vault-gardener

vault-gardener is a skill for Claude Code from josherau/claude-operating-core. It costs 120 tokens per session (2,133 once invoked), scanned A, original, MIT.

A recurring maintenance tool for a second-brain vault: a folder of notes that stores knowledge between coding-agent sessions. It checks both note quality and whether the stored information can still be found efficiently.

In plain words
What is it for?
Use it to tidy notes, standardize names and tags, file Inbox items, update learning indexes, monitor retrieval health, enforce context-size budgets, and run a daily recall check.
Why use it?
It removes broken links, duplicates, misplaced notes, stale indexes, and other buildup that makes a growing knowledge base harder to search and use.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions CLAUDE.md; mentions Claude Code.

Part of the operating-core plugin — 7 skills, 1 agent shipped together

Good fit Use it to tidy notes, standardize names and tags, file Inbox items, update learning indexes, monitor retrieval health, enforce context-size budgets, and run a daily recall check.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/josherau/claude-operating-core/vault-gardener
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add josherau/claude-operating-core --skill vault-gardener
Clone the repo
git clone --depth 1 https://github.com/josherau/claude-operating-core

Made for: Claude Code.

Or install operating-core, the plugin that ships this one along with the rest of its 7 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for vault-gardener

README.md
[![agentmods](https://agentmods.dev/badge/skills/josherau/claude-operating-core/vault-gardener/github.svg)](https://agentmods.dev/skills/josherau/claude-operating-core/vault-gardener)
Your own site
<a href="https://agentmods.dev/skills/josherau/claude-operating-core/vault-gardener"><img src="https://agentmods.dev/badge/skills/josherau/claude-operating-core/vault-gardener/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for vault-gardener

Your own site · 80×15
<a href="https://agentmods.dev/skills/josherau/claude-operating-core/vault-gardener"><img src="https://agentmods.dev/badge/skills/josherau/claude-operating-core/vault-gardener.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 120 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,133 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00120 $0.02133
Opus 5 $0.00060 $0.01066
Sonnet 5 $0.00024 $0.00427
Haiku 4.5 $0.00012 $0.00213

Measured 10d ago against content hash 210da0462ddc, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

vault-gardener scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/vault-gardener/SKILL.md · 56 lines

How it starts

The opening of the file, as written. The whole thing — 56 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Vault Gardener

You are the gardener for the user's second-brain vault at {VAULT} (resolve the real path from the "Second brain" section of the user's global CLAUDE.md, written by second-brain setup; if it isn't there, ask once and suggest adding it). A vault gets smarter only if entropy is removed as fast as knowledge is added — broken links, misfiled captures, duplicate notes, and stale indexes silently degrade every future session's recall. This pass removes the day's entropy.

A hard-won caveat shapes this skill: a gardener that only audits content well-formedness will keep a vault looking healthy while its retrieval rots. Ours ran daily for months while the search index filled with tooling files, embeddings went stale, and the boot file bloated to 80KB — because every check audited notes and none audited whether the brain could find anything. Checks 8–10 exist so that failure mode has an alarm.

FIRST: read the vault's CLAUDE.md. It is the authoritative source for the registry, context-isolation rules, note-type standard, tag taxonomy, naming conventions, and learnings rules. Everything below is enforced AGAINST what CLAUDE.md says; if they conflict, CLAUDE.md wins.

Scope: knowledge notes only for EDITS. ALWAYS exclude dot-folders (.obsidian, .trash, and any tool config dirs) from content audits, and never rename files whose names are a contract some skill or tool depends on — the vault's CLAUDE.md should list these protected filenames; if it doesn't, treat generically-named files inside skill/tool folders as protected. Exception for checks 8–9 only: you may READ files outside the vault (the search indexer's config, its refresh job's logs, hook registrations) to verify retrieval health — never edit them; escalate problems in the gardening log instead.

Run these checks, fixing what you find. Keep total changes modest — this is incremental gardening, not a rebuild. A daily pass that changes five files beats a monthly pass that changes a hundred.

  1. UNRESOLVED WIKILINKS: Scan notes for [[links]] whose target does not exist (match by basename, case-insensitive; ignore links inside backtick code spans and external markdown links). Point at the correct existing note; if the target is genuinely gone, de-link to plain text. Never create stub notes just to satisfy a link — ghost nodes clutter the graph, but stubs clutter the vault.

  2. NAMING: New notes named index.md, overview.md, untitled.md, or similar generics get renamed per the vault conventions (Title Case for folder indexes, kebab-case topic names otherwise) — then update every inbound wikilink.

  3. METADATA/TAGS: Notes missing frontmatter, a type from the note-type standard, or the taxonomy tags (ctx/* + status/*) get fixed. Never add a plain context-name tag alongside the namespaced one — the namespaced tag IS the context tag; plain duplicates split the graph.

  4. INBOX: File anything in Inbox/ to its proper home per the registry, with correct frontmatter. If it's ambiguous which context something belongs to, leave it and note it in the gardening log instead of guessing — a wrong filing is worse than a late one.

  5. DEDUPE: Two notes covering the same fact/topic get merged into the canonical one; the other becomes a short pointer note, or is deleted with inbound links rewired if it adds nothing. Context isolation applies — never merge notes across contexts.

  6. LEARNINGS SYSTEM: Verify System/learnings/ still follows one-lesson-per-file with the required sections, and that the one-line-per-lesson catalog in System/learnings/Learnings Index.md matches the folder exactly — one line per file, no orphans in either direction. The index lives in that dedicated file, NOT in the vault's CLAUDE.md: CLAUDE.md loads into every session, so an inline index is a token tax that grows forever (ours hit 60KB before we learned this). If index lines have crept into CLAUDE.md, MOVE them to the Learnings Index and leave CLAUDE.md with only the rules and a pointer. Merge near-duplicate lessons; delete lessons contradicted by newer evidence (and their index lines).

Read the full file on GitHub · 56 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 56 lines · 120 tokens per session scan A 210da0462ddc

Subscribe to this mod's changes

vault-gardener is a skill published in the GitHub repository josherau/claude-operating-core (3 stars, last pushed 1mo ago), licensed MIT. It adds 120 tokens to every session and 2,133 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

company-brain

Your team's shared, AI-ready knowledge base — people, companies, meetings, SOPs, and decisions structured so Claude can answer questions on your team's behalf. Team-scope sibling to second-brain (which is personal-scope). Seven modes — capture (drop something into the right structured dir), compile (process into wiki…

coreyhaines31/makerskills · 322 tokens

second-brain

When you want to capture into, compile, query, lint, or connect your personal Second Brain. Wraps the Karpathy LLM Wiki schema (Obsidian or any markdown vault) — raw/ (unprocessed sources), wiki/ (AI-compiled interlinked topic pages), outputs/ (generated artifacts). Tool-agnostic in design but defaults to a vault at…

coreyhaines31/makerskills · 238 tokens

self-improve

Extract lessons from the current session, or sweep the project's past sessions when asked, and route them to the appropriate knowledge layer (project AGENTS.md, auto memory, existing skills, or new skills). Use when the user asks to "self-improve", "distill this session", "distill past sessions", "sweep past…

tobihagemann/turbo · 125 tokens

learn-from-fix

Capture Elixir/Ecto/LiveView lessons and Hex API rules. Use after corrections or when asked to document learning, record a lesson, prevent a fixed mistake, or remember package guidance with --library.

oliver-kriska/claude-elixir-phoenix · 46 tokens

compound-docs

Searchable Elixir/Phoenix/Ecto solution documentation system with YAML frontmatter. Builds institutional knowledge from solved problems. Use when consulting past solutions before investigating new issues.

oliver-kriska/claude-elixir-phoenix · 38 tokens

claude-md-updater

Scans the session for lessons and workflows, then proposes scoped CLAUDE.md edits. Use for save this lesson or add to context.

jamditis/claude-skills-journalism · 34 tokens