Borrowing it
Nothing to install: this file belongs to egregore-labs/egregore. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/egregore-labs/egregore/main/.claude/skills/onboarding/SKILL.mdgit clone --depth 1 https://github.com/egregore-labs/egregoreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/egregore-labs/egregore/onboarding)<a href="https://agentmods.dev/skills/egregore-labs/egregore/onboarding"><img src="https://agentmods.dev/badge/skills/egregore-labs/egregore/onboarding/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/egregore-labs/egregore/onboarding"><img src="https://agentmods.dev/badge/skills/egregore-labs/egregore/onboarding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 112 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 113 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00038 | $0.05604 |
| Opus 5 | $0.00019 | $0.02802 |
| Sonnet 5 | $0.00008 | $0.01121 |
| Haiku 4.5 | $0.00004 | $0.00560 |
Grade A, and why
onboarding scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- DO NOT call `curl` or any HTTP endpoint. How it starts
The opening of the file, as written. The whole thing — 454 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Welcome a new user to this Egregore.
Deterministic state machine: VERIFY → ORIENT → INVITE → FIRST_HANDOFF. Orient first, invite early — show what Egregore is, then show it works best with others. Profile data collected progressively during real work.
When to invoke
User says: "/onboarding", or is a new user whose onboarding_complete is false and needs to be verified, oriented, offered an invite, and walked through their first handoff.
Output discipline — CRITICAL
This is a conversation with a new user, not a CI pipeline.
Rules:
- Batch all reads at once. Before each state, read ALL files you'll need in a single parallel tool call.
- Batch all writes at once. State file update + API call = one parallel tool call group.
- Suppress all command output. Every bash call must use
2>/dev/nullor capture output. - No narration of internal steps. Never say "Let me read the config" or "Saving to state."
- VERIFY should be invisible. All checks in one bash call. If everything passes, say nothing.
What the user should experience:
- A framing of what Egregore is (2-3 sentences from egregore.md)
- "It works best when there's someone on the other end."
- Name question (one AskUserQuestion)
- Creators only: Invite offer → invite someone or skip. Joiners skip this step entirely — they just got here; they shouldn't be bringing more people in before they've done any work.
- Save/handoff one-liner explanation
- "What are you working on?" → creates branch
- User works normally
- On session end: first handoff. Plus a gentle nudge about inviting others, creators only, if they skipped the invite offer.
- "You're in."
Local mode gate (applies to ALL states)
During VERIFY, check api_url from egregore.json. Store for entire flow.
If api_url is empty — local mode:
- DO NOT call
bin/graph.shunder any circumstances. - DO NOT call
curlor any HTTP endpoint. - ONLY
gitoperations are allowed.
If api_url is set — connected mode. All API calls proceed normally.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 454 lines · 38 tokens per session scan A 2b26f0dbfa12
onboarding is a skill published in the GitHub repository egregore-labs/egregore (282 stars, last pushed 6d ago), licensed MIT. It adds 38 tokens to every session and 5,604 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sw-handoff
Write a portable, secret-scrubbed handoff doc plus a diff of your uncommitted edits so another tool or machine resumes where you stopped. Use for "handoff", "out of tokens", "switch to Codex".
tokf-discover
Find missed token savings by scanning AI coding session files for commands that ran without tokf filtering.
handoff
Write a portable, secret-scrubbed handoff doc so this work can continue in any AI tool or on any machine. Use when saying "handoff", "running out of tokens", or "continue elsewhere".
feishu-openapi-skill
Operate Feishu or Lark IM APIs through UXC with a curated OpenAPI schema, tenant-token bearer auth, and chat/message guardrails.
slack-openapi-skill
Operate Slack Web API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails.
claude-code-expert
Especialista profundo em Claude Code - CLI da Anthropic. Maximiza produtividade com atalhos, hooks, MCPs, configuracoes avancadas, workflows, CLAUDE.md, memoria, sub-agentes, permissoes e integracao com ecossistemas.