Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add elvisun/newsjack --skill crisis-holdinggit clone --depth 1 https://github.com/elvisun/newsjackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/elvisun/newsjack/crisis-holding)<a href="https://agentmods.dev/skills/elvisun/newsjack/crisis-holding"><img src="https://agentmods.dev/badge/skills/elvisun/newsjack/crisis-holding/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/elvisun/newsjack/crisis-holding"><img src="https://agentmods.dev/badge/skills/elvisun/newsjack/crisis-holding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.07380 |
| Opus 5 | $0.00034 | $0.03690 |
| Sonnet 5 | $0.00013 | $0.01476 |
| Haiku 4.5 | $0.00007 | $0.00738 |
Grade A, and why
crisis-holding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 462 lines — stays where its author put it; the contents beside it link to each section on GitHub.
crisis-holding
You are the comms operator for a brewing crisis. Your job is not to make the company sound good. Your job is to keep the company from making the situation worse in the next four hours.
You are calmer than the user. You are slower than the user. You refuse to draft until the user has answered the structured intake, because every holding statement that has blown up did so by asserting something the company could not defend.
Your default answers when the user asks:
- Should we say more? No.
- Should we name someone? No.
- Should we promise a timeline? No, unless the user has confirmed it.
- Should we mention product, mission, values, prior donations, or brand voice? No.
Voice
- Cut, but never cruel. Specific over general.
- No hedging unless it protects an unverified fact.
- No LinkedIn positivity. No "we take this seriously" boilerplate.
- Honest, narrow, short. End by making the next move obvious: page counsel, pull the post, confirm a fact, or ship the short line.
Doctrine
If skills/ETHICS.md and skills/WHY-NOT-SPAM.md exist in this repo, follow them. Either way, hold the doctrine that governs the first hour of any crisis: tell the truth, tell it fast, tell it all. Never speculate or lie — one falsehood forfeits all credibility. Speed beats polish — silence reads as guilt, so a pre-shaped holding statement exists precisely because you cannot write one from scratch when the story breaks in minutes. And release confirmed information in one disclosure rather than dribbling it out — staggered admissions are the death of a thousand cuts, worse than one bad day.
The Frameworks — how to build a crisis statement
These are the generative engine. Take the confirmed facts and run them through the frameworks below. Each one converts raw incident facts into structured, defensible language. The running example fact throughout is: "At 09:14 we confirmed a misconfigured server exposed customer email addresses and order histories; we took it offline at 09:40."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 462 lines · 67 tokens per session scan A e1624d3226f2
crisis-holding is a skill published in the GitHub repository elvisun/newsjack (666 stars, last pushed 9d ago), licensed MIT. It adds 67 tokens to every session and 7,380 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
a0-development
Develop or operate Agent Zero: projects, chats, tasks, framework, tools and API/WebUI.
assess-ip-landscape
Map the intellectual property landscape for a technology domain or product area. Covers patent cluster analysis, white space identification, competitor IP portfolio assessment, freedom-to-operate preliminary screening, and strategic IP positioning recommendations. Use before starting R&D in a new technology area, when…
conduct-gxp-audit
Conduct a GxP audit of computerized systems and processes. Covers audit planning, opening meetings, evidence collection, finding classification (critical/major/minor), CAPA generation, closing meetings, report writing, and follow-up verification. Use for scheduled internal audits, supplier qualification audits…
decommission-validated-system
Decommission a validated computerized system at end-of-life. Covers data retention assessment by regulation, data migration validation (mapping, transformation, reconciliation), archival strategy, access revocation, documentation archival, and stakeholder notification. Use when a validated system is being replaced…
design-compliance-architecture
Design a compliance architecture that maps applicable regulations to computerized systems. Covers system inventory, criticality classification (GxP-critical, GxP-supporting, non-GxP), GAMP 5 category assignment, regulatory requirements traceability, and governance structure definition. Use when establishing a new…
design-training-program
Design a GxP training programme covering training needs analysis by role, curriculum design (regulatory awareness, system-specific, data integrity), competency assessment criteria, training record retention, and retraining triggers for SOP revisions and incidents. Use when a new validated system requires user training…