Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/florianbruniaux/claude-code-ultimate-guide/source-command-track-mentionsnpx skills add FlorianBruniaux/claude-code-ultimate-guide --skill source-command-track-mentionsgit clone --depth 1 https://github.com/FlorianBruniaux/claude-code-ultimate-guideWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00030 | $0.02168 |
| Opus 5 | $0.00015 | $0.01084 |
| Sonnet 5 | $0.00006 | $0.00434 |
| Haiku 4.5 | $0.00003 | $0.00217 |
Grade A, and why
source-command-track-mentions scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
The source is not reproduced here
Licensed CC-BY-SA-4.0
The repository is licensed CC-BY-SA-4.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +81 lines · +9 tokens per session b0e5179a3410
- yesterday First seen · 127 lines · 21 tokens per session scan A 6d144f5b93ef
source-command-track-mentions is a skill published in the GitHub repository FlorianBruniaux/claude-code-ultimate-guide (5,863 stars, last pushed today), licensed CC-BY-SA-4.0. It adds 30 tokens to every session and 2,168 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dev-docs
项目文档记录规范。开发期维护 docs/开发记录.md（导航页）、docs/开发记录/（按日期明细）、 CHANGELOG.md（正式发布日志）、docs/技术架构.md（架构设计）时使用。 提供进度快照、会话交接、按日期分文件、发版记录、架构维护的完整规则。.
project-run
运行面板配置。用户问「怎么启动项目」「加个运行方式」「新增/修改运行命令」、 写常用脚本（运行/构建/打包/安装/发版部署等），或项目完成需要生成运行配置时使用。 提供 .easymint/run.json 的完整格式规范。.
project-brain
Triggers (all require explicit user request — do NOT activate just because a brain/ folder exists): (1) The user wants to set up project-level memory ("set up project brain", "scaffold project context", "init project brain", "建项目脑"). (2) The user is in a directory containing brain/ AND explicitly asks to resume /…
creation-guide
创建项目引导（新建项目/直接创建时使用）。收到创建类系统消息、需要从模糊想法 引导用户到可开发需求时，Read 本 skill 并按清单引导。.
creation-flow-prototype
创建项目引导·快速原型。有 UI 的中等以上项目、需求确认后需要出可交互原型让用户看到并确认时使用。.
creation-flow-cost
创建项目引导·成本校验。表单已采集部署/AI/预算、或对话中确认了功能清单后，校验成本与功能是否冲突、冲突时帮用户做取舍时使用。.