Borrowing it
Nothing to install: this file belongs to HomenShum/NodeBenchAI. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/HomenShum/NodeBenchAI/main/.claude/skills/pipeline-operational-loop/SKILL.mdgit clone --depth 1 https://github.com/HomenShum/NodeBenchAIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/homenshum/nodebenchai/pipeline-operational-loop)<a href="https://agentmods.dev/skills/homenshum/nodebenchai/pipeline-operational-loop"><img src="https://agentmods.dev/badge/skills/homenshum/nodebenchai/pipeline-operational-loop/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/homenshum/nodebenchai/pipeline-operational-loop"><img src="https://agentmods.dev/badge/skills/homenshum/nodebenchai/pipeline-operational-loop.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 77 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 78 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 79 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.01035 |
| Opus 5.5 | $0.00040 | $0.00414 |
| Sonnet 5.5 | $0.00020 | $0.00207 |
| Haiku 4.5 | $0.00010 | $0.00103 |
Grade A, and why
pipeline-operational-loop scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Pipeline Operational Loop
Standard template for evaluating any change to the real-time chat pipeline or the report generator pipeline.
Canonical spec: docs/architecture/PIPELINE_OPERATIONAL_STANDARD.md
Rule mirror: .claude/rules/pipeline_operational_standard.md
Step 0 — Diagnose first (analyst mindset)
Before writing code, answer:
- Which pipeline layer changed? (args, emit, judge, persistence, UI, dashboard)
- Does it change the contract (EmitProjectionArgs or RunTelemetry)?
- Does it change a judge gate? (if yes → dashboards depend on
GATE_ORDER) - What's the failure mode this change prevents or creates?
Step 1 — Contract
- Update
EmitProjectionArgs(server/pipeline/diligenceProjectionWriter.ts) if needed. - Mirror the shape in
convex/schema.ts→diligenceProjections/diligenceRunTelemetry. - Mirror in Convex args validators (
recordTelemetry,recordVerdict).
Step 2 — Instrument
Every emit goes through emitDiligenceProjectionInstrumented(...):
await emitDiligenceProjectionInstrumented(mutationCaller, args, {
seedTelemetry: { toolCalls, tokensIn, tokensOut, sourceCount },
onTelemetry: async (t, a) => {
const { id } = await convex.mutation(api.domains.product.diligenceRunTelemetry.recordTelemetry, { ...mapTelemetry(a, t) });
const verdict = judgeDiligenceRun({ args: a, telemetry: t });
await convex.mutation(api.domains.product.diligenceJudge.recordVerdict, {
telemetryId: id,
...verdict,
gatesJson: JSON.stringify(verdict.gates),
});
},
});
Step 3 — Judge
judgeDiligenceRun is a pure deterministic function. Don't call LLMs here.
Don't read wall-clock. Don't randomize.
Add a new gate only by:
- Extending the
GateNameunion inserver/pipeline/diligenceJudge.ts. - Appending to
GATE_ORDER(never reshuffle — dashboards depend on it). - Adding the evaluator fn.
- Adding a row to §3 of
PIPELINE_OPERATIONAL_STANDARD.md. - Adding scenario tests in
diligenceJudge.test.tscovering pass, fail, and skip.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 107 lines · 99 tokens per session scan A 637e28d6343a
pipeline-operational-loop is a skill published in the GitHub repository HomenShum/NodeBenchAI (15 stars, last pushed 3d ago), licensed MIT. It adds 99 tokens to every session and 1,035 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
convex-agents
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration.
convex-agents
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration.
foundry-config-setup
Resolve missing setup caused by a hardcoded Foundry project endpoint or model in a sample. Use when a sample fails because it uses a placeholder/hardcoded projectendpoint (for example "https://your-project.services.ai.azure.com") or a hardcoded model instead of reading them from the environment.
rowboat-spaces
How to work as a member of Rowboat Spaces, the team chat where people and agents work together. Load it once per session, before acting on any request that reaches you from Rowboat; it covers your setup, mentions and hand-offs, the tools, and files.
create-tech-design
Only use when the user explicitly invokes this skill by name.
deploy-docker-compose
Run the Omnigent server as a Docker compose stack (server + Postgres) on any Docker host — your laptop, a VPS, EC2 by hand, or as the base layer of any container-platform deploy. Invoke when the user wants to build the image, bring up the compose stack, debug the stack on a host they already have, or extend the stack…