Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jxoesneon/Ciel --skill security-scangit clone --depth 1 https://github.com/jxoesneon/CielWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jxoesneon/ciel/security-scan)<a href="https://agentmods.dev/skills/jxoesneon/ciel/security-scan"><img src="https://agentmods.dev/badge/skills/jxoesneon/ciel/security-scan/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jxoesneon/ciel/security-scan"><img src="https://agentmods.dev/badge/skills/jxoesneon/ciel/security-scan.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.00488 |
| Opus 5 | $0.00010 | $0.00244 |
| Sonnet 5 | $0.00004 | $0.00098 |
| Haiku 4.5 | $0.00002 | $0.00049 |
Grade B, and why
security-scan scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Instruction-override phrasingmediumPrompt injection
Text telling the model to disregard its earlier instructions or safety rules is the shape of a prompt injection, whoever wrote it.
- **Context Bypass**: Adding instructions to `CLAUDE.md` that tell agents to ignore security rules. Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
What it actually says
CIEL ADAPTATION: Security Scan (Harness Auditing)
This skill formalizes the auditing of the CIEL harness itself. It uses AgentShield to detect overly permissive permissions, hardcoded secrets in configs, and command injection risks in hooks.
Scan Targets
- CLAUDE.md: Search for auto-run instructions that could be exploited via prompt injection.
- Settings: Identify wildcard shell permissions (
Bash(*)) or missing deny lists. - MCP Config: Detect hardcoded env secrets or risky third-party servers.
- Hooks: Audit shell scripts for
${file}interpolation without proper quoting.
Operational Modes
- Sanity Check: Run
npx ecc-agentshield scanbefore committing config changes. - Deep Analysis (Adversarial): Use the 3-agent pipeline (Attacker, Defender, Auditor) for complex security decisions.
- Scaffold: Use
agentshield initto generate a secure-by-default environment.
Grading Scale
- A (90+): Secure configuration.
- C-D (40-74): Needs immediate attention.
- F (<40): CRITICAL vulnerabilities (e.g., hardcoded tokens).
Anti-Patterns
- Silent Errors: Using
2>/dev/nullin security hooks. - Unpinned Tools: Installing MCP servers via
npxwithout pinning the version. - Context Bypass: Adding instructions to
CLAUDE.mdthat tell agents to ignore security rules.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 51 lines · 21 tokens per session scan B 3ecc03ca096a
security-scan is a skill published in the GitHub repository jxoesneon/Ciel (1 stars, last pushed 5d ago), licensed Apache-2.0. It adds 21 tokens to every session and 488 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (instruction-override phrasing). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
surge
Use when a user provides a PRD, spec, or detailed requirements document and needs a full project delivered through iterative expert orchestration — multi-round analyze/research/design/implement/QA cycles with convergence detection. NOT for: single-file edits, quick prototypes, simple Q&A, or tasks without a written…
ai-native-software-dev
Use when the user asks to build, change, modernize, or reconstruct non-trivial software with an AI-native workflow, including greenfield development, work in an existing codebase, or authorized reference-based product reconstruction; also use when lifecycle planning, architecture, implementation, testing, review…
Code Quality Review
Conduct a comprehensive code quality review focused on clean code, architecture, and project standards.
redpolicy-guide
An editorial policy for turning webinar transcripts into self-contained guides. A transcript is a written record of spoken material, while a self-contained guide can be understood without watching the webinar.
write-overview
A workflow for researching and writing a review essay about a project topic when no finished source text exists. It gathers the facts, studies example essays when available and produces the article in a project output folder.
redpolicy-article
An editorial guide for writing comparison articles about services, tools, and products. It defines a consistent entry format covering the name, link, price, description, and notable features.