Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Everyone-Needs-A-Copilot/claude-copilot --skill protocolgit clone --depth 1 https://github.com/Everyone-Needs-A-Copilot/claude-copilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/protocol)<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/protocol"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/protocol/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/protocol"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/protocol.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.02420 |
| Opus 5.5 | $0.00022 | $0.00968 |
| Sonnet 5.5 | $0.00011 | $0.00484 |
| Haiku 4.5 | $0.00006 | $0.00242 |
Grade A, and why
protocol scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Protocol
$protocol is the primary Codex Copilot entrypoint for new work.
Use it at the start of a task to decide how the work should proceed.
Purpose
It should behave like the Claude Copilot /protocol command in intent:
- classify the request
- choose the correct specialist workflow
- require the right kind of thinking before implementation
- route the work through the correct agents
In Codex, that means:
- invoke specialist skills in the main session by default
- use
spawn_agentonly when the user explicitly asks for subagents or parallel execution - use
tcas the durable record for substantial work
Repository Decision Instruments
Before routing substantial work, check whether the repository defines its own decision instruments:
- If a root
SOUL.mdexists, read it before substantial product-facing work. Use it to decide whether the product direction should be built, reshaped, or rejected before specialist routing continues. - If
docs/01-architecture/12-architecture-guiding-principles.mdexists, read it before durable technical, architecture, migration, data, security, performance, AI pipeline, or productized implementation work. Use it as the technical decision lens.
Keep these instruments separate:
SOUL.mdanswers whether the product direction fits the product's purpose, taste, anti-patterns, and quality bar.- architecture principles answer how accepted product direction should be built safely, scalably, efficiently, and securely.
Request Classification
| Request type | Signals | Workflow |
|---|---|---|
| defect | broken behavior, regression, failing tests, bug fix | bug |
| technical | architecture, refactor, backend, migration, optimization | technical_feature |
| experience | user-facing feature, workflow, screen, UI, UX | experience_feature |
| physical-digital | hardware, connected product, tangible service touchpoint, physical object plus software | physical_digital_feature |
| UI polish | visual refinement, component styling, layout polish | ui_polish |
| security-sensitive | auth, permissions, secrets, trust boundaries | security_sensitive |
| infrastructure | CI, deploy, environment, observability, worktrees, release automation | infrastructure |
| ambiguous | improve, update, change, enhance without clear direction | ask for clarification before routing |
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed 7c4c46d28d42
- 7d ago Changed · +18 lines e17d3930fe60
- 1mo ago Changed · +10 lines 075c88b2ba8d
- 1mo ago Changed · +36 lines 120f9d0383b9
- 1mo ago Changed · +4 lines 6366c9a677a6
- 1mo ago First seen · 138 lines · 56 tokens per session scan A 5df0b6ea857c
protocol is a skill published in the GitHub repository Everyone-Needs-A-Copilot/claude-copilot (14 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 2,420 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
theokit-agents
TheoKit agent/LLM integration — agents/.ts convention (AgentBuilder), the tool() builder, capabilities (advanced/DI), useAgent client hook.
theokit-ui
@theokit/ui AI-native component library — AI-agent surfaces (ChatThread, ChatMessage, ChatComposer, ToolCallCard, AgentStream), theming, providers; generic primitives (CodeBlock, Sidebar, Button) come from @usetheo/ui.
theokit-gateways
Receiving messages from Telegram, WhatsApp, Slack and other platforms — handleChannelWebhook, the @theokit/gateway- adapters, signature validation, the onMessage seam.
theokit-frontend
TheoKit frontend — file-based routing, layouts, theoFetch typed client, useAgent, React patterns.
theokit-routes
TheoKit server routes — the route() builder, Zod validation, HTTP methods, dynamic params, error handling.
theokit-config
TheoKit configuration — the config() builder, plugins, security, storage, agents, build targets.