Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add drhalto/agentmako --skill mako-neighborhoodsgit clone --depth 1 https://github.com/drhalto/agentmakoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods)<a href="https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods"><img src="https://agentmods.dev/badge/skills/drhalto/agentmako/mako-neighborhoods/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/drhalto/agentmako/mako-neighborhoods"><img src="https://agentmods.dev/badge/skills/drhalto/agentmako/mako-neighborhoods.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00603 |
| Opus 5 | $0.00024 | $0.00302 |
| Sonnet 5 | $0.00010 | $0.00121 |
| Haiku 4.5 | $0.00005 | $0.00060 |
Grade A, and why
mako-neighborhoods scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Mako Neighborhoods
Use this skill when the user needs the surrounding context for one known table, route, or RPC. Neighborhood tools are bounded composed bundles; they are usually better than manually chaining primitives for common entity-centered questions.
Tools
table_neighborhood
Use for table-centered questions.
- Includes schema, RLS, readers, writers, routes, and RPC context.
- Best for "what touches this table?", "is this table protected?", and "what code reads/writes this table?"
- Pair with
preflight_tablebefore implementation when the user needs a more edit-oriented table preflight.
route_context
Use for route-centered questions.
- Includes handler, imports, database touchpoints, RPCs, and nearby policy context.
- Best for "what does this route do?", "what data does this endpoint touch?", and "what is downstream of this route?"
- Pair with
auth_pathfor auth-boundary-specific questions.
rpc_neighborhood
Use for RPC-centered questions.
- Includes callers, touched tables, RLS context, and nearby implementation evidence.
- Best for "who calls this RPC?", "what tables does this function touch?", and "what policies matter for this RPC?"
- Pair with
trace_rpcwhen the user needs a narrower evidence trace.
Feedback Logging
Log agent_feedback when a neighborhood bundle here was notably useful,
partial, noisy, stale, wrong, or wasted the turn. Skip routine calls.
Required procedure (see /mako-ai:mako-guide for full rules and
reason-code vocabulary):
- Call
recall_tool_runsto get the prior run'srequestId. Do not fabricate one — if no run is recalled, skip feedback. - Call
agent_feedbackwithreferencedToolName,referencedRequestId,grade: "full" | "partial" | "no",reasonCodesfrom the starter vocabulary in/mako-ai:mako-guide, and a shortreason.
See Also
- Use
/mako-ai:mako-tracefor narrower route/table/RPC evidence traces. - Use
/mako-ai:mako-graphfor paths between entities or blast radius. - Use
/mako-ai:mako-databasefor direct live DB schema/RLS/RPC inspection.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 71 lines · 48 tokens per session scan A f51090ce75a1
mako-neighborhoods is a skill published in the GitHub repository drhalto/agentmako (52 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 48 tokens to every session and 603 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
performance-audit
Full-stack performance health check across 12 dimensions. Rendering, bundles, assets, API/network, algorithms, memory, database, caching, Web Vitals, backend runtime, concurrency, and framework-specific pathologies. Evidence-based Impact Models with confidence tiers and a prioritized optimization roadmap. Switches…
ccc-pro-saas
Multi-tenant SaaS scaffolds: row-level security, billing, invitations · Pro tier only.
sf-schema
Scaffold custom objects, fields, validation rules, permission sets, and other schema metadata as SFDX source XML. Use when asked to create objects, custom fields, permission sets, validation rules, or generate metadata XML. Activate on mentions of "custom object", "custom field", "permission set", "validation rule"…
sf-soql
Build and optimize SOQL queries including relationship queries, aggregate functions, polymorphic TYPEOF, and selective filters. Use when asked to write queries, debug slow queries, optimize existing SOQL, or enforce query security. Activate on mentions of "SOQL", "query", "SELECT", "WHERE", "aggregate", "relationship…
feathers-schema
Define, validate, and secure a FeathersJS v5 data model with TypeBox schemas and the four resolver kinds (result, data, query, external). Use whenever the user is working on a Feathers .schema.ts file, adding or changing a field, deriving TypeScript types from a schema, validating request data or query strings, hiding…
jpa-entity
Scaffold a Spring Data JPA @Entity correct-by-default so the guardrails never fire: @Version optimistic locking, business-key equals/hashCode (never the generated @Id), JPA auditing fields, optional soft-delete, plus a matching repository — all matching this project's conventions. Trigger phrases: "create entity"…