Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add gug007/lpm --skill lpm-cligit clone --depth 1 https://github.com/gug007/lpmWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gug007/lpm/lpm-cli)<a href="https://agentmods.dev/skills/gug007/lpm/lpm-cli"><img src="https://agentmods.dev/badge/skills/gug007/lpm/lpm-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gug007/lpm/lpm-cli"><img src="https://agentmods.dev/badge/skills/gug007/lpm/lpm-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00118 | $0.02570 |
| Opus 5.5 | $0.00047 | $0.01028 |
| Sonnet 5.5 | $0.00024 | $0.00514 |
| Haiku 4.5 | $0.00012 | $0.00257 |
Grade A, and why
lpm-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
lpm is a command-line companion to the lpm desktop app. Verify it is available with lpm --version; if it is missing, install it from the lpm app's Settings.
Key facts
- The project name is inferred from
LPM_PROJECT_NAMEor the current directory — omit it inside lpm terminals. - Default output is compact text (cheapest); add
--jsononly when you need to parse the result. - Exit codes:
0ok,2usage / not found / app not running,1failure / timeout. config get,config apply, and control commands need the lpm app running; other inspection commands do not.
Commands
lpm list— all projects, running state, agent counts.lpm project [name] [--full]— one project in full (--fulladds env maps, action details, terminal history). A started service whose command ended (crashed or exited) shows asexitedwith its code (runningSource: "exited",exitCodein--json); its pane stays until it is restarted or stopped.- In
lpm list --jsonandlpm project --json, whenisRemoteistrue,rootis the project'sssh.dir: a path on the SSH host, not on this machine. Don'tcdinto it or read files there locally. lpm config resolve [--cwd PATH] [--json]— match a directory to its deepest project root without usingLPM_PROJECT_NAME. An SSH project matches only from its local sync mirror~/.lpm/sync/<project-file-name>, never byrootorssh.dir.lpm config validate <file> [--json]— validate syntax, fields, layer rules, and effective merged configuration.lpm config get --layer project|repo|global|template [--project NAME | --template NAME] [--create] [--json]— read a config layer with the revision required for a safe write.lpm config apply --layer project|repo|global|template [--project NAME | --template NAME] [--create] --if-revision HASH (--stdin | --file PATH) [--json]— validate a candidate and atomically apply it through the running app. Never edit a live config file directly.lpm logs [service] [-n 30] [-p proj]— service scrollback, exactly N lines.lpm status [project]— live agent statuses (Running/Waiting/Done/Error).lpm start [project] [--profile X]/lpm stop [project]— start / stop a project's services.lpm service <name> start|stop|restart [-p proj]— one service.restartstops the run still going first, then runs the command again in the same pane.lpm wait [project | -p proj] [--service X | --port N | --agent] [--timeout 60]— block until ready;--agentwaits until an agent reports after the wait starts and none is still working (your own tab is ignored).lpm duplicate [project] [-n N] [--label TEXT]... [--group X] [--run ACTION | --command CMD] [--prompt TEXT] [--include-uncommitted | --exclude-uncommitted]— create parallel working directories. Always pass a--labeldescribing the copy's purpose so it's identifiable in the app — one repeated--labelper copy in creation order,<project-name>-<short-description>style such aslpm-fix-auth. Only omit it when you genuinely can't infer a purpose. Output lists each copy's path.lpm worktree [project] [-n N] [--label TEXT]... [--group X] [--run ACTION | --command CMD] [--prompt TEXT] [--reinstall-deps]— create linked Git worktrees instead of standalone copies. The same labeling guidance applies. Output lists each worktree's path.lpm remove <copy-name>— remove a duplicate. For a linked worktree, this also removes its Git worktree registration and lpm-created branch. Originals and SSH projects (SSH duplicates too) need--force, and their folder is kept; don't use--forceunless the user explicitly asks.lpm run [action | --command CMD] [--prompt TEXT] [-p proj]— queue in a new app terminal, fire-and-forget.lpm set-status <key> <value>/lpm clear-status <key>— report status to the app UI.lpm refresh-label [action] [-p proj]— rerun the$(…)commands in an action's labels and emoji (with its menu items' and options') now and redraw labels built from git; no action refreshes every label in the project. Use it after changing what a dynamic label shows, such as at the end of a release script.lpm auto-pull [project] [--set on|off|default]/lpm auto-pull --all— whether the app fast-forwards a project from origin by itself, and why.--setchanges the project's ownautoPullkey through the running app, likestart/stop;defaultremoves it, so a duplicate or worktree follows its parent, else the Settings mode (Off / Chosen / All, changed only in the app). Change it only when the user asks.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed e4aa67d6adf5
- 4d ago Changed 2c469cbfc9d3
- 7d ago Changed · +1 lines 63e384d8ba52
- 8d ago Changed · +2 lines 4327228d3c36
- 9d ago Changed · +19 lines · +20 tokens per session c3d8a93461df
- 10d ago Changed 74e72cc0a14c
- 16d ago Changed · +1 lines ed689aaaee7c
- 1mo ago First seen · 57 lines · 98 tokens per session scan A 299b559cbc8e
lpm-cli is a skill published in the GitHub repository gug007/lpm (154 stars, last pushed today), licensed MIT. It adds 118 tokens to every session and 2,570 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
orca-emulator-android
Android device and emulator control from inside Orca over adb, with the live device view in Orca's emulator pane. Use when driving an adb-connected emulator or phone on Windows, Linux, or macOS: booting AVDs, taps, swipes, typing, hardware buttons, rotation, app install and launch, runtime permissions, the…
ralplan
Consensus planning entrypoint that auto-gates vague ralph/autopilot/team requests before execution.
remember
Review reusable project knowledge and decide what belongs in project memory, notepad, or durable docs.
test-warp-ui
Guides testing Warp UI features and changes using the computer use tool. Use this skill only when computer-use testing was requested (explicit request or accepted offer) and the computeruse tool is available to the agent. Covers launching Warp and verifying UI behavior.
tui-migrate-setup
Migrates the supported subset of an existing Warp GUI setup into Warp Agent CLI without exposing credentials or application state. Use in Warp Agent CLI when a user wants to copy or move compatible settings or global file-based MCP servers from the desktop app, set up Warp Agent CLI from an existing GUI installation…
blueprint-cloudflare-scaffold
Lay out a Worker with D1 and static Vue assets, with tests that run inside the Workers runtime.