Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add gtapps/claude-code-hermit --skill spawn-sessiongit clone --depth 1 https://github.com/gtapps/claude-code-hermitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gtapps/claude-code-hermit/spawn-session)<a href="https://agentmods.dev/skills/gtapps/claude-code-hermit/spawn-session"><img src="https://agentmods.dev/badge/skills/gtapps/claude-code-hermit/spawn-session/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gtapps/claude-code-hermit/spawn-session"><img src="https://agentmods.dev/badge/skills/gtapps/claude-code-hermit/spawn-session.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.01454 |
| Opus 5 | $0.00028 | $0.00727 |
| Sonnet 5 | $0.00011 | $0.00291 |
| Haiku 4.5 | $0.00006 | $0.00145 |
Grade A, and why
spawn-session scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spawn Session
Launch a background Claude Code session in its own git worktree, subscribe to
its idle notice, and relay the report through /claude-code-hermit:watch.
Usage
/claude-code-hermit:spawn-session <prompt-or-/skill> [--name <n>] [--model <m>] [--effort <e>]
From <abs>, the project root, that composes:
claude --bg --worktree <n> --name <n> [--permission-mode <p>] [--remote-control <n>] [--model <m>] [--effort <e>] '<prompt>'
--remote-control <n> is present when config.json's remote is true and
absent otherwise; --model and --effort only when the operator passed them.
Four limits sit on that command:
- The helper's worktree
.claude-code-hermit/is a projection (OPERATOR.md,config.json,compiled/only). Any file the helper must Read is passed as an absolute path in the prompt. - A worktree carries no
.claude/settings.local.json(it is gitignored, so nothing checks it out), so the helper inherits none of this hermit's permission rules.--permission-mode <p>fromconfig.json'spermission_modeis what keeps it in this session's permission class, which is also what lets its idle notice reach here rather than being held for an operator who is not watching.config.jsonaccepts one value the CLI has no choice for,default, so it andnulland an absent key all mean: leave the flag off entirely and let the helper take the box default.scripts/hermit-start.tsresolves the same value the same way; match it rather than inventing a second answer. Every other value passes through unchanged,bypassPermissionsincluded. - The prompt is one single-quoted argument. An apostrophe in it ends the quote,
so replace every
'with'\''before composing. Anything after the closing quote is a second command the operator never asked for. - The launch is not pre-approved, and what the operator sees depends on the
mode they run in. On
auto, the shipped default, the classifier decides and no prompt reaches them on any channel. OnacceptEditsormanualthe native approval is relayed to their DM and is allow-once, so every spawn asks again. OnbypassPermissionsthere is none. Say what is about to be spawned before running it either way: it is the only thing that makes the launch legible when an approval does arrive, and the only record when none does.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +9 lines d22c47ea3592
- 2d ago First seen · 90 lines · 57 tokens per session scan A e124dd5f9d72
spawn-session is a skill published in the GitHub repository gtapps/claude-code-hermit (74 stars, last pushed today), licensed MIT. It adds 57 tokens to every session and 1,454 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other skills, from other repositories
github-pr-creation
Creates GitHub Pull Requests with automated validation and task tracking. Use when user wants to create PR, open pull request, submit for review, or check if ready for PR. Analyzes commits, validates task completion, generates Conventional Commits title and description, suggests labels. NOTE - for merging existing…
github-pr-merge
Merges GitHub Pull Requests after validating pre-merge checklist. Use when user wants to merge PR, close PR, finalize PR, complete merge, approve and merge, or execute merge. Runs pre-merge validation (tests, lint, CI, comments), confirms with user, merges with proper format, handles post-merge cleanup.
git-commit
Creates git commits following Conventional Commits format with type/scope/subject. Use when user wants to commit changes, create commit, save work, or stage and commit. Enforces project-specific conventions from CLAUDE.md.
update-architecture-atlas
Create or refresh a versioned Curie architecture-atlas JSON snapshot from a git diff, including current and vision flows, maturity-rated seams, ADRs, and documentation drift. Use when asked to update, regenerate, compare, or add a version to the interactive architecture atlas.
ccc-upgrade
Audit and update vendor submodules. Lists every submodule under vendor/, fetches latest, reports per-submodule current/latest commits and changed file counts, prompts…
ccc-rollback
CC Commander rollback workflow. Selects a rollback target, creates atomic git revert commits, pushes the revert, redeploys through ccc-deploy, verifies health, and…