Borrowing it
Nothing to install: this file belongs to jeeftor/audiobook-organizer. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/jeeftor/audiobook-organizer/master/.agents/skills/abo-audit/SKILL.mdgit clone --depth 1 https://github.com/jeeftor/audiobook-organizerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jeeftor/audiobook-organizer/abo-audit)<a href="https://agentmods.dev/skills/jeeftor/audiobook-organizer/abo-audit"><img src="https://agentmods.dev/badge/skills/jeeftor/audiobook-organizer/abo-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jeeftor/audiobook-organizer/abo-audit"><img src="https://agentmods.dev/badge/skills/jeeftor/audiobook-organizer/abo-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.00250 |
| Opus 5.5 | $0.00012 | $0.00100 |
| Sonnet 5.5 | $0.00006 | $0.00050 |
| Haiku 4.5 | $0.00003 | $0.00025 |
Grade A, and why
abo-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ABO Audit
You are the Audiobook Organizer dependency and vulnerability auditor.
Read AGENTS.md, references/abo-assistant/common.md, references/abo-assistant/testing.md, and references/abo-assistant/dependencies.md.
Workflow
- Inspect which dependency surfaces exist on the current branch.
- Run read-only audit commands first: Go module listing, Go update listing, vulnerability scan when available, npm audit/outdated for
web/when present. - Do not modify
go.mod,go.sum, package manifests, lockfiles, or generated assets unless the user explicitly asks for fixes. - Separate confirmed vulnerabilities from merely outdated packages.
- Call out whether GitHub Dependabot or GitHub security alerts may already cover the finding, but do not rely on GitHub alone when local commands are available.
- Recommend the smallest update path for each actionable vulnerability.
If the audit discovers vulnerabilities, prompt the user before applying updates unless they already asked for remediation.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 24 lines · 30 tokens per session scan A 762510634d6e
abo-audit is a skill published in the GitHub repository jeeftor/audiobook-organizer (196 stars, last pushed 1mo ago), licensed MIT. It adds 30 tokens to every session and 250 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ebook-publishing
The complete ebook and audiobook self-publishing skill — write, format, convert, and publish across all major platforms. Use this skill whenever the user asks about Amazon KDP, Apple Books, Gumroad, Payhip, Kobo, Draft2Digital, IngramSpark, Barnes & Noble Press, Google Play Books, PublishDrive, StreetLib, ACX…
pinchtab-mcp
Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.
pinchtab-stealth-score
Run the PinchTab stealth-score sweep against 15 bot-detection / fingerprint sites (sannysoft, rebrowser, deviceandbrowserinfo, iphey, whoer, browserscan, pixelscan, fingerprint-scan, incolumitas, fvision, amiunique, browserleaks, creepjs, coveryourtracks, fingerprint-demo). Starts a Docker PinchTab container per…
gmeasure
Benchmark and measure Go code with gmeasure — an Experiment groups named Measurements, recorded via RecordValue/RecordDuration/MeasureDuration or repeated Sample/SampleValue/SampleDuration with SamplingConfig, timed inline with a Stopwatch, summarized through GetStats/Stats (StatMin/Max/Mean/Median/StdDev…
octo-mail
OCTO Agent Mail operations for reading, searching, policy-aware sending, preparing drafts, and checking delivery status exclusively through octo-cli.
bex-background-workers
Sets up and configures background workers on bex for queue-based job processing. Use when the user needs to process async jobs, consume from a queue, run Celery/Sidekiq/BullMQ/Asynq/Oban workers, handle graceful shutdown with SIGTERM, wire a worker to Key Value, or choose between workers and cron jobs for background…