods

mako-neighborhoods is a skill for Claude Code from drhalto/agentmako. It costs 48 tokens per session (603 once invoked), scanned A, original, Apache-2.0.

A set of bounded tools for examining everything connected to one database table, web route, or remote procedure call. A route is a web endpoint, and an RPC is a callable server-side function.

In plain words
What is it for?
Use it to inspect what touches a table, what a route does, which data an endpoint uses, who calls an RPC, or which security rules affect it.
Why use it?
It gathers nearby schema, security policies, readers, writers, callers, and implementation details in one view. This reduces the need to manually trace related code and data paths.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the mako-ai plugin — 8 skills, 1 MCP server shipped together

Good fit Use it to inspect what touches a table, what a route does, which data an endpoint uses, who calls an RPC, or which security rules affect it.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/drhalto/agentmako/mako-neighborhoods
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add drhalto/agentmako --skill mako-neighborhoods
Clone the repo
git clone --depth 1 https://github.com/drhalto/agentmako

Made for: Claude Code.

Or install mako-ai, the plugin that ships this one along with the rest of its 8 skills, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mako-neighborhoods

README.md
[![agentmods](https://agentmods.dev/badge/skills/drhalto/agentmako/mako-neighborhoods/github.svg)](https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods)
Your own site
<a href="https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods"><img src="https://agentmods.dev/badge/skills/drhalto/agentmako/mako-neighborhoods/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mako-neighborhoods

Your own site · 80×15
<a href="https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods"><img src="https://agentmods.dev/badge/skills/drhalto/agentmako/mako-neighborhoods.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 48 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 603 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00048 $0.00603
Opus 5 $0.00024 $0.00302
Sonnet 5 $0.00010 $0.00121
Haiku 4.5 $0.00005 $0.00060

Measured 11d ago against content hash f51090ce75a1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

mako-neighborhoods scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

mako-ai-claude-plugin/skills/mako-neighborhoods/SKILL.md · 71 lines

How it starts

The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Mako Neighborhoods

Use this skill when the user needs the surrounding context for one known table, route, or RPC. Neighborhood tools are bounded composed bundles; they are usually better than manually chaining primitives for common entity-centered questions.

Tools

table_neighborhood

Use for table-centered questions.

  • Includes schema, RLS, readers, writers, routes, and RPC context.
  • Best for "what touches this table?", "is this table protected?", and "what code reads/writes this table?"
  • Pair with preflight_table before implementation when the user needs a more edit-oriented table preflight.

route_context

Use for route-centered questions.

  • Includes handler, imports, database touchpoints, RPCs, and nearby policy context.
  • Best for "what does this route do?", "what data does this endpoint touch?", and "what is downstream of this route?"
  • Pair with auth_path for auth-boundary-specific questions.

rpc_neighborhood

Use for RPC-centered questions.

  • Includes callers, touched tables, RLS context, and nearby implementation evidence.
  • Best for "who calls this RPC?", "what tables does this function touch?", and "what policies matter for this RPC?"
  • Pair with trace_rpc when the user needs a narrower evidence trace.

Feedback Logging

Log agent_feedback when a neighborhood bundle here was notably useful, partial, noisy, stale, wrong, or wasted the turn. Skip routine calls.

Required procedure (see /mako-ai:mako-guide for full rules and reason-code vocabulary):

  1. Call recall_tool_runs to get the prior run's requestId. Do not fabricate one — if no run is recalled, skip feedback.
  2. Call agent_feedback with referencedToolName, referencedRequestId, grade: "full" | "partial" | "no", reasonCodes from the starter vocabulary in /mako-ai:mako-guide, and a short reason.

See Also

  • Use /mako-ai:mako-trace for narrower route/table/RPC evidence traces.
  • Use /mako-ai:mako-graph for paths between entities or blast radius.
  • Use /mako-ai:mako-database for direct live DB schema/RLS/RPC inspection.

Read the full file on GitHub · 71 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 71 lines · 48 tokens per session scan A f51090ce75a1

Subscribe to this mod's changes

mako-neighborhoods is a skill published in the GitHub repository drhalto/agentmako (52 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 48 tokens to every session and 603 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

performance-audit

Full-stack performance health check across 12 dimensions. Rendering, bundles, assets, API/network, algorithms, memory, database, caching, Web Vitals, backend runtime, concurrency, and framework-specific pathologies. Evidence-based Impact Models with confidence tiers and a prioritized optimization roadmap. Switches…

greglas75/zuvo · 90 tokens

ccc-pro-saas

Multi-tenant SaaS scaffolds: row-level security, billing, invitations · Pro tier only.

KevinZai/commander · 24 tokens

sf-schema

Scaffold custom objects, fields, validation rules, permission sets, and other schema metadata as SFDX source XML. Use when asked to create objects, custom fields, permission sets, validation rules, or generate metadata XML. Activate on mentions of "custom object", "custom field", "permission set", "validation rule"…

Clientell-Ai/salesforce-skills · 86 tokens

sf-soql

Build and optimize SOQL queries including relationship queries, aggregate functions, polymorphic TYPEOF, and selective filters. Use when asked to write queries, debug slow queries, optimize existing SOQL, or enforce query security. Activate on mentions of "SOQL", "query", "SELECT", "WHERE", "aggregate", "relationship…

Clientell-Ai/salesforce-skills · 78 tokens

feathers-schema

Define, validate, and secure a FeathersJS v5 data model with TypeBox schemas and the four resolver kinds (result, data, query, external). Use whenever the user is working on a Feathers .schema.ts file, adding or changing a field, deriving TypeScript types from a schema, validating request data or query strings, hiding…

hassan4702/feathers-plugin · 149 tokens

jpa-entity

Scaffold a Spring Data JPA @Entity correct-by-default so the guardrails never fire: @Version optimistic locking, business-key equals/hashCode (never the generated @Id), JPA auditing fields, optional soft-delete, plus a matching repository — all matching this project's conventions. Trigger phrases: "create entity"…

ShipWithAI/shipwithai-plugins · 91 tokens