Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/jazzyalex/agent-sessionsnpx agentmods add skills/jazzyalex/agent-sessions/agent-session-format-checkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jazzyalex/agent-sessions/agent-session-format-check)<a href="https://agentmods.dev/skills/jazzyalex/agent-sessions/agent-session-format-check"><img src="https://agentmods.dev/badge/skills/jazzyalex/agent-sessions/agent-session-format-check.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00062 | $0.12220 |
| Opus 5 | $0.00031 | $0.06110 |
| Sonnet 5 | $0.00012 | $0.02444 |
| Haiku 4.5 | $0.00006 | $0.01222 |
Grade B, and why
agent-session-format-check scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
grep -ho '"model":"[^"]*"' ~/.codex/sessions/$(date +%Y/%m)/*/*.jsonl | sort -u How it starts
The opening of the file, as written. The whole thing — 860 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Session Format Check
Answer one precise question for every supported agent:
Can current Agent Sessions code support the latest available session/storage/usage format from the latest available agent build?
The answer must be layered. Do not collapse version checks, stale samples, schema fingerprints, discovery contracts, and usage probes into a vague severity label.
Evidence-first:
- Gather a report + sample paths first.
- Do not change parsers/fixtures/docs without explicit user approval.
Related skill: agent-support-matrix — maintains the matrix YAML, ledger, and
update-checklist workflow. This skill focuses on detection and evidence collection;
agent-support-matrix focuses on recording and gating version bumps.
Process doc: docs/agent-support/monitoring.md — defines the compatibility verdicts,
legacy severity model, cadence, and escalation workflow that feed into this skill.
1 Quick Start (all agents)
-
Run weekly monitoring:
./scripts/agent_watch.py --mode weeklyReport path prints to stdout and is written under
scripts/probe_scan_output/agent_watch/*/report.json. -
In
report.json, check each agent underresults.<agent>:compatibility.verdict,compatibility.scope,compatibility.blockers, andcompatibility.next_actionverified_version,installed.parsed_version,upstream.parsed_versioncompatibility.latest_statusto distinguishcurrent_fetch_known,cached_latest, and unknown latest-source statesweekly.local_schema(newest local session used for fingerprinting)weekly.schema_diffandevidence.schema_matches_baselineevidence.sample_freshnessandevidence.fresh_evidence_sourcecompatibility.latest_real_session_failurewhen a prebump attempt failedseverityandrecommendationonly as legacy escalation fields
-
Usage / limits reading (Codex + Claude) — always verify every weekly run. These drift independently of session schema (see §2), so a clean schema does not imply healthy usage reading. Each agent's
results.<agent>.weekly.probesis a list; for every relevant entry confirmok == trueandexit_code == 0:- Codex —
label == "codex_status_probe"(parsecodex_status_json): the active CLI status channel (five_hour,weeklypercent-left). The passive channel is the session JSONLtoken_count/rate_limitsevents, covered by the schema fingerprint above. - Claude —
label == "claude_usage_probe"(parseclaude_usage_json): the authenticated/usagereading (session_5h,week_all_models,week_opus). Alsolabel == "claude_status"(parseclaude_status_json): status.claude.com indicator/incidents. A failed or unparsed usage probe is a usage-format or auth regression even when versions match and the session schema is clean — never skip it, and report each probe'sokexplicitly rather than collapsing it into the compatibility verdict.
- Codex —
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +65 lines 5e0db1dd7023
- 7d ago First seen · 795 lines · 62 tokens per session scan B ec6fb17eb515
agent-session-format-check is a skill published in the GitHub repository jazzyalex/agent-sessions (845 stars, last pushed 2d ago), licensed MIT. It adds 62 tokens to every session and 12,220 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
do-it-verify
Use when selecting evidence for a delivery claim, regression fix, installation, or branch closeout.
vision-verifier
Use when verifying Computer Vision imports, fixtures, models, schemas, cameras, artifacts, cleanup, latency, and stated limitations with reproducible evidence.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
verification-loop
This skill should be used when the user asks to "verify code", "run verification", "check quality", "validate changes", or before creating a PR. Provides comprehensive verification including build, type check, lint, tests, security scan, and diff review.
intuitive-tests
Use this skill whenever the user asks about unit test best practices, test organization, flat test suites, redundant tests, test refactors, pytest/JUnit/Jest/xUnit layout, test taxonomy, flaky tests, coverage quality, fixtures, mocks, parametrization, pruning existing UTs, or "which tests are worth keeping." It…
run-preflight
A release pre-check workflow that builds the mini-app, runs automated checks, explains errors, and lists review items that require a person to test the app on a real device. A preflight check is a final inspection before submission.