Borrowing it
Nothing to install: this file belongs to juyterman1000/entroly. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/juyterman1000/entroly/main/.agents/skills/entroly-lobehub-audit/SKILL.mdgit clone --depth 1 https://github.com/juyterman1000/entrolyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/juyterman1000/entroly/entroly-lobehub-audit)<a href="https://agentmods.dev/skills/juyterman1000/entroly/entroly-lobehub-audit"><img src="https://agentmods.dev/badge/skills/juyterman1000/entroly/entroly-lobehub-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/juyterman1000/entroly/entroly-lobehub-audit"><img src="https://agentmods.dev/badge/skills/juyterman1000/entroly/entroly-lobehub-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00032 | $0.01079 |
| Opus 5 | $0.00016 | $0.00540 |
| Sonnet 5 | $0.00006 | $0.00216 |
| Haiku 4.5 | $0.00003 | $0.00108 |
Grade A, and why
entroly-lobehub-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Entroly LobeHub MCP Audit
Mission
Audit Entroly's complete LobeHub MCP score at:
https://lobehub.com/mcp/juyterman1000-entroly?activeTab=score
Act as a senior open-source product architect, MCP engineer, security engineer, Rust/Python/TypeScript developer, and release engineer.
Non-negotiable execution contract
- Read every score category, deduction, warning, and missing requirement.
- Map every deduction to the exact repository file, runtime behavior, external index state, or genuinely missing capability.
- Classify every finding as one of:
- product or security defect;
- packaging or discovery defect;
- missing documentation;
- stale external indexing;
- criterion irrelevant to Entroly's context-control category.
- Improve only legitimate weaknesses. Never add empty keywords, fabricated evidence, fake benchmarks, or unnecessary features merely to game a score.
- Preserve Entroly's positioning as the auditable context, memory, and verification control plane for AI agents.
- Implement production-quality fixes with tests, schemas, validation, security controls, documentation, and reproducible evidence.
- Add CI regression gates so corrected findings cannot return.
- Run the official MCP, npm, PyPI, OpenClaw/ClawHub, and LobeHub-relevant validation paths.
- Open a focused PR with a deduction-by-deduction remediation table.
- Merge only after all checks pass, publish the necessary patch release, and verify the public LobeHub page after its index refresh.
- Never claim the score improved until the public page visibly confirms it.
Priority and release isolation
- Finish and publicly verify the ClawHub v1.0.54 metadata correction.
- Keep LobeHub remediation in a separate branch, PR, and release.
- Do not mix unrelated product work into marketplace remediation.
LobeHub score registry
The current public LobeHub implementation assigns 100 total points:
| Criterion | Weight | Required |
|---|---|---|
| Claimed listing | 4 | No |
| Non-manual deployment | 12 | No |
| Any deployment | 15 | Yes |
| Detected license | 8 | No |
| MCP prompts | 8 | No |
| README | 10 | Yes |
| MCP resources | 8 | No |
| MCP tools | 15 | Yes |
| Runtime validation | 20 | Yes |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 120 lines · 32 tokens per session scan A 59efe41ab5f2
entroly-lobehub-audit is a skill published in the GitHub repository juyterman1000/entroly (443 stars, last pushed yesterday), licensed Apache-2.0. It adds 32 tokens to every session and 1,079 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
compact-guard-clauses
Refactor deeply nested conditions into early-return guard clauses when doing so improves readability and preserves behavior.
incremental-diff-ingestion
Review compact Git diffs with enough surrounding context to assess a pull request or commit.
pith-review
One-shot structured code review. Use when reviewing a PR, diff, file, or function. Format: one line per issue. No summaries. Does not persist.
global-collaboration-rules
Universal collaboration rules for AI coding agents. Covers output standards, token optimization (90% cache hit, 98% tool output reduction), requirements locking with anti-drift checks, context compression (9-section CC template at 85%), skill borrowing workflow, image fallback without vision models, code comment…
shorthand-mem
A two-way semantic compiler that compresses PRDs, codebases, research papers, and meeting notes into dense symbolic notation, and reconstructs them back into professional prose. Use this skill whenever the user writes SQUEEZE, EXPAND, DIFF, MERGE, SUMMARISE, LIST SQUEEZES, RECALL, SEARCH, DELETE, or EXPORT ALL — or…
iceage-review
Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /iceage-review. Auto-triggers when reviewing pull requests.