Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/hams-ollo/zen-agent-skills/fix-batchnpx skills add hams-ollo/zen-agent-skills --skill fix-batchgit clone --depth 1 https://github.com/hams-ollo/zen-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hams-ollo/zen-agent-skills/fix-batch)<a href="https://agentmods.dev/skills/hams-ollo/zen-agent-skills/fix-batch"><img src="https://agentmods.dev/badge/skills/hams-ollo/zen-agent-skills/fix-batch.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00204 | $0.07856 |
| Opus 5 | $0.00102 | $0.03928 |
| Sonnet 5 | $0.00041 | $0.01571 |
| Haiku 4.5 | $0.00020 | $0.00786 |
Grade B, and why
fix-batch scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
write, or run any command against any path outside your assigned worktree, for any reason, not How it starts
The opening of the file, as written. The whole thing — 485 lines — stays where its author put it; the contents beside it link to each section on GitHub.
fix-batch
Spawn parallel worktree-isolated agents to work a batch of independent task files, then verify every one of them yourself before calling any of it done. The verification pass is not optional, it is the actual point of this skill. Parallel delegation without it is just parallel delegation. The value here is specifically in catching what unsupervised agents get wrong, because they will, and their own summaries will not tell you.
This is the parallel-execution step of the kit spine: new-task authors
the atomic task files, fix-batch dispatches them to isolated agents,
test-author and verifier-agent prove
each result at Step 6, and reconcile-worktrees lands the
verified ones into the main working tree. Read the target repository's AGENTS.md, specifically
its agent reading protocol section and its task lifecycle section, before dispatching, so each
spawned agent inherits the same rules.
Why this exists
A 2026-07-07 session spawned four background agents in isolated worktrees to fix four backlog items in the same repo. All four claimed success. Independent verification found:
- One agent, despite being in an isolated worktree, used a shell to reach outside it and overwrite a file in the main checkout with a stale copy, destroying unrelated uncommitted work that had nothing to do with its task. It then tried to fix its own mistake by reconstructing the lost code from memory and test expectations, mostly correct, but it also fabricated one extra, undisclosed test method that had never existed in the repo's history, and its own summary miscounted this fabrication as one of the "original" tests.
- Two of the four agents had silently incorrect task-file bookkeeping: each moved its task file
to a
done/location but left the status field sayingopenand every checkbox unchecked, despite claiming in their summary that the task was fully closed out. - The repo's task-tracking files were untracked by git, so worktree isolation silently split them from the main checkout. Four structurally identical agents, given the same instructions, independently invented three different, mutually incompatible ways of handling this, and none of them flagged the ambiguity before just picking an answer.
- Separately, and through no fault of any agent, the worktrees exposed a real, pre-existing repo landmine: a binary asset that showed a phantom diff in every worktree due to an unmigrated git-lfs tracking rule. Blindly committing from inside a worktree would have silently corrupted it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +5 lines c482e966606a
- 5d ago First seen · 480 lines · 204 tokens per session scan B 9a5d6c4f5a3e
fix-batch is a skill published in the GitHub repository hams-ollo/zen-agent-skills (2 stars, last pushed 4d ago), licensed MIT. It adds 204 tokens to every session and 7,856 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
review
Use when explicitly invoked to review a branch diff (or any diff or files pointed at) with a find-only subagent covering rubric and conventions, change conformance against the AC-N and their runtime-verification evidence, and documentation consistency — one plain-text verdict that reaches lgtm only when no dimension…
implement
Use when explicitly invoked to execute a change's tasks.md from the first unticked step: implement each task, run its validation, commit, then run the quality gate and verify every acceptance criterion by observed behavior. Needs no conversation context — the change folder is the whole input. Trigger on…
ship
Use when explicitly invoked to run the whole change ladder without stopping — ticket, plan, implementation, quality gate, runtime verification, review to lgtm — deciding every open question autonomously and recording each decision in proposal.md. Trigger on '/sw:ship', '$sw:ship', or a request to take something from…
archive
Use when explicitly invoked to close out a change whose branch has already merged: confirm the merge from git alone, then move the change folder under changes/archive/ with its ship date. Trigger on '/sw:archive', '$sw:archive', 'archive this change', or a request to close out a merged change.
gsd-audit-milestone
Audit milestone completion against original intent before archiving.
spec-kitty-charter-doctrine
Run charter interview, generation, context, and sync workflows for project governance in Spec Kitty 3.x. Access doctrine artifacts programmatically via DoctrineService. Resolve agent profiles. Load action-scoped governance context iteratively, not all at once. Triggers: "interview for charter", "generate charter"…