Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dsnger/dev-workflow-kit/intakenpx skills add dsnger/dev-workflow-kit --skill intakegit clone --depth 1 https://github.com/dsnger/dev-workflow-kitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00058 | $0.04086 |
| Opus 5 | $0.00029 | $0.02043 |
| Sonnet 5 | $0.00012 | $0.00817 |
| Haiku 4.5 | $0.00006 | $0.00409 |
Grade A, and why
intake scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 301 lines — stays where its author put it; the contents beside it link to each section on GitHub.
intake
Overview
The front door of the spec-driven workflow. A raw idea or voice transcript goes
in; a reviewable story artifact comes out at
docs/superpowers/stories/YYYY-MM-DD-<topic>-story.md and feeds
superpowers:brainstorming as its input document. This standardizes an entrance
that otherwise varies by whoever writes the prompt.
intake captures WHAT and WHY, never HOW — designing the solution is
brainstorming's job. That boundary governs every story section except
Section 4 (Affected AGENTS.md invariants), which quotes existing project
invariants verbatim as constraints the future solution must respect. Naming a
guardrail the solution has to honor is not designing it — so "auth via the
project's requireAuth barrier" belongs in Section 4, while "add a requireAuth
call to the new handler" is a HOW leak anywhere else.
Target model: Claude via Claude Code. This skill is a prompt artifact and follows
the checklist in docs/prompt-standards.md.
Requires AGENTS.md (the project's invariants file) — the Flow's invariant-tagging
step greps it, and story Section 4 quotes what it finds. If the
repo has none, say so and offer /dev-workflow:workflow-init, which walks you
through writing one.
When to use
- A raw idea or voice transcript arrives and needs to enter the workflow, before any brainstorming — so the entrance is consistent regardless of author.
- A backlog line needs to become a reviewable story before design starts.
Not for designing a solution (that's superpowers:brainstorming), and not for
items that already have an approved story/spec or have moved into solution design.
Flow
Follow in order. Each step names why it exists.
- Read the input — the idea or transcript (German or English). The story you write is in English (the codebase and AGENTS.md language), preserving domain terms the user used verbatim where meaning matters — so downstream grep and consistency hold even for German input.
- Detect ambiguity — if any of the six story sections can't be filled from the input without guessing (most often vague acceptance criteria or an unclear outcome), ask targeted questions first — surface gaps rather than filling them silently (CLAUDE.md §1).
- Assess the profile — derive a proposal for two axes and a validation mode, so
the single question round below can carry it. Nothing is recorded yet:
- Risk —
trivial(no behavioural effect in the artifact's own execution context; for a prompt artifact the text is the behaviour, so a wording change to a skill, command, agent definition, hook message or template is not trivial by default) ·standard(a behaviour change hitting no named trigger — the default) ·high(the change affects a named domain trigger — auth, permissions, payments, migrations, data deletion, public APIs, personal data, supply chain — or a named effect trigger — irreversibility, data loss or corruption, outage exposure). - Security relevance —
none(touches no asset, trust boundary, role or external system — a real answer and the common one) ·standard(touches one without changing what it permits) ·high(changes a trust boundary, an authorization decision, or the handling of secret or personal data). - Validation mode, derived not asked: effective level =
max(risk, security)overnone|trivial → 0,standard → 1,high → 2→battery/battery+check/battery+check+verification, plus+abuse-pathwhen and only when security ishigh.
- Risk —
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 301 lines · 58 tokens per session scan A a23aeb3d2109
intake is a skill published in the GitHub repository dsnger/dev-workflow-kit (5 stars, last pushed 6d ago), licensed MIT. It adds 58 tokens to every session and 4,086 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
run
Conduct a task end to end, from a one-line fix to a multi-day programme - a short interview, then autonomous execution to the finish. Classifies the task S/M/L/XL, configures itself to the repo, routes each role to a cost tier, drives the agent team from the kanban board, and stops only at genuine decisions. Use for…
procoder
Work like a senior developer in a repository governed by procoder: run the commit gate before calling anything done, format and lint through the binary, and drive the spec, plan, todo, backlog, and sprint chain in .procoder/. Use this skill when the repository contains a .procoder/ directory or an AGENTS.md naming…
status
Where is the work right now. Regenerates the projections and the kanban board from the journal and answers with the progress line, the agents still running, the open gates and the resume steps. Read-only. Use for /tyran:status or when asked what is going on.
dxkit-remediate
Set up and operate the remediation lane: preview the work-order plan (tiers, budgets, paused classes) at $0, run a task locally inside the verified frame (deterministic recipes first, a scoped agent only for what remains), enable the scheduled workflow, read the order ledger, and tune the budgets and the circuit…
backlog
Manage the project's tech debt backlog. Add, list, fix, wontfix, delete, prioritize, and suggest batch actions on tracked issues. Used by audit and review skills to persist findings, and directly by users to manage accumulated debt. Modes: list [category], add [description], fix B-{N}, wontfix B-{N} [reason], delete…
Tech Debt Auditor
Identifies and prioritizes technical debt in a codebase with an effort/impact matrix.