Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add KerberosClaw/kc_ai_skills --skill prep-repogit clone --depth 1 https://github.com/KerberosClaw/kc_ai_skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/prep-repo)<a href="https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/prep-repo"><img src="https://agentmods.dev/badge/skills/kerberosclaw/kc_ai_skills/prep-repo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kerberosclaw/kc_ai_skills/prep-repo"><img src="https://agentmods.dev/badge/skills/kerberosclaw/kc_ai_skills/prep-repo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.03615 |
| Opus 5 | $0.00049 | $0.01808 |
| Sonnet 5 | $0.00020 | $0.00723 |
| Haiku 4.5 | $0.00010 | $0.00362 |
Grade A, and why
prep-repo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 280 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prep Repo
You are a release-readiness auditor for public GitHub projects. You scan first, separate must-fix blockers from polish, and never let private data, broken docs, or misleading setup instructions slip into a public repo.
Prepare a local project for publishing to GitHub. Run through all checks and fix issues found.
不適用
- 不直接 publish、push、改 repo visibility,除非 user 明確要求。
- 不自動重寫 git history;若掃到歷史中的秘密,先停下說明風險與命令。
- 不把 private/internal 專案硬改成 public 文案;先確認目標 visibility。
跟工程流程 skill 的關係
spec/prd-create/prd-breakdown/goal-engineer管「要做什麼、怎麼做、怎麼交給 agent 或 ADO」;本 skill 只管做完後能不能安全公開/推 GitHub。- 遇到 bug 用
diagnose,遇到尚未定義的 feature 用spec,遇到已完成但準備 release 的 repo 才用本 skill。
Checklist
1. README
-
README.mdexists with an engaging, descriptive title (not the repo/folder name — e.g. "Pantry Pilot -- Because Life's Too Short to Track Groceries by Hand" instead of "my_pantry_app") -
README_zh.mdexists (Traditional Chinese version) -
README.mdhas[正體中文](README_zh.md)link (not 繁體中文、繁體中文版 etc.) -
README_zh.mdhas[English](README.md)link (not English Version etc.) - Both language links are standalone lines below the badges, not inside blockquotes
- Both READMEs have: project description, architecture/structure, quick start, and links to docs
- Badges present below title: at minimum License + primary language version. Common badges:
[](LICENSE)[](https://www.python.org/)[](https://www.docker.com/)- CI badge if GitHub Actions exists
- Security Notice section exists (what external services are used, how credentials are handled, how to report issues)
2. Docs (if any)
- Chinese docs have an English summary block at the top (in a
> **English summary:**blockquote) - All internal links are valid (no broken links)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 280 lines · 99 tokens per session scan A ce96bce8908d
prep-repo is a skill published in the GitHub repository KerberosClaw/kc_ai_skills (79 stars, last pushed 3d ago), licensed MIT. It adds 99 tokens to every session and 3,615 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
github-repo-care
Protocol for safely creating, publishing, releasing, auditing, and maintaining GitHub repositories: check local rules and locks, create .gitignore before the first add, run privacy checks, prepare README/i18n/banner/metadata, verify release tags and GitHub releases, and update organization profiles, llms.txt files…
pypi-release
This skill should be used when releasing tunacode-cli to PyPI. It keeps the existing local release checks, then hands the actual PyPI upload to a GitHub Actions workflow that uses the repository's PYPIAPITOKEN secret.
migrate-rename
Evolutionary file renaming with wrapper files, plus the terse MOVED-stub standard for whole folder/file moves. Enables renames without hard breaks — references are organically updated through usage.
reissverschluss-merge
Reißverschluss-Verfahren (englisch: zipper merge) für sehr konfliktreiche Merges: Wenn zwei divergente Branches oder ein PR und sein Zielbranch BEIDE wertvolle, unvereinbar erscheinende Änderungen tragen, wird nicht pauschal eine Seite gewählt, sondern Abschnitt für Abschnitt verglichen, per Entscheidungstabelle…
antigravity-maintainer-batch-release
Run protected AAS maintainer sweeps, PR merge batches, canonical sync, Core preview checks, and scripted releases. Use for repository maintenance, main alignment, CLI/MCP/Workbench changes, or release.
github
GitHub via gh CLI: PRs, issues, reviews, repos, auth.