Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add griddynamics/rosetta --skill init-workspace-flowgit clone --depth 1 https://github.com/griddynamics/rosettaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/griddynamics/rosetta/init-workspace-flow)<a href="https://agentmods.dev/skills/griddynamics/rosetta/init-workspace-flow"><img src="https://agentmods.dev/badge/skills/griddynamics/rosetta/init-workspace-flow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/griddynamics/rosetta/init-workspace-flow"><img src="https://agentmods.dev/badge/skills/griddynamics/rosetta/init-workspace-flow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Memory Poisoning · line 36 Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.Fix: Protect agent memory and state from modification by untrusted content. Use read-only memory for critical instructions and validate all state changes.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.02021 |
| Opus 5.5 | $0.00008 | $0.00808 |
| Sonnet 5.5 | $0.00004 | $0.00404 |
| Haiku 4.5 | $0.00002 | $0.00202 |
Grade A, and why
init-workspace-flow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 168 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<init_workspace_flow>
<description_and_purpose>
Problem: Workspace initialization is multi-phase, order-dependent, and must handle install/upgrade/plugin modes without overwriting human content. Validation: State file tracks every phase with file inventory; verification confirms all files exist.
</description_and_purpose>
<workflow_phases>
<prerequisites phase="0", applies="ALL">
- All Rosetta prep steps MUST be FULLY completed
- MUST ALWAYS use todo tasks ledger, ASAP. Phases are sequential. Independent tasks can run in parallel.
- MUST FOLLOW THIS WORKFLOW EXACTLY AND FULLY.
- MUST extensively use subagents as this is a large workflow.
- Each phase updates
agents/init-workspace-flow-state.md. Optional phases marked as skipped. Keep state file very brief. - No rush, Take your time, Be thorough, ACCURACY > SPEED
- Dual-mode: every phase reads
state.mode→ check-exists → identify-gaps → create/update → preserve-human-content → report-changes. - Composite workspace: documentation phases to create top-level index referencing sub-repository docs.
- IF state.file_count >= 100 (set by Phase 3): pass "USE SKILL
large-workspace-handling" to Phase 5, 7, 8 subagents. - Create
agents/init-workspace-flow-state.md. - Conditional phases:
- If you have already in context "RUNNING AS A PLUGIN": MUST NOT EXECUTE "shells" phase 2
- Else MUST EXECUTE "shells" phase 2
- MUST NOT EXECUTE "patterns" phase 5 unless user directly requests it; mark skipped
- Note:
rosetta@rosettais an MCP connector, not a plugin — it follows the normal path (shells phase 2 executes) - If user says to initialize rules, subagents, agents, workflows, commands it ONLY means to execute "shells" phase 2.
- Upgrade from R2 to R3 is exactly the same process as define here, but you already have some files available, which you can reuse.
- Additionally tell subagents: "If you want to use shell commands, prefer to combine individual shell commands into single simple shell script and execute it, but already available tools ALWAYS take precedence."
- When subagents already available, you are orchestrator and senior team lead and effective manager. Orchestrator makes process poka-yoke and reliable itself, provides clear context and instructions, uses subagents as his team, tells WHAT to do and HOW to think, does not work on tasks for subagents itself nor provides mechanical tasks nor paraphrases instructions, but appends context, ensures subagents provide grounded information, provides already known references to files, instructions, phases, steps, skills, keep agents focused. Prompt subagents to report honestly, concise, terse, and we exact links to files it created/modified.
- Remember: subagents always start with fresh context on every run. User can not see orchestrator and subagent communication.
- Subagent prompt must be concise, terse, factual, specific, DRY, grounded, etc.
- ENFORCE provided required subagent models and effort levels.
- Detect mode: install, upgrade, or plugin. Set state.mode, state.plugin_active, state.composite, state.existing_files. Creates/reads gain.json. GAIN.json questions keep for questions phase.
- APPLY SKILL FILE
phases/init-workspace-flow-context.md - Update state
- Generate shell files for skills, agents, workflows. Skip if state.plugin_active.
- Input: IDEs, Output: shell configs, bootstrap rule, load-project-context skill shell.
- APPLY SKILL FILE
phases/init-workspace-flow-shells.md - Update state
- Analyze workspace tech stack, structure, source code file count.
- Output: TECHSTACK.md, CODEMAP.md, DEPENDENCIES.md, state.file_count.
- APPLY SKILL FILE
phases/init-workspace-flow-discovery.md - Update state
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- phases/init-workspace-flow-codegraph.md 4.2 KB
- phases/init-workspace-flow-context.md 7.3 KB
- phases/init-workspace-flow-discovery.md 4.4 KB
- phases/init-workspace-flow-documentation.md 8.1 KB
- phases/init-workspace-flow-patterns.md 4.4 KB
- phases/init-workspace-flow-questions.md 1.6 KB
- phases/init-workspace-flow-shells.md 3.7 KB
- phases/init-workspace-flow-verification.md 4.4 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +3 lines 73aeb6abe49b
- 1mo ago First seen · 165 lines · 21 tokens per session scan A 28403e131ad6
init-workspace-flow is a skill published in the GitHub repository griddynamics/rosetta (360 stars, last pushed today), licensed Apache-2.0. It adds 21 tokens to every session and 2,021 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
issue-creation
Trigger: issue creation, bug reports, feature requests, or issue approval. Create and triage GitHub issues from repository evidence.
systemic-issue-triage
Trigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.
daily-briefing
Start your day with a prioritized CRM briefing — works for any monday CRM setup: pipeline, contacts, accounts, leads, or no board at all. Use when someone says 'morning briefing', 'daily brief', 'what's on my plate today', 'catch me up on my deals', 'what needs attention', 'what needs my attention', 'anything urgent…
workspace-builder
Build a CRM workspace from scratch — describe your business and get boards, columns, and pipeline stages created in monday. Use when someone says "set up my CRM", "build me a CRM", "create CRM boards for me", "I need a new sales pipeline", "help me get started in monday", "I don't know how to set up my pipeline", or…
meeting-to-deal
Turn meeting transcripts into deal updates — key points, commitments, and next steps posted to matching CRM deals automatically. Auto-creates contacts for new attendees. Use when someone says "log my meetings to deals", "update CRM from calls", "what did I commit to in meetings", "sync notetaker", "log this meeting"…
forecast
Build a forecast dashboard in monday — committed, best-case, and pipeline views by close month, rendered as real dashboard widgets. Use when someone says "build me a forecast", "show me Q2 pipeline", "Salesforce-style forecast", "forecast dashboard", "commit vs best-case", "what's our number this quarter", "how are we…