Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add kabudu/engineering-agent-skills --skill lazarus-modegit clone --depth 1 https://github.com/kabudu/engineering-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kabudu/engineering-agent-skills/lazarus-mode)<a href="https://agentmods.dev/skills/kabudu/engineering-agent-skills/lazarus-mode"><img src="https://agentmods.dev/badge/skills/kabudu/engineering-agent-skills/lazarus-mode/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kabudu/engineering-agent-skills/lazarus-mode"><img src="https://agentmods.dev/badge/skills/kabudu/engineering-agent-skills/lazarus-mode.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.02242 |
| Opus 5.5 | $0.00022 | $0.00897 |
| Sonnet 5.5 | $0.00011 | $0.00448 |
| Haiku 4.5 | $0.00006 | $0.00224 |
Grade A, and why
lazarus-mode scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Lazarus Mode
Apply principal-engineer rigor to correctness, operability, security, performance, maintainability, and long-term product direction. Improve correctness, boundaries, testing, and evolvability without overbuilding.
Plan and implement
- Inspect the actual architecture, relevant modules/tests, docs, release process, and maturity. Follow local conventions unless they block correctness.
- Before editing, inventory every explicit user request, roadmap bullet, checklist item, linked-doc requirement, release expectation, and conditional documentation/update obligation separately. Resolve ambiguous roadmap wording into concrete acceptance criteria.
- Choose the simplest conventional implementation using existing components. Add complexity only for a concrete correctness, security, performance, scalability, compatibility, or operability need; explain that need and bound the cost. Prefer usable increments; widen scope when a narrow patch leaves an unsafe or misleading boundary.
- Model domain states and ownership explicitly where this prevents contradictory states or duplicated rules. Derive values from authoritative state instead of synchronising copies; use the language's supported types and structures without forcing an abstraction onto clear local code.
- Deliver usable behaviour within the requested scope. Scaffolds, TODOs, starter templates, and documentation alone do not establish completion. Identify blockers before merge/release; defer requirements only with explicit user acceptance. State prototype limitations and future production requirements precisely.
- Before each non-trivial change, establish:
- requirement, invariant, and owning component;
- simplest adequate design and justification for added complexity;
- rejection, bad-input, timeout, partial-failure, rollback, cleanup, security/privacy, and compatibility behaviour;
- worst-case work, concurrency, time, and memory bounds as inputs/providers scale;
- tests and smoke checks that prove the behaviour.
- Treat production performance as a correctness constraint. Account for partial writes, stale state, data loss, and exhaustion; avoid unbounded fan-out, serial network loops, startup blockers, runaway retries, memory growth, and latency cliffs.
- Missing dependencies alone are not validation blockers. Attempt bounded setup in the appropriate local environment, keeping caches/artifacts hygienic and ignored by source control, then validate the real backend and requested baselines. If setup/access fails, record the exact command or missing permission before claiming environmental unavailability.
- For new projects, use the latest stable language edition, toolchain, dependencies, and security posture supported by the local ecosystem. Verify the active toolchain before choosing older versions; document compatibility constraints and validation evidence for older or deprecated/insecure choices.
- For complex SQL/search/boolean expressions, prefer named predicate fragments over positional
sprintfwhen they clarify business rules. Parameterize or safely quote values. - Reflect public/protocol changes explicitly in docs, tests, changelog, and compatibility notes.
- For recurring mistakes, prefer a proportionate type, lint rule, test, or script over another instruction. Check that it catches the actual failure and permits valid behaviour; reserve prose for constraints requiring judgement.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago Changed · +8 lines 778d7ca401eb
- 22d ago Changed · +16 lines · -21 tokens per session f1eecb0081a5
- 1mo ago Changed · -71 lines · -23 tokens per session 4c9f5726321b
- 1mo ago First seen · 159 lines · 99 tokens per session scan A 7420060876e4
lazarus-mode is a skill published in the GitHub repository kabudu/engineering-agent-skills (3 stars, last pushed yesterday), licensed MIT. It adds 55 tokens to every session and 2,242 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
triage
A process for reviewing issues and outside pull requests through category and status labels. An issue is a recorded problem or request, while a pull request is a proposed code change for review.
pr
A writing guide for creating pull request descriptions, which explain a proposed code change to reviewers. It uses sections for the summary, evidence, merge risk, and the likely area affected by the change.
code-review
A code-review skill that compares changes from a chosen commit, branch, tag, or merge-base against the repository’s coding standards and the related issue or specification.
improve-codebase-architecture
A skill that scans a codebase for places where restructuring could make future changes and testing easier, then produces an HTML report for selected improvements.
code-review
A two-part code review process that compares your current changes with a chosen commit, branch, tag, or merge point. One review checks repository conventions, while the other checks the original requirements.
improve-codebase-architecture
A codebase review process that looks for architecture changes—ways to organize code—that could make future work easier. It presents possible improvements in an HTML report and examines the options you choose.