Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add K-Dense-AI/mimeographs --skill ian-goodfellowgit clone --depth 1 https://github.com/K-Dense-AI/mimeographsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/k-dense-ai/mimeographs/ian-goodfellow)<a href="https://agentmods.dev/skills/k-dense-ai/mimeographs/ian-goodfellow"><img src="https://agentmods.dev/badge/skills/k-dense-ai/mimeographs/ian-goodfellow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/k-dense-ai/mimeographs/ian-goodfellow"><img src="https://agentmods.dev/badge/skills/k-dense-ai/mimeographs/ian-goodfellow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00119 | $0.01293 |
| Opus 5 | $0.00060 | $0.00647 |
| Sonnet 5 | $0.00024 | $0.00259 |
| Haiku 4.5 | $0.00012 | $0.00129 |
Grade A, and why
ian-goodfellow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to ian-goodfellow — 2 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Thinking like Ian Goodfellow
Ian Goodfellow is a pioneering AI researcher, best known as the inventor of Generative Adversarial Networks (GANs) and a leading voice in adversarial machine learning. The signature shape of his thinking is the shift from pure optimization to game theory—framing machine learning not just as minimizing a single cost function, but as a dynamic equilibrium between competing forces. He views AI security through the lens of worst-case robustness rather than average-case performance, and champions learned features over hand-coded rules.
Reach for this skill whenever you're designing generative models, evaluating AI guardrails, mitigating algorithmic bias, or defending systems against adversarial attacks.
Core principles
- Adversarial Training for Generative Models: Generative models are best trained by pitting them against a discriminative adversary, sidestepping intractable probabilistic computations.
- Defense Over Offense: Security research in machine learning must aim to make defense easier than attack to promote stability.
- Linearity Causes Adversarial Vulnerability: Adversarial examples occur because modern machine learning models are too linear, not because they are overfitting.
- Bias Mitigation Requires Adversarial Training: Simply withholding sensitive variables is insufficient; you must use an adversarial process to force the model to genuinely hide sensitive information.
- Cryptographic Authentication Over Fake Detectors: Rely on out-of-band cryptographic authentication, not pixel-analyzing fake detectors, to verify reality.
For detailed rationale and quotes, see references/principles.md.
How Ian Goodfellow reasons
Goodfellow approaches machine learning problems by decomposing them into the "Machine Learning Triad": the model, the optimization algorithm, and the dataset. When evaluating a system, he immediately asks how it performs under worst-case adversarial conditions, rejecting the illusion of competence that models display on average-case, in-distribution data (the "Clever Hans Effect").
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- _workspace/agents_output.e584bd6c.json 12 KB
- _workspace/clustered_corpus.e584bd6c.json 48 KB
- _workspace/critique_agents.json 3.7 KB
- _workspace/critique_agents.md 3.3 KB
- _workspace/critique_skill.json 3.2 KB
- _workspace/critique_skill.md 2.8 KB
- _workspace/discovery/books.json 11 KB
- _workspace/discovery/essays.json 7.9 KB
- _workspace/discovery/frameworks.json 8.0 KB
- _workspace/discovery/interviews.json 8.6 KB
- _workspace/discovery/letters.json 10 KB
- _workspace/discovery/papers.json 9.4 KB
- _workspace/discovery/podcasts.json 9.5 KB
- _workspace/discovery/ranked_sources.e584bd6c.json 30 KB
- _workspace/discovery/talks.json 8.2 KB
- _workspace/distilled/src_000.e584bd6c.json 2.3 KB
- _workspace/distilled/src_001.e584bd6c.json 3.9 KB
- _workspace/distilled/src_002.e584bd6c.json 378 B
- _workspace/distilled/src_005.e584bd6c.json 4.1 KB
- _workspace/distilled/src_006.e584bd6c.json 417 B
- _workspace/distilled/src_007.e584bd6c.json 7.4 KB
- _workspace/distilled/src_008.e584bd6c.json 1.5 KB
- _workspace/distilled/src_009.e584bd6c.json 13 KB
- _workspace/distilled/src_012.e584bd6c.json 536 B
- _workspace/distilled/src_014.e584bd6c.json 698 B
- _workspace/distilled/src_015.e584bd6c.json 17 KB
- _workspace/distilled/src_017.e584bd6c.json 6.3 KB
- _workspace/distilled/src_019.e584bd6c.json 1.9 KB
- _workspace/distilled/src_020.e584bd6c.json 4.1 KB
- _workspace/distilled/src_021.e584bd6c.json 5.5 KB
- _workspace/distilled/src_022.e584bd6c.json 8.4 KB
- _workspace/distilled/src_023.e584bd6c.json 3.1 KB
- _workspace/distilled/src_028.e584bd6c.json 659 B
- _workspace/distilled/src_030.e584bd6c.json 837 B
- _workspace/distilled/src_032.e584bd6c.json 593 B
- _workspace/distilled/src_033.e584bd6c.json 6.1 KB
- _workspace/distilled/src_038.e584bd6c.json 731 B
- _workspace/distilled/src_039.e584bd6c.json 7.2 KB
- _workspace/distilled/src_042.e584bd6c.json 600 B
- _workspace/distilled/src_043.e584bd6c.json 8.5 KB
- _workspace/quote_verification.json 30 KB
- _workspace/quote_verification.md 1.9 KB
- _workspace/raw/src_000.json 9.7 KB
- _workspace/raw/src_001.json 3.8 KB
- _workspace/raw/src_002.json 302 B
- _workspace/raw/src_005.json 1.5 KB
- _workspace/raw/src_006.json 321 B
- _workspace/raw/src_007.json 38 KB
- _workspace/raw/src_008.json 2.5 KB
- _workspace/raw/src_009.json 66 KB
- _workspace/raw/src_012.json 3.0 KB
- _workspace/raw/src_014.json 11 KB
- _workspace/raw/src_015.json 59 KB
- _workspace/raw/src_017.json 14 KB
- _workspace/raw/src_019.json 3.7 KB
- _workspace/raw/src_020.json 7.5 KB
- _workspace/raw/src_021.json 50 KB
- _workspace/raw/src_022.json 49 KB
- _workspace/raw/src_023.json 2.5 KB
- _workspace/raw/src_028.json 11 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 67 lines · 119 tokens per session scan A 67e882425dbe
ian-goodfellow is a skill published in the GitHub repository K-Dense-AI/mimeographs (123 stars, last pushed 23d ago), licensed MIT. It adds 119 tokens to every session and 1,293 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to ian-goodfellow, differing in 2 lines, and is treated as a copy.
Other skills, from other repositories
fs-notebook-tabs
A computer-science capstone: an on-device ML keyboard that predicts next words privately — problem, method, evaluation, and defense answers. Built as a decision-grade coursework defense deck for professor, defense committee.
implementing-llms-litgpt
Implements and trains LLMs using Lightning AI's LitGPT with 20+ pretrained architectures (Llama, Gemma, Phi, Qwen, Mistral). Use when need clean model implementations, educational understanding of architectures, or production fine-tuning with LoRA/QLoRA. Single-file implementations, no abstraction layers.
rwkv-architecture
RNN+Transformer hybrid with O(n) inference. Linear time, infinite context, no KV cache. Train like GPT (parallel), infer like RNN (sequential). Linux Foundation AI project. Production at Windows, Office, NeMo. RWKV-7 (March 2025). Models up to 14B parameters.
nanogpt
Educational GPT implementation in 300 lines. Reproduces GPT-2 (124M) on OpenWebText. Clean, hackable code for learning transformers. By Andrej Karpathy. Perfect for understanding GPT architecture from scratch. Train on Shakespeare (CPU) or OpenWebText (multi-GPU).
kaggle-learner
This skill should be used when the user asks to "learn from Kaggle", "study Kaggle solutions", "analyze Kaggle competitions", or mentions Kaggle competition URLs. Provides access to extracted knowledge from winning Kaggle solutions across NLP, CV, time series, tabular, and multimodal domains.
data-science-engineering-foundation
State, resume, reconstruction, job-lifecycle, transition, and flow-state mechanics for the Data Science and Engineering Coach. Loaded by the coach; not a user entry point.