Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/garfiec/librechat-mobile/sync-upstreamnpx skills add garfiec/Librechat-Mobile --skill sync-upstreamgit clone --depth 1 https://github.com/garfiec/Librechat-MobileWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/garfiec/librechat-mobile/sync-upstream)<a href="https://agentmods.dev/skills/garfiec/librechat-mobile/sync-upstream"><img src="https://agentmods.dev/badge/skills/garfiec/librechat-mobile/sync-upstream.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.03510 |
| Opus 5 | $0.00044 | $0.01755 |
| Sonnet 5 | $0.00018 | $0.00702 |
| Haiku 4.5 | $0.00009 | $0.00351 |
Grade A, and why
sync-upstream scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sync Upstream
Synchronize the Switchboard app with a newer version of the official LibreChat server.
You are the coordinator. You run the lightweight deterministic work yourself with Bash
(prereqs, target/mode resolution, final consistency asserts) and own the three human decision
points. All heavy parallel work is delegated to two dynamic workflows — you never read or
write app code yourself.
[you] 0. Prereqs + resolve target + detect mode (Bash — fail loud on ambiguity)
│
[WF1] 1. sync-upstream-discovery — parallel multi-angle sweep → converged findings
│
[you] 2. HITL INTERVIEW — the one real gate: target + scope + direction (AskUserQuestion)
│
[WF2] 3. sync-upstream-implement — implement → build+consistency gates → ≥2 independent review passes
│
[you] 4. TEST + PUSH TAIL — present test plan, facilitate device testing, hold the push gate
Two workflows do the work; you hold the seams. A workflow cannot pause to ask the user — that is exactly why the target choice, the proposal approval, and the no-push/device-test boundary live in your main loop between invocations, never inside a script.
Two modes
Resolve these before anything else (Phase 0), because they change the whole run:
| Mode | Trigger | Goal | Version bookkeeping |
|---|---|---|---|
| sync | resolved target commit ≠ current pin | absorb new upstream changes | advances (version.properties, UPSTREAM_VERSION, submodule, commit map) |
| audit | resolved target commit == current pin (or audit in $ARGUMENTS) |
re-check that the LAST synced delta was fully/correctly absorbed — find misses | none — the pin does not move |
Audit's default range is the last synced delta (previous pin → current pin), recovered from
UPSTREAM_VERSION's own git history. --full widens it to full-pin reconciliation.
Target Modes (sync)
| Mode | Target looks like | backendTargetVersion |
UPSTREAM_VERSION | Gating strategy |
|---|---|---|---|---|
| release | v0.8.8 (default: latest stable tag) |
0.8.8 |
tag=v0.8.8, commit=<tag commit> |
isCompatibleOrNewer(version, "0.8.8-rc1") |
| rc | v0.8.8-rc1 |
0.8.8-rc1 |
tag=v0.8.8-rc1, commit=<tag commit> |
isCompatibleOrNewer(version, "0.8.8-rc1") |
| partial | dev, main, or a SHA |
<base>+dev.<sha8> |
tag=<last v-tag at/before commit>, commit=<target SHA> |
supportsFeature(detected, "<next-rc-line>", landedDate) |
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 234 lines · 89 tokens per session scan A 4dc411212ded
sync-upstream is a skill published in the GitHub repository garfiec/Librechat-Mobile (85 stars, last pushed today), licensed MIT. It adds 89 tokens to every session and 3,510 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
deepchat-cli
Use DeepChat's bundled CLI control plane for model inference, image/video/speech generation, transcription, OCR, artifact inspection, public configuration, Skills, and MCP operations. Activate when a user asks to invoke DeepChat capabilities that are not already exposed as a more specific tool, compare models, run a…
add-provider
Add a DeepChat LLM provider through explicit reviewed source changes. Use when a developer asks Codex to add a provider, provider profile, upstream provider config, model catalog mapping, provider auth behavior, or a special provider adapter in this repository.
deepchat-release
Prepare and publish DeepChat releases in this repository. Use when Codex needs to bump the app version, update CHANGELOG.md, keep release notes bilingual from v1.0.1 onward with English bullets first and Chinese bullets second, run release checks, create or update versioned release branches such as release/v1.0.1…
web-artifacts-builder
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
git-commit
Generate well-formatted git commit messages following conventional commit standards.
doc-coauthoring
Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers.…