Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add IsaiaScope/ai --skill iso-init-repogit clone --depth 1 https://github.com/IsaiaScope/aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/isaiascope/ai/iso-init-repo)<a href="https://agentmods.dev/skills/isaiascope/ai/iso-init-repo"><img src="https://agentmods.dev/badge/skills/isaiascope/ai/iso-init-repo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/isaiascope/ai/iso-init-repo"><img src="https://agentmods.dev/badge/skills/isaiascope/ai/iso-init-repo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.04152 |
| Opus 5 | $0.00028 | $0.02076 |
| Sonnet 5 | $0.00011 | $0.00830 |
| Haiku 4.5 | $0.00006 | $0.00415 |
Grade A, and why
iso-init-repo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 434 lines — stays where its author put it; the contents beside it link to each section on GitHub.
iso-init-repo
Set up GitHub repo governance. Run from inside the target repo.
All templates live in templates/ next to this file.
Pre-flight
Run these checks before any step.
git
command -v git &>/dev/null \
|| { echo "✗ git not found. Install Xcode CLI tools: xcode-select --install"; exit 1; }
gh (GitHub CLI)
if ! command -v gh &>/dev/null; then
echo "⚠ gh not found — installing..."
brew install gh
command -v gh &>/dev/null \
|| { echo "✗ gh install failed. Run manually: brew install gh"; exit 1; }
echo "✓ gh installed"
fi
gh authentication
Authentication is interactive — cannot be automated. If not authenticated, stop and run the login command manually.
if ! gh auth status &>/dev/null; then
echo "⚠ gh not authenticated."
echo " Run: gh auth login"
echo " Then re-run /iso-init-repo"
exit 1
fi
Remote detection
git remote get-url origin 2>/dev/null || echo "no remote"
All checks pass → proceed to Step 1.
Idempotency
Every step probes its own postcondition first and skips when already met. Re-running on a governed repo is safe and expected — it is the documented path after upgrading a plan, and the only way a repo set up by an older version of this skill gets repaired.
Report each skip out loud (⏭️ dev already default) rather than silently doing
nothing. A step that is quiet about skipping is indistinguishable from a step
that is broken.
Step 1 — GitHub repo
No remote → create
Ask user for repo name (default: current directory name) and visibility (private/public).
gh repo create <name> --private --source=. --remote=origin --push
Remote exists → verify
gh repo view --json nameWithOwner,visibility -q '"⏭️ repo exists: \(.nameWithOwner) (\(.visibility))"'
Confirm accessible, then continue.
Step 2 — Branch structure
Target: dev (default, daily work) ← test (staging) ← prod (release)
Record the branch the repository started on before anything moves — Step 2's second half needs it, and by then HEAD has moved:
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 434 lines · 57 tokens per session scan A 5a1919c41f24
iso-init-repo is a skill published in the GitHub repository IsaiaScope/ai (2 stars, last pushed 2d ago), licensed MIT. It adds 57 tokens to every session and 4,152 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
ac-commit-manager
Manage git commits for autonomous coding. Use when committing feature implementations, creating descriptive commits, managing git workflow, or handling version control.
agent-commit
Analyze changes and create a meaningful commit with agent authorship. Internal skill for evolveloop.
ac-checkpoint-manager
Manage checkpoints for rollback capability. Use when creating save points, rolling back changes, managing recovery points, or restoring previous states.
push-ci
Push to remote and monitor CI. Validates branch safety, executes git push WITH explicit user approval, then monitors CI run status via gh CLI. Use when: user says 'push', 'push and watch CI', 'ship it', 'push-ci'. Not for: committing (use /smart-commit), creating PRs (use /create-pr), merging (use /merge-prep).
devops-pipeline
Configure pre-commit hooks and lean GitHub Actions for shift-left quality assurance. Use when adding or auditing CI/CD to maximize local test coverage and minimize CI cost. Skip for Terraform/K8s, deployment pipelines, or non-GitHub CI providers.