Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Dupflo/decision-ledger --skill ledger-reportgit clone --depth 1 https://github.com/Dupflo/decision-ledgerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dupflo/decision-ledger/ledger-report)<a href="https://agentmods.dev/skills/dupflo/decision-ledger/ledger-report"><img src="https://agentmods.dev/badge/skills/dupflo/decision-ledger/ledger-report/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dupflo/decision-ledger/ledger-report"><img src="https://agentmods.dev/badge/skills/dupflo/decision-ledger/ledger-report.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00985 |
| Opus 5.5 | $0.00017 | $0.00394 |
| Sonnet 5.5 | $0.00008 | $0.00197 |
| Haiku 4.5 | $0.00004 | $0.00098 |
Grade A, and why
ledger-report scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ledger-report
The map of what this project's decisions rest on. Report at moments the user already stops at: a commit, a pull request, or an explicit request. Never mid-task.
for p in ~/.claude/skills/decision-ledger/bin/ledger \
~/.claude/skills/ledger-report/bin/ledger \
.claude/skills/ledger-report/bin/ledger \
.agents/skills/ledger-report/bin/ledger; do
[ -x "$p" ] && LEDGER="$p" && break
done
$LEDGER report # the map
$LEDGER askable # concepts due for a revisit here
$LEDGER personal # what the user has defended across projects
The list covers both ways this can be installed: install.sh, which lays down the whole repo, and a skills registry, which copies this directory alone.
Present a map, not a curve
A rising line invites optimisation and becomes exactly the engagement metric this project exists to reject. A map answers the only useful question: where am I thin?
Mastery map: 24 decisions tracked, 21 days
auth/ ██████░░░░ 2 of 5 defended <- thinnest area
data-model/ █████████░ 4 of 5, 1 decayed
ui/ ██████████ 7 of 7
jobs/ ████░░░░░░ 2 of 5, 1 unknown
Transfers observed: 2 (session-storage, cache-invalidation)
Add at most one factual, non-judgemental line:
Since last week,
auth/grew by 340 lines while two of its decisions remain undefended.
Then stop. No advice, no nudging, no offer of a lesson, no encouragement. The information is the product, and anything appended to it reads as a verdict on the person.
Language
Every sentence describes the project, never the developer.
- Say: "
auth/has two decisions with nothing on record." - Never: "you don't understand auth."
The distinction is not cosmetic. It decides whether this is a map someone consults or a rating they resent, and a rating ends up in a performance review, which is the failure mode the whole design avoids. There is deliberately no global score for the same reason: aggregating across areas produces a number that rates a person.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 81 lines · 42 tokens per session scan A a2b0adf4fffa
ledger-report is a skill published in the GitHub repository Dupflo/decision-ledger (6 stars, last pushed 1mo ago), licensed MIT. It adds 42 tokens to every session and 985 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-audit
A broad audit of a codebase covering code quality, security, software structure, test coverage, and documentation consistency.
code-refactor
A code-refactoring workflow that finds overly long or complicated code and reorganizes it into smaller, clearer parts while preserving its purpose.
code-review-workflow
A step-by-step process for reviewing a pull request or merge request, which is a proposed code change awaiting review. It combines file and change summaries, automated checks, and architecture review.
code-reviewer
A broad code review guide that checks source code for quality, security, performance, and common development practices. It can review files, folders, features, recent changes, or a pull request—a proposed change submitted for review.
reviewing-code
Reviews code changes for bugs, performance issues, security problems, and best practice violations. Use when reviewing PRs, before committing, after making code changes, or when user asks to review, check, or look over code. Catches N+1 queries, missing error handling, React hooks issues, test coverage gaps, and…
addressing-pr-feedback
Fetches, organizes, and addresses PR review comments from GitHub. Use when user asks to review PR comments, fix PR feedback, check what reviewers said, address review comments, or handle bot suggestions on a pull request. Triggers on "review PR", "fix comments", "PR feedback", "what did reviewers say", "address PR…