wrench: Skill for Codex

.agents/skills/refresh-kb/SKILL.md

refresh-kb is a skill for Codex from hraness/wrench. It costs 66 tokens per session (1,396 once invoked), scanned A, a copy of refresh-kb, MIT.

A workflow for refreshing and checking a Markdown knowledge base, meaning a linked collection of notes and reference files.

In plain words
What is it for?
Use it after editing knowledge-base notes or structure, and when checking graph relationships, local files, or repository scopes.
Why use it?
It helps keep the catalog, links, metadata, attachments, and repository mappings accurate after changes.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: installed under .agents/ (shared by several agents); mentions AGENTS.md.

This is hraness/wrench's own configuration. It tells Codex how to work on wrench itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything wrench configures →

Reuse

Borrowing it

Nothing to install: this file belongs to hraness/wrench. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/hraness/wrench/main/.agents/skills/refresh-kb/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/hraness/wrench

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for refresh-kb

README.md
[![agentmods](https://agentmods.dev/badge/skills/hraness/wrench/refresh-kb/github.svg)](https://agentmods.dev/skills/hraness/wrench/refresh-kb)
Your own site
<a href="https://agentmods.dev/skills/hraness/wrench/refresh-kb"><img src="https://agentmods.dev/badge/skills/hraness/wrench/refresh-kb/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for refresh-kb

Your own site · 80×15
<a href="https://agentmods.dev/skills/hraness/wrench/refresh-kb"><img src="https://agentmods.dev/badge/skills/hraness/wrench/refresh-kb.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 66 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,396 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00066 $0.01396
Opus 5.5 $0.00026 $0.00558
Sonnet 5.5 $0.00013 $0.00279
Haiku 4.5 $0.00007 $0.00140

Measured 1mo ago against content hash 9227ba6e77f3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

refresh-kb scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to refresh-kb — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.agents/skills/refresh-kb/SKILL.md · 141 lines

How it starts

The opening of the file, as written. The whole thing — 141 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Refresh a knowledge base

Use a refresh-review-check loop. Keep authored prose under deliberate editorial control. A managed vault gives the marked catalog region to the tool; an authored vault leaves its complete front door untouched.

1. Locate the vault

  • Resolve <vault> to the directory containing its managed or authored index.md, then set the shell-local KB_ROOT to that path (KB_ROOT=kb from a typical repository root, or KB_ROOT=. from inside the vault).
  • When the change concerns scopes/ or an kb:context marker, resolve the repository root and set KB_REPO to that path (KB_REPO=. from the repository root).
  • Read the vault's applicable agent instructions and note conventions before editing.
  • Preserve note voice, frontmatter, filenames, and link intent unless a reported finding justifies a specific change.

2. Refresh derived state

When several agents are still editing a managed vault, do not refresh its shared catalog in each lane. Validate the lane's Markdown and graph facts with:

kb check --root "$KB_ROOT" --no-catalog

The integrating agent performs the managed refresh once after the lanes join. An authored vault declares kb_catalog: authored in index.md; its refresh has no catalog write and is safe from that shared generated-file hotspot.

Run:

kb refresh --root "$KB_ROOT"

In managed mode this command atomically updates only the marked catalog region in index.md. In authored mode it reports the index as authored and leaves the file unchanged. Use kb catalog --root "$KB_ROOT" for a disposable exhaustive inventory in either mode. Catalog links are navigation, so they do not count as contextual graph edges.

3. Review the advisories

Open every reported source line and the relevant target notes before deciding whether to edit.

  • Repair a broken wikilink only when its intended target is clear. Otherwise, report the uncertainty.
  • Repair a broken or ambiguous typed relationship only after confirming its exact canonical target and predicate from the source note.
  • Disambiguate a wikilink with a vault-root path only after confirming the author's intent.
  • Treat a contextual orphan as a prompt to inspect the note, not as a demand to add a link.
  • Treat an unlinked title or alias mention as a candidate, not proof that the sentence should link.
  • Add a contextual wikilink only when it improves the meaning or navigation of the sentence.
  • Repair a missing, escaping, ambiguous, case-mismatched, symlinked, or hard-linked local image, PDF, or tldraw target. External URLs remain outside this attachment gate.
  • When a repository-owned wrapper adds lifecycle findings, treat them as migration advisories: active plans should have descriptions and exact repository_scopes, in-progress plans should retain execution evidence, terminal plans should record a result and durable-memory disposition, and maintained notes should declare type: note or type: concept.
  • When a repository-owned scope audit reports an absent active or maintained scope, inspect it as possible stale routing. Future paths may intentionally be absent; terminal records may intentionally retain retired paths. The portable kb refresh and kb check commands do not impose this lifecycle policy by themselves.

Read the full file on GitHub · 141 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 141 lines · 66 tokens per session scan A 9227ba6e77f3

Subscribe to this mod's changes

refresh-kb is a skill published in the GitHub repository hraness/wrench (4 stars, last pushed 1mo ago), licensed MIT. It adds 66 tokens to every session and 1,396 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to refresh-kb, differing in 0 lines, and is treated as a copy.

Related

Other skills, from other repositories

query-kb

Load scoped repository context, then search and navigate a hraness/kb Markdown vault with hybrid text retrieval, exact metadata, bounded links and typed relationships, backlinks, whole-vault graph reports, and optional Git provenance. Use when an agent needs the applicable repository instructions, rationale, prior…

hraness/atet · 83 tokens

percolate-kb

Review a hraness/kb Markdown vault for recurring ideas and missing structural connections, then promote evidence-backed concepts and typed relationships with the KB CLI. Use after materially adding or revising notes, when organizing an accumulated vault, or when an agent needs to turn repeated tags and prose…

hraness/atet · 70 tokens

refresh-kb

Refresh and validate a hraness/kb Markdown knowledge graph after notes, concepts, typed relationships, attachments, repository scopes, or context mappings change. Use when an agent needs to maintain a managed or authored catalog, inspect graph and lifecycle findings, validate local artifacts and scope hubs, or…

hraness/atet · 66 tokens

durable-session-state

Persist plans, scope decisions, evidence, and reviewer/critic verdicts to durable files during long or multi-phase tasks so work survives context compaction, session resumes, and handoffs. Use for swarm-mode tasks, before context grows large, when recording approval gates, and when resuming after compaction or a…

ZaxbyHub/opencode-swarm · 70 tokens

gno

Search local documents, files, notes, and knowledge bases. Index directories, search with BM25/vector/hybrid, get AI answers with citations. Use when user wants to search files, find documents, query notes, look up information in local folders, index a directory, set up document search, build a knowledge base, needs…

gmickel/gno · 86 tokens

memorywhale

Query and write durable debugging memory recorded by MemoryWhale. Use when debugging a failure that may have happened before, when you need the exact error/flags/output from an earlier attempt, when the user asks "how did we fix this last time?", or once you've figured out why something failed / how a fix worked and…

wuisabel-gif/MemWhale · 79 tokens