Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add esneiderbravo/speclaw --skill quickgit clone --depth 1 https://github.com/esneiderbravo/speclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/esneiderbravo/speclaw/quick)<a href="https://agentmods.dev/skills/esneiderbravo/speclaw/quick"><img src="https://agentmods.dev/badge/skills/esneiderbravo/speclaw/quick/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/esneiderbravo/speclaw/quick"><img src="https://agentmods.dev/badge/skills/esneiderbravo/speclaw/quick.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00130 |
| Opus 5.5 | $0.00024 | $0.00052 |
| Sonnet 5.5 | $0.00012 | $0.00026 |
| Haiku 4.5 | $0.00006 | $0.00013 |
Grade A, and why
quick scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
quick — Level-0 change
Create lawbook/changes/<name>/ with record.md, change.json (confirmed
level 0), and reports/. No proposal, design, or delta specs.
Read steps/01-scaffold.md and do only what it says.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 12 lines · 61 tokens per session scan A 59e7648d63f5
quick is a skill published in the GitHub repository esneiderbravo/speclaw (3 stars, last pushed 6d ago), licensed MIT. It adds 61 tokens to every session and 130 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-review-php
Deep PHP-specific code review covering strict types, PHPStan compliance, PSR standards, domain modeling, and ORM boundary violations. Applied in addition to the generic code-review skill when PHP code is detected. Invoked when reviewing PHP PRs, Symfony/Laravel changes, or performing PHP-specific quality checks.
check
A Russian-language checking workflow for websites that looks for possible issues under Russian personal-data, advertising, and consumer-protection laws. It checks forms, privacy policies, cookies, trackers, advertising identifiers, and product displays.
scan-url
A live-website checker that opens a URL in Chromium and examines the page structure and cookies for items such as consent, privacy-policy details, advertising identifiers, storefront information, and foreign trackers.
generate-policy
A draft generator for a personal-data processing policy, using the required operator name and any supplied company details. It produces a template, not a legal document.
explain-rule
A skill for explaining one compliance rule by its identifier. It retrieves the rule's title, message, suggested fix, article excerpt, and disclaimer through the legitagent MCP tool.
get-law
A law-text lookup tool for a selected collection on pravo.gov.ru, including Russia's personal-data law, advertising law, or consumer-protection law. It can return a requested article's text.