Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Kastalien-Research/thoughtbox --skill peer-notebook-delivery-guardgit clone --depth 1 https://github.com/Kastalien-Research/thoughtboxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kastalien-research/thoughtbox/peer-notebook-delivery-guard)<a href="https://agentmods.dev/skills/kastalien-research/thoughtbox/peer-notebook-delivery-guard"><img src="https://agentmods.dev/badge/skills/kastalien-research/thoughtbox/peer-notebook-delivery-guard/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kastalien-research/thoughtbox/peer-notebook-delivery-guard"><img src="https://agentmods.dev/badge/skills/kastalien-research/thoughtbox/peer-notebook-delivery-guard.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.01726 |
| Opus 5 | $0.00028 | $0.00863 |
| Sonnet 5 | $0.00011 | $0.00345 |
| Haiku 4.5 | $0.00006 | $0.00173 |
Grade A, and why
peer-notebook-delivery-guard scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 238 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Guard MCP peer notebook delivery for: $ARGUMENTS
Purpose
This skill is the delivery guardrail for ADR-022. It keeps large implementation units aligned with the brokered peer notebook end state:
- governed peer identities
- approved manifests
- brokered inbound invocation
- broker-proxied outbound access
- durable invocations, traces, and artifacts
- web-app inspection
- real runtime providers behind explicit contracts
Use this skill whenever work touches .specs/mcp-peer-notebooks/,
.specs/mcp-peer-notebooks/SPEC-CONTROL-PLANE.md, src/peer-notebook/, peer notebook Supabase
migrations, peer notebook web app routes, or runtime providers.
Required Reads
Read these before planning or editing:
AGENTS.md.specs/mcp-peer-notebooks/SPEC-CONTROL-PLANE.md.specs/mcp-peer-notebooks/SPEC-CONTROL-PLANE.md.specs/mcp-peer-notebooks/README.md.specs/mcp-peer-notebooks/NEXT-IMPLEMENTATION-HANDOFF.md
If the work touches app UI, also read apps/web/AGENTS.md.
Hard Rule
Mocks are contract fixtures, not final substitutes.
A mock, in-memory store, stubbed provider, fake broker target, or local-only stand-in may prove shape, schema, trace semantics, and client reachability. It does not satisfy the production requirement for the capability it represents.
Before any unit is complete, every mocked or in-memory component touched must be either:
- replaced by a real implementation behind the same contract,
- narrowed to test-only/non-production use by code and docs, or
- explicitly deferred in the user-selected tracker or handoff artifact with the real replacement named.
If a mock fulfills the function of the thing it mocks in a final acceptance claim, the unit is not complete.
Large Unit Boundaries
Pick exactly one primary unit unless the user explicitly asks for a larger combined effort.
| Unit | Capability Produced | Explicit Non-Goals |
|---|---|---|
| Durable Control Plane | Supabase-backed peers, manifests, invocations, traces, and artifacts while runtime remains mock-capable | Web app pages, real runtime isolation |
| Manifest Lifecycle And Notebook Graduation | Compile peer.manifest.json from real notebook source, store drafts, approve/activate/retire manifests |
Runtime provider expansion, UI beyond minimal admin/read APIs |
| Web App Inspection Surface | Peer registry/detail, invocation list/detail, trace timeline, artifact preview from durable rows | New runtime providers, migration redesign |
| Real Runtime Provider Path | local-process integration provider behind runtime contract, marked development-only |
Production isolation claims |
| Production Isolation And Policy Hardening | Isolated execution provider, enforced network/filesystem/secrets/budget policy, adversarial acceptance | Treating local-process or mock as production |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 238 lines · 56 tokens per session scan A 41875219bf06
peer-notebook-delivery-guard is a skill published in the GitHub repository Kastalien-Research/thoughtbox (64 stars, last pushed 1mo ago), licensed MIT. It adds 56 tokens to every session and 1,726 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
matlab
Build, review, migrate, and safely plan MATLAB or GNU Octave numerical workflows, including arrays, tabular/time data, tests, projects, graphics, MAT files, and explicit Python interoperability.
phylogenetics
Build and analyze phylogenetic trees using MAFFT (multiple alignment), IQ-TREE 2 (maximum likelihood), and FastTree (fast NJ/ML). Visualize with ETE3 or FigTree. For evolutionary analysis, microbial genomics, viral phylodynamics, protein family analysis, and molecular clock studies.
data-charts-tako
Search and visualize the world's data - get charts, insights, and embeddable knowledge cards for finance, economics, demographics, sports, and more.
unity-addressables
Manage Addressables groups, entries, profiles and content builds (com.unity.addressables, reflection-based).
unity-yaml-editing
Last-resort guidance for safely hand-editing Unity YAML.
CSOC Operations & Playbook Automation
SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking.