Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add HumanDealer/vibeproof --skill plangit clone --depth 1 https://github.com/HumanDealer/vibeproofWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/humandealer/vibeproof/plan)<a href="https://agentmods.dev/skills/humandealer/vibeproof/plan"><img src="https://agentmods.dev/badge/skills/humandealer/vibeproof/plan/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/humandealer/vibeproof/plan"><img src="https://agentmods.dev/badge/skills/humandealer/vibeproof/plan.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.00498 |
| Opus 5 | $0.00026 | $0.00249 |
| Sonnet 5 | $0.00010 | $0.00100 |
| Haiku 4.5 | $0.00005 | $0.00050 |
Grade A, and why
plan scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
plan — PRD → build plan
A senior engineer never codes from a PRD directly. They design first. You write
docs/PLAN.md so a non-coder can see what will happen and in what order,
and so the build survives a lost session.
Step 1 — Design before steps
Decide and write down, briefly:
- Stack — language/framework, and WHY (match what the future dev team expects)
- Data flow — what data moves where (one diagram or 3 bullets)
- The risky parts — auth, money, external APIs, data deletion. These get extra care.
Step 2 — Write docs/PLAN.md
# PLAN: <product>
## Architecture (1 paragraph + data flow)
<stack choice + why; data flow>
## Risk gates (require extra care / human confirm before doing)
- [ ] Touches auth / secrets
- [ ] Touches money flows
- [ ] Deletes or migrates data
- [ ] Calls external paid APIs
> If any box is checked, /spec's non-negotiables apply — confirm with the expert.
## Build steps (ordered, atomic — one logical change each)
- [ ] S1: <step> → test: <what proves it works>
- [ ] S2: ...
## Tests to write FIRST (the contract)
- [ ] T1: <behavior> — given X, expect Y
- [ ] T2: ...
## Definition of done
- [ ] All steps done, all tests green
- [ ] `vibeproof check` → READY
- [ ] PR opened, CI green (where wired)
Step 3 — Persist + hand off
Save to docs/PLAN.md (it survives compaction — conversation does not). Then:
"Next: /tdd writes the tests before the code." Track progress by checking
boxes as you go. Never skip ahead.
Rule: if a build step's description contains the word "and", it's probably two steps. Split it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 55 lines · 52 tokens per session scan A 955709b10d27
plan is a skill published in the GitHub repository HumanDealer/vibeproof (2 stars, last pushed 3mo ago), licensed MIT. It adds 52 tokens to every session and 498 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
planning-with-files
Persistent file-based planning for multi-step AI-agent work. Keeps taskplan.md, findings.md, and progress.md on disk; lifecycle hooks inject selected project planning context. Automatic recovery reads project planning files only. Explicit session-catchup.py --metadata reads same-project local agent session records and…
infrastructure-publishing
Skill for the publishing infrastructure module providing academic publishing workflows including BibTeX CLI citation generation, APA/MLA citation helper functions, DOI management, Zenodo publication, arXiv submission preparation, GitHub releases, PyPI and TestPyPI package distribution, static-site deployment to GitHub…
infrastructure-overview
Top-level skill for the research template infrastructure layer. Use in Cursor, Claude Code, or similar agents when editing or importing anything under infrastructure/, understanding the two-layer architecture, or wiring build/validation/rendering/publishing. Covers module discovery, import patterns, thin…
infrastructure-rules
Skill for the rules module — discovery, validation, scope, and private-sidecar symlink sync for the top-level rules/ directory (specifications include soft markdown guidelines and strong yaml/json formal constraints). Use when discovering rules (discoverrules), resolving a rule path (resolveruleroot), validating rule…
infrastructure-tools
Skill for the tools module — discovery, validation, scope, and private-sidecar symlink sync for the top-level tools/ directory (executable entry points such as scripts, skills, and agents stored as passive manifests with scripts/ directories). Use when discovering tools (discovertools), resolving a tool path…
template-academic-paper
Template-native manuscript planning, outline, drafting, revision, formatting, citation check, and AI-use disclosure routing. USE WHEN the user asks to write, outline, revise, format, or prepare a paper inside the Research Project Template.