Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hariharapanigrahy/layerkit --skill layerkit-source-edit-clientgit clone --depth 1 https://github.com/hariharapanigrahy/layerkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hariharapanigrahy/layerkit/layerkit-source-edit-client)<a href="https://agentmods.dev/skills/hariharapanigrahy/layerkit/layerkit-source-edit-client"><img src="https://agentmods.dev/badge/skills/hariharapanigrahy/layerkit/layerkit-source-edit-client/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hariharapanigrahy/layerkit/layerkit-source-edit-client"><img src="https://agentmods.dev/badge/skills/hariharapanigrahy/layerkit/layerkit-source-edit-client.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01195 |
| Opus 5.5 | $0.00011 | $0.00478 |
| Sonnet 5.5 | $0.00006 | $0.00239 |
| Haiku 4.5 | $0.00003 | $0.00120 |
Grade A, and why
layerkit-source-edit-client scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
layerkit-source-edit-client
Modify the existing production datalayer and production source files (adapters, registry, router, tests) directly from evidence. Do not ask the CLI for plan files or source patches.
Optional project.json source-edit hints:
{
"sourceEdit": {
"moduleRoot": "apps/platform/integrations",
"denyEdit": ["**/legacy/**"]
}
}
Protocol
- Read
memory/runbooks/surface-inventory.json(from surfaces step). Every language must end asupdated(with paths) orresidual(with reason) before mark-done — Layerkit enforces this. - Read existing production integration code, interfaces, mappers, tests, and package style.
- Run
layerkit-deletion-first: remove/update stale code/docs/tests before adding files. - Inspect the existing interface/datalayer and implement in production paths for each inventory language (or mark residual).
- For every new file/function/export, list what it replaces; if it replaces nothing, justify why it must exist.
- Update
surface-inventory.jsonstatuses after each language is done; re-run source-edit iteration until no language ispending. - Run the client package verification command, such as the package's build/test/coverage CI target; then:
layerkit doctor - For any strategic redirect or broad rewrite, define what must pass, the proof artifact, and the fallback before edits start; run a small proof step first: an eval, end-to-end QA check, contract-heal case, release checklist item, package-level fixture, or before/after acceptance test.
- Strengthen executable tests relative to implementation size. Source-edit work that changes behavior must cover the client-package edit path, mapping semantics, deletion-first behavior, and the relevant CI/eval gate.
Mapping Rules
- Generic rename pattern (email is only an example): if the vendor renames any field (e.g.
email→email_id) and the client still exposes the same domain value (getEmail()), update the existing vendor setter from the existing client getter:payload.setEmailId(event.getEmail()). Same rule for any evidence-backed rename. Do not guess renames from names alone — require docs/OpenAPI/changelog evidence. - If the vendor removes a field, remove the stale mapping and update tests. Do not keep a wrapper for removed vendor behavior.
- If the vendor adds a field and the client interface/datalayer already has equivalent data, map the existing client field into the new vendor shape.
- If no client source represents the required data, treat it as an unsupported datalayer gap: leave a localized TODO and handoff note with the missing interface/datalayer gap.
- If research proved zero production field drift, do not invent edits: attest
residual-no-field-editwith residual justification. Do not bump apiVersion or SDK alone as a substitute for real source work.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 79 lines · 28 tokens per session scan A c12d0c56c49b
layerkit-source-edit-client is a skill published in the GitHub repository hariharapanigrahy/layerkit (8 stars, last pushed 2mo ago), licensed MIT. It adds 28 tokens to every session and 1,195 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cto-advisor
Technical leadership guidance for engineering teams, architecture decisions, and technology strategy. Use when assessing technical debt, scaling engineering teams, evaluating technologies, or making architecture decisions.
mcp-server-builder
Build MCP (Model Context Protocol) servers with tool definitions, resource providers, prompt templates, and transports. Use when exposing APIs to AI agents, building tool servers, converting OpenAPI to MCP, or creating MCP integrations.
agent-protocol
Design AI agent communication protocols: MCP tool schemas, A2A, function calling, and inter- agent messaging. Use when building multi-agent systems, defining tool interfaces, or implementing agent-to-agent communication.
api-design-reviewer
Review REST API designs for quality, consistency, and breaking changes. Lints OpenAPI specs, generates scorecards, and detects breaking changes between versions. Use when designing APIs, reviewing contracts, or managing API versioning.
api-test-suite-builder
Generate API test suites from route definitions across frameworks: auth, input validation, contract, k6 load testing, mocking, and OpenAPI-driven generation. Use when adding new APIs, auditing test coverage, or building regression suites.
aws-solution-architect
Design AWS serverless architectures for startups with IaC. Use when designing serverless architecture, writing CloudFormation, optimizing AWS costs, setting up CI/CD, or migrating to AWS across Lambda, API Gateway, and DynamoDB.