Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/grimoire-rs/grimoirenpx agentmods add skills/grimoire-rs/grimoire/hex-coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/grimoire-rs/grimoire/hex-core)<a href="https://agentmods.dev/skills/grimoire-rs/grimoire/hex-core"><img src="https://agentmods.dev/badge/skills/grimoire-rs/grimoire/hex-core/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/grimoire-rs/grimoire/hex-core"><img src="https://agentmods.dev/badge/skills/grimoire-rs/grimoire/hex-core.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.01382 |
| Opus 5.5 | $0.00026 | $0.00553 |
| Sonnet 5.5 | $0.00013 | $0.00276 |
| Haiku 4.5 | $0.00007 | $0.00138 |
Grade A, and why
hex-core scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
hex-core — Shared Reference Library
hex-core is the library skill of the hex swarm bundle. It holds the
vocabulary and contracts every other hex skill builds on, kept in one
place so they never drift apart. It is never invoked directly — there
is no orchestration flow here and no $ARGUMENTS. The orchestrator skills
(/hex-plan, /hex-execute, /hex-review, /hex-architect) and
/hex-init link into these references.
References
| Reference | Holds |
|---|---|
references/protocol.md |
The bundle's spine — shared shape, tier and overlay grammar, the meta-plan approval gate, spawn-selection precedence, worker coordination (workers never wait, the build-job budget, event-driven completion, degraded modes), traceability IDs, untrusted-text echoes, the constitution gate, the handoff contract, and the per-run upkeep step: what every mode needs. Also carries the load map (which mode opens which sibling beyond the spine) and the what-moved-where pointer table into the six sibling files below, which now hold the per-topic contracts protocol.md used to carry directly. |
references/loop.md |
The canonical Review-Fix Loop (### The last-reviewed anchor, ### Anchor validation, ### Delta round scope, ### The diminishing-returns stop) and the Convergence contract. Conditional-load — see protocol.md's load map for which modes open it. |
references/decompose.md |
Parallel-by-default decomposition — pipelines of steps cut along contracts, the contract wave, the Parallelization table, the schedule log. Conditional-load — see protocol.md's load map for which modes open it. |
references/worktree.md |
Pipeline worktree mechanics. Conditional-load — see protocol.md's load map for which modes open it. |
references/verify.md |
Verification. Conditional-load — see protocol.md's load map for which modes open it. |
references/adversary.md |
The adversary contract. Conditional-load — opened only when adversary=on; see protocol.md's load map. |
references/severity.md |
Finding severity. Conditional-load — see protocol.md's load map for which modes open it. |
references/workers.md |
The worker role index plus the universal worker protocol; full personas (mission, spawn-prompt template, focus modes, output contract) live one file per role under references/workers/ — explorer, architecture-explorer, researcher, builder, tester, reviewer, doc-reviewer, architect, simulator. Orchestrators load only the personas in the resolved spawn set. Workers are prompt blocks the orchestrator copies into a subagent, not shipped agent files. |
references/models.md |
The one model matrix for the whole bundle: the four capability classes (light, standard, standard-high, deep) and the recommended class per role, plus the escalation and instantiation rules. No model guidance lives anywhere else in hex. |
references/memory.md |
The .agents/memory/hex.md memory spec: the three sections and their per-section ownership, resolution order, a complete example file, plus the editing, destination-choice, and staleness rules. |
references/config.md |
The hex.md › Preferences config vocabulary — keys, defaults, merge rules. Conditional-load — read only when hex.md › Preferences contains a fenced yaml block. |
references/archive.md |
The spec fold-back mechanics — delta grammar, destination resolution, the safety envelope and its four commands, halt semantics, idempotence and the fold receipt, revert, and the plan archive. Sole definition site; hex-execute, hex-review, and protocol.md link here. Conditional-load — read only when the plan under review carries a ## Spec Deltas block. |
references/finalize.md |
The remote-rights boundary — the act set and its branch scoping, the consent model, the literal force-push form, the backup-ref armed/inert lifecycle, remote verification and its ceilings, re-entry, the degrade ladder, the trust classes, the pre-flight halt texts, and the placeholder-substitution rule. Sole definition site; every bundle-wide remote-rights qualifier links here. Conditional-load — read only when finalizing a branch or resolving a remote-rights qualifier. |
references/resources.md |
The resource knob sheet — the job budget, gate-only tools, never-wait, worktree cleanup, and the per-ecosystem knob sheet. Sole definition site; hex never defines how to verify a project. Conditional-load — read only when a run will build or test. |
What ships with it
24 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/adversary.md 12 KB
- references/archive.md 27 KB
- references/checklist.md 7.8 KB
- references/config.md 36 KB
- references/decompose.md 5.9 KB
- references/finalize.md 45 KB
- references/loop.md 12 KB
- references/memory.md 20 KB
- references/models.md 2.5 KB
- references/protocol.md 31 KB
- references/resources.md 4.5 KB
- references/severity.md 2.2 KB
- references/verify.md 5.5 KB
- references/workers.md 7.4 KB
- references/workers/architect.md 1.6 KB
- references/workers/architecture-explorer.md 1.3 KB
- references/workers/builder.md 1.9 KB
- references/workers/doc-reviewer.md 1.3 KB
- references/workers/explorer.md 753 B
- references/workers/researcher.md 2.3 KB
- references/workers/reviewer.md 3.6 KB
- references/workers/simulator.md 3.1 KB
- references/workers/tester.md 1.9 KB
- references/worktree.md 12 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago Changed 96bc56515a0d
- 21d ago Changed da9b7ac56903
- 1mo ago First seen · 57 lines · 66 tokens per session scan A 7e58c38fcb08
hex-core is a skill published in the GitHub repository grimoire-rs/grimoire (14 stars, last pushed today), licensed Apache-2.0. It adds 66 tokens to every session and 1,382 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
vuln-scanner
Audit trending repos for real security vulnerabilities and disclose responsibly - scan and route findings (PVR / dependency PR), re-submit queued advisories, and send armed email disclosures.
fork-fleet
Fork divergence monitor - tracks where the fleet's active forks diverge in CODE (unique commits, new/modified skills) and CONFIG (enable/var/model/schedule vs upstream), gated on real change.
shiplog
Recap of everything shipped since the last run - cross-repo PRs, security fixes, star deltas, and X traction, synthesized into a digest article and a ready-to-post shiplog in your voice.
pack-submit
Package one of this agent's own skills as a standalone community pack and submit it to the aeon registry as a PR.
token-pick
One token recommendation and one prediction market pick - scored, quantified, with a skip branch when signals are weak.
autoresearch
Evolve a skill by generating variations, evaluating them, and updating the best version.