Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dryvist/claude-code-plugins --skill cribl-pack-conventionsgit clone --depth 1 https://github.com/dryvist/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dryvist/claude-code-plugins/cribl-pack-conventions)<a href="https://agentmods.dev/skills/dryvist/claude-code-plugins/cribl-pack-conventions"><img src="https://agentmods.dev/badge/skills/dryvist/claude-code-plugins/cribl-pack-conventions/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dryvist/claude-code-plugins/cribl-pack-conventions"><img src="https://agentmods.dev/badge/skills/dryvist/claude-code-plugins/cribl-pack-conventions.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.00408 |
| Opus 5.5 | $0.00014 | $0.00163 |
| Sonnet 5.5 | $0.00007 | $0.00082 |
| Haiku 4.5 | $0.00003 | $0.00041 |
Grade A, and why
cribl-pack-conventions scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Cribl Pack Conventions
Keep the pack boundary clear
- Read the pack repository's
AGENTS.mdbefore editing. Keep pack-specific changes in the pack repository and propose generic template changes in the template repository. - Treat
default/as pack configuration,scripts/as validation and build tooling, andtests/as the test harness when those paths exist. - Keep workflow logic in reusable workflows or
scripts/*.sh; do not embed inline scripts in workflows.
Validate and test
- Run
yamllintagainstdefault/with the repository's.yamllint.yml. - Run
./scripts/validate-pack-structure.sh. - In
tests/, runpnpm install --frozen-lockfile,pnpm run lint,pnpm run typecheck, andpnpm run test. - Use the repository's configured Cribl version matrix; required test legs gate changes, while optional legs remain best-effort.
Release and version
- Use the repository's release-please flow to propose versions. Do not create version tags manually.
- Use the template-provided reusable test and release workflows for pack validation and
.crblartifact publishing. - Call shared repository-level reusable workflows from
JacobPEvans/.githubat@v1.
Secrets
- Resolve secrets from OpenBao at runtime. Never commit credentials, tokens, or plaintext secret files.
- Keep test credentials in the isolated test environment; do not put them in pack defaults or workflow source.
Do not
- Edit generic template files directly in a pack repository.
- Add inline shell scripts to workflows; extract scripts to
scripts/or use a maintained action. - Hand-create release tags or bypass a required test leg.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 39 lines · 35 tokens per session scan A 4a3758093d39
cribl-pack-conventions is a skill published in the GitHub repository dryvist/claude-code-plugins (3 stars, last pushed 2d ago), licensed Apache-2.0. It adds 35 tokens to every session and 408 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-18.
Other skills, from other repositories
detect-github-url
Detects when the user pastes or mentions a GitHub URL that may contain Claude skills or plugins. Triggers on messages containing github.com URLs, especially when user says things like "here's a repo", "check out this repo", "load this", "use these skills", "I found these skills", or simply pastes a github.com link.…
example-feature-generator
Generate boilerplate for new features following project conventions. Use when user says "create feature", "add feature", or "new feature scaffolding".
media-gemini-3-image-prompt
A prompt builder for Gemini 3 Pro Image, also known as Nano Banana Pro, Google's image-generation model. It expands a short request into five parts covering the subject, action, setting, composition, lighting, style, and text constraints.
commerce-jtbd-persona
An e-commerce customer-analysis skill that studies reviews and questions to identify why people buy and to create concrete customer profiles. JTBD means “jobs to be done”: the practical goal a customer is trying to accomplish.
data-realestate
A lookup tool for reported South Korean property transactions using Ministry of Land data. It covers sales and rental deals for apartments, officetels, multi-family homes, houses, and commercial or office properties.
design-sync-upload
An uploader for design-system files such as DESIGN.md, tokens, logos, fonts, and images into Claude Design. It can either use an authenticated connection or prepare a folder and guide for manual upload.