Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ictechgy/context-guard --skill setupgit clone --depth 1 https://github.com/ictechgy/context-guardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ictechgy/context-guard/setup)<a href="https://agentmods.dev/skills/ictechgy/context-guard/setup"><img src="https://agentmods.dev/badge/skills/ictechgy/context-guard/setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ictechgy/context-guard/setup"><img src="https://agentmods.dev/badge/skills/ictechgy/context-guard/setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.00551 |
| Opus 5.5 | $0.00014 | $0.00220 |
| Sonnet 5.5 | $0.00007 | $0.00110 |
| Haiku 4.5 | $0.00003 | $0.00055 |
Grade B, and why
setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- Do not modify global `~/.claude/settings.json`. What it actually says
ContextGuard Setup
Goal: help the user configure this plugin without memorizing helper commands.
Default flow:
- Run a read-only health check and plan first:
context-guard-setup --verify
context-guard-setup --plan
- Explain the three profiles briefly (
--profile):minimal: deny bulky/sensitive reads + large Read guard only,recommended(default): adds the Bash trim/escrow + sanitizer hook and missing model/effort defaults (the statusline is deprecated and no longer part of this profile),max: adds the failed-attempt nudge for repeated Bash failures (off by default until false-positive data exists). Individual--no-*flags remove one item from a profile.
- If the user wants the recommended project-local setup, run:
context-guard-setup --yes
For the fullest set: context-guard-setup --profile max --yes.
- Treat the post-apply
context-guard-diet scansummary emitted by setup as the default remaining-gap check; runcontext-guard-diet scan .separately only when the user wants the full report. - For automation that must skip the post-apply scan summary, run
context-guard-setup --no-diet-scan --yes. - If they want extra token reduction beyond setup, prefer local artifact escrow, symbol reads, and semantic digests rather than external model offload.
- If a hook misfires, turn it off for this session instead of re-running setup:
context-guard-hooks off read|bash|nudge|all [--for 2h], thencontext-guard-hooks status/on.
Safety:
- Do not modify global
~/.claude/settings.json. - Prefer project-local
.claude/settings.json. context-guard-setup --verifyis a local read-only health check and never applies settings.- Setup's post-apply scan is local, read-only, and prints a summary only; it does not mutate settings.
- Setup should use packaged/check-out helper paths by default; only pass
--allow-path-helper-fallbackwhen the user explicitly trusts a PATH-installed ContextGuard helper set.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines 0c14e1faf3e3
- 1mo ago First seen · 44 lines · 35 tokens per session scan B deb6f90cf540
setup is a skill published in the GitHub repository ictechgy/context-guard (3 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 35 tokens to every session and 551 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
alive:system-cleanup
The world feels messy. Stale tasks, orphan folders, v2 remnants, unsaved sessions — entropy is accumulating and needs to be addressed before it compounds. Scans across all walnuts, then surfaces issues one at a time.
alive:world
The human doesn't know what to work on, or wants to see everything at once. They need the big picture — what's active, what's stale, what needs attention. Renders a live world view grouped by ALIVE domain, then routes to open, tidy, find, history, or map.
alive:bundle
Create, share, and graduate bundles — the unit of focused work within a walnut. Manages the full bundle lifecycle from creation through sharing to graduation.
alive:settings
The human wants to adjust how the system behaves — not what it contains, but how it feels. Voice, rhythm, preferences, walnut-level config, full permissions toggleable, named squirrel config, action logging toggle. The system adapting to them. Routes to preferences.yaml or walnut config.yaml depending on scope. For…
alive-cleanup
System maintenance -- stale tasks, orphan folders, unsaved sessions, world health check.
alive-daily
Morning operating system -- sync inputs, read everything, surface priorities, show the day.