Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add endorphin-ai/hasbrains-agent-kit/plugin install statusline-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/endorphin-ai/hasbrains-agent-kit/setup)<a href="https://agentmods.dev/skills/endorphin-ai/hasbrains-agent-kit/setup"><img src="https://agentmods.dev/badge/skills/endorphin-ai/hasbrains-agent-kit/setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/endorphin-ai/hasbrains-agent-kit/setup"><img src="https://agentmods.dev/badge/skills/endorphin-ai/hasbrains-agent-kit/setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.00541 |
| Opus 5.5 | $0.00018 | $0.00216 |
| Sonnet 5.5 | $0.00009 | $0.00108 |
| Haiku 4.5 | $0.00005 | $0.00054 |
Grade B, and why
setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
3. Read `~/.claude/settings.json`. If it already has a `statusLine` entry that is not this one, What it actually says
Turn on the status line
The plugin's hooks already record every run. The status line itself is the one thing a plugin
cannot switch on: Claude Code reads statusLine only from the user's own settings. This skill
adds that entry.
Steps
-
Check
jqis installed (command -v jq). The status line and the hooks need it. If it is missing, tell the user how to install it (brew install jq,apt install jq) and stop. -
Check the script exists:
${CLAUDE_PLUGIN_DATA}/statusline.sh. The plugin copies it there at the start of every session, so it survives plugin updates. If it is missing, copy it now:mkdir -p "${CLAUDE_PLUGIN_DATA}" && cp "${CLAUDE_PLUGIN_ROOT}/statusline.sh" "${CLAUDE_PLUGIN_DATA}/statusline.sh". -
Read
~/.claude/settings.json. If it already has astatusLineentry that is not this one, show it to the user and ask before replacing it. -
Ask whether to show git information: nothing, everything (
--git), or a comma list ofrepo,branch,worktree(--git repo,branch). -
Set the entry, keeping everything else in the file as it is:
"statusLine": { "type": "command", "command": "bash \"${CLAUDE_PLUGIN_DATA}/statusline.sh\"", "refreshInterval": 2 }Append the git option inside the command when the user chose one, for example
bash \"${CLAUDE_PLUGIN_DATA}/statusline.sh\" --git branch. -
Tell the user the status line appears after the next message, and that
/statusline-kit:setupcan be run again to change the git option.
Do not
- Do not also run the kit's
install.sh: it installs the same hooks into~/.claude, and every run would then be recorded twice. If~/.claude/hooks/subagent-stop.shexists, tell the user that both are installed and that one of them has to go. - Do not write anywhere except
~/.claude/settings.json.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 44 lines · 45 tokens per session scan B cc60c779a2bb
setup is a skill published in the GitHub repository endorphin-ai/hasbrains-agent-kit (9 stars, last pushed 3d ago), licensed MIT. It adds 45 tokens to every session and 541 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
night-watch
Autonomous maintenance (dep updates, dead code, small refactors) in isolated branch, off-hours. Triggers: night watch, autonomous maintenance, dep updates.
github-release-management
GitHub release orchestration — automated versioning, testing, deployment, and rollback. Use when cutting a release, tagging a version, drafting release notes, or coordinating a deploy/rollback workflow.
agentic-jujutsu
Quantum-resistant, self-learning version control for AI agents, with ReasoningBank intelligence and multi-agent coordination. Use when designing agent memory/versioning, coordinating multiple agents over shared state, or building experience-replay and learning loops into an agentic system.
github-multi-repo
Multi-repository coordination, synchronization, and architecture management across many GitHub repos. Use when changes span several repositories, keeping repos in sync, or planning cross-repo architecture and dependency work.
hooks-automation
Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre/post task hooks, session management, Git integration, memory coordination, and neural pattern training for enhanced development workflows. Use when configuring Claude Code hooks…
meeting-todos
Use when the user says /meeting-todos, "the meeting is done", "I just had a meeting", "pull the action items", "what did I commit to", or otherwise wants action items from a recent meeting note captured on their to-do list. Also when a meeting note or transcript needs its tasks pulled out. NOT for general task…