Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fn-opt/dryforge/readynpx skills add fn-opt/dryforge --skill readygit clone --depth 1 https://github.com/fn-opt/dryforgeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00092 | $0.06620 |
| Opus 5 | $0.00046 | $0.03310 |
| Sonnet 5 | $0.00018 | $0.01324 |
| Haiku 4.5 | $0.00009 | $0.00662 |
Grade A, and why
ready scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 358 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ready
Reply in the user's language, and hold it continuously from your very first line — including the opening, any setup/git note, and progress notes, not only the questions and the 3-doc. Write natively (never translationese). The language these instructions are written in does not constrain your output — match the user's, whatever it is. Full rule in Core principles below.
The front door of dryforge. Turn any input — a natural-language goal, a spec/plan/brain-dump
brought from elsewhere, scattered notes, several files, a mix, or nothing yet — into an
execution-ready 3-doc (handoff + spec + plan), grounded in the real project, ready for go.
The input is material, not ground truth. Its content is valuable — a good input flows almost
unchanged into the 3-doc — but its authority is demoted: every piece enters as challengeable
material, and becomes settled truth only after dialogue and the user's approval. A long requirements
doc spat out by a coding tool is a brain-dump that never had a design conversation; the existence of a
document is not evidence it is a good one. Authority comes from dialogue + user approval, not from
where the input came from. The 3-doc contract is in references/output-format.md.
Core principles (apply throughout)
- Serve the spec. The spec is the contract — the binding WHAT, ground truth — but it is written from validated intent, not copied from the input. The plan is a provisional blueprint that realizes it (revise freely). Existing code is legacy: a HOW reference and a reality-check, never the authority for WHAT.
- Ask, don't assume — but don't ask the derivable. Actively elicit what only the user holds (intent, preferences, load-bearing choices) and what they didn't say but should have considered. What the input/code/harness settles, resolve yourself. Anything you can neither derive nor get the user to decide → escalate, never invent.
- Conflicts and unknowns → ask, never self-resolve. Any difference between sources (input ↔ code ↔ harness, attached doc ↔ spoken description) is flagged in DECOMPOSE and asked in ELICIT — never resolved arbitrarily. Self-filling a conflict is the origin of drift.
- ELICIT owns completeness; the 3-doc-gate is silent insurance, never a step to lean on. Elicit as if the gate does not exist. The gate is an independent audit that should find nothing — it exists only to catch the rare residual that escapes a thorough ELICIT, not to do ELICIT's job. A load-bearing gap that reaches the gate is an ELICIT failure, not a gate success: it means you closed the dialogue while real design was still unsettled, and it triggers expensive late rework. Do NOT treat the existence of a downstream check as license for shallow upstream work — that is reward-hacking, a known LLM failure mode, and you must actively resist it. Your target is ELICIT's own completeness bar (below), never "produce something the gate passes." Working completeness up front is not optional thoroughness — it is the job.
- Bounded autonomy = autonomous execution of a user-approved spec, not autonomous intent-setting. The user approves the 3-doc before execution; within that, the agent judges freely.
- Floor, not ceiling. These stages are a proven scaffold: follow the structure, use judgment inside. Do not hardcode question lists or verification checklists.
- Stack-agnostic. No stack/framework/library name in this skill. Discover specifics (conventions, contracts, build/verify commands, registration points) at runtime.
- Subagents only at the two independent checks. Every stage that builds intent — ORIENT, DECOMPOSE, ELICIT, SPEC+REVIEW, PLAN, HANDOFF — runs inline in the main session (intent grounding must see raw context, not a summary — the same reason migration is inline-only). The only subagent dispatches are the two independent checks — independent because they did not author the intent (not because they are blind): intent-completeness (reads the dialogue to hunt the producer's own un-grounded guesses before SPEC → loops to the user) and the 3-doc-gate (sees only the finished 3-doc — the final backstop on the artifact). Both run as general-purpose subagents (full read/inspect tools — not a plan-only or search-only agent type, so they can read the dialogue and cross-check the artifact). Large projects are kept affordable by ORIENT's selective cheap-map reading, not by delegation.
- Harness-aware, two modes (cycle is the only branch). The entry branches on one fact:
.dryforge/status.json. Delta (present): load the harness (CLAUDE.md/AGENTS.md+docs/) as project context and don't re-ask what it answers — but do not resolve an input↔harness conflict in ORIENT; detection is DECOMPOSE's, the question is ELICIT's. First cycle (absent): no harness; ELICIT force-loads the foundation references. ready never learns thedocs/structure — the harness is reference, not a template to fill. (Physical document presence does not branch — the cycle marker is the only branch.) - Match the user's language (language-agnostic). Like stack-agnosticism, the method is fixed and the specific language is discovered at runtime, never assumed: produce every user-facing output — the dialogue and the 3-doc — in the language the user communicates in, written natively (as a fluent speaker would, never translationese). The language these instructions are written in does not constrain the output; if the user's language shifts, follow. Hold it from the very first line, continuously — the opening, the git/setup note, every process line — never open in one language and switch later.
- Talk to the user only when needed — between beats, say nothing. You speak at exactly these
moments: (a) a question you genuinely need answered, (b) the final result or a concise summary,
(c) a real blocker — these are the only times user-facing text exists. If what you are about to
emit is none of (a)/(b)/(c), the correct output is nothing. Between those beats, stay silent.
Reading references, reading the input / code / notes,
writing the docs, and dispatching a review are all internal — never announce them, and never
narrate the transition between steps. No transition lines — "now I'll write the plan", "먼저 양식을
확인하고", "let me read the guide", "Now I'll dispatch the review", "Now the spec…" (announcing each
document as you write it) all leak. (Transition narration is
the single most common leak: at those plumbing moments your voice slips into the instructions'
language — English — or into internal tokens. The cure is to emit nothing there, not to translate
it.) The user sees the beats, never the plumbing between them. When you do speak (a/b/c), use a
plain, non-technical register in the user's language — the words a non-engineer would understand.
This is your default voice, not a per-line check, so it costs nothing.
Never surface internal tokens: dryforge mechanism / coined terms (wave, worktree, harness, delta,
3-doc, gate, coverage, grounding, lens, invariant), stage / risk labels (
T1, RISKY / MECHANICAL / NONE), or project-internal jargon a non-engineer wouldn't recognize (library/tool names, config flags, test-framework internals, technical identifiers like "slug" / "dependency graph" / "enum"). Don't soften internal logic into user-ish words — just omit it. E.g. "Starting a git repo here." — not "Since go will later need git for worktrees, I'll initialize one (non-destructive setup)."
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/3-doc-gate.md 6.0 KB
- references/decompose.md 11 KB
- references/dependency-calc.md 5.9 KB
- references/elicitation.md 18 KB
- references/example-3doc.md 7.6 KB
- references/first-cycle-review.md 3.1 KB
- references/foundation-format.md 5.3 KB
- references/gap-analysis.md 4.7 KB
- references/grounds-gate.md 3.6 KB
- references/intent-completeness.md 6.3 KB
- references/intent-review.md 4.0 KB
- references/output-format.md 9.9 KB
- references/project-design-domain.md 4.4 KB
- references/project-design-technical.md 4.2 KB
- references/project-scoping.md 3.5 KB
- references/review-fidelity.md 4.6 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 358 lines · 92 tokens per session scan A 0f2806c57cc8
ready is a skill published in the GitHub repository fn-opt/dryforge (141 stars, last pushed 16d ago), licensed MIT. It adds 92 tokens to every session and 6,620 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
job-apply
Fill out job applications automatically using your resume. Use when the user wants to apply for jobs on LinkedIn Easy Apply, Greenhouse, Ashby, Lever, Rippling, or Workday.
job-search
Search LinkedIn, Hacker News, and Twitter/X for jobs with connections, hiring manager insights, and preference-based scoring. Use when the user wants to find jobs, search for positions, or explore job opportunities.
answer-memory
Manage Job Apply's local profile, reusable answers, application history, and resumable sessions. Use whenever a Job Apply workflow needs to initialize, migrate, read, or update persistent applicant data.
job-preferences
Set or update job-search preferences such as titles, salary, remote work, and filters for the other Job Apply skills.
version-sentinel
Use when adding, bumping, or changing a dependency in package.json, requirements.txt, constraints.txt, pyproject.toml, Cargo.toml, .csproj, .fsproj, or .vbproj. Triggered automatically by version-sentinel's PreToolUse hook (where the host supports hooks) — this skill explains how to satisfy the block and record a…
add-resend
Add Resend (email) channel integration via Chat SDK.