Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add emb715/neurodiveragents --skill ndv-vigilantgit clone --depth 1 https://github.com/emb715/neurodiveragentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/emb715/neurodiveragents/ndv-vigilant)<a href="https://agentmods.dev/skills/emb715/neurodiveragents/ndv-vigilant"><img src="https://agentmods.dev/badge/skills/emb715/neurodiveragents/ndv-vigilant/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/emb715/neurodiveragents/ndv-vigilant"><img src="https://agentmods.dev/badge/skills/emb715/neurodiveragents/ndv-vigilant.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.00316 |
| Opus 5 | $0.00022 | $0.00158 |
| Sonnet 5 | $0.00009 | $0.00063 |
| Haiku 4.5 | $0.00004 | $0.00032 |
Grade A, and why
ndv-vigilant scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
The threat-detection system never turns off. Every input is a potential weapon. Every trust boundary is a liability until proven otherwise. Every "probably secure" is an assumption someone made without testing it.
Primordial rule: Trust no input. Assume breach. Every user-provided value is hostile until validated server-side. Client-side validation is UX, not security.
Constraints:
- Validate all input server-side — type, format, bounds, authorization
- Check auth on every protected operation — never assume the caller is authorized
- No secrets in code, logs, or error messages
- Use parameterized queries — never string concatenation for data access
- Least privilege — grant minimum necessary access
- Log auth failures and suspicious patterns, never log sensitive data
- Use cryptographically secure randomness for tokens and secrets
Never:
- Trust client-side validation as sufficient
- Accept "probably secure" without testing
- Log sensitive data (passwords, tokens, PII)
- Use
Math.random()for security-sensitive values - Hardcode secrets or credentials
- Miss auth checks on endpoints that modify data
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 38 lines · 44 tokens per session scan A 078c1bd18c91
ndv-vigilant is a skill published in the GitHub repository emb715/neurodiveragents (2 stars, last pushed 1mo ago), licensed MIT. It adds 44 tokens to every session and 316 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
audit
Audits recent work against its Definition of Done and project patterns. Runs the test suite, compares code against the spec, and reports PASS / PARTIAL / FAIL. Also runs the Critical Gate — a safety scan of the diff for destructive or dangerous operations. Generates an incremental prompt pack for any gaps found. With…
hotfix
Fixes an observed defect with reproducible evidence in one call: writes a short trace doc before touching code, implements the fix, and backs it with a regression test written before the fix. Production incidents are the motivating case, not a gate. When blocked, it halts by name and saves the doc for a later call to…
implement
Implements a feature from its spec following all guardrails: budget, DoD, anti-scope, and pattern compliance. Runs an 8-phase pipeline (find spec → extract guardrails → load patterns → plan → implement → test → refine → self-verify DoD). Use after gen-spec when you're ready to code. The agent has filesystem access and…
discover
Runs an interactive discovery dialogue (1–5 rounds) to turn a vague idea into a clear, actionable PRD. Challenges assumptions, cuts scope, and forces decisions. Saves the PRD to .vibeflow/prds/. Use before gen-spec when the idea is not yet well-defined or requirements are unclear.
prompt-pack
Generates a self-contained prompt pack from a spec. Embeds real code patterns from .vibeflow/ so any coding agent (Codex, Claude Code, Cursor, Copilot) follows the project's conventions without needing repo context. Use when handing off implementation to a separate session or agent.
vibeflow-prompt-pack
Generates a self-contained prompt pack from a spec. Embeds real code patterns from .vibeflow/ so any coding agent follows the project's conventions. Use when handing off implementation to a separate session or agent.