Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ketor/cto-fleet --skill team-multirepo-auditgit clone --depth 1 https://github.com/ketor/cto-fleetWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ketor/cto-fleet/team-multirepo-audit)<a href="https://agentmods.dev/skills/ketor/cto-fleet/team-multirepo-audit"><img src="https://agentmods.dev/badge/skills/ketor/cto-fleet/team-multirepo-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ketor/cto-fleet/team-multirepo-audit"><img src="https://agentmods.dev/badge/skills/ketor/cto-fleet/team-multirepo-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00223 | $0.08983 |
| Opus 5 | $0.00112 | $0.04491 |
| Sonnet 5 | $0.00045 | $0.01797 |
| Haiku 4.5 | $0.00022 | $0.00898 |
Grade A, and why
team-multirepo-audit scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootlowPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- 目录路径：`/tmp/{team-name}/`（team lead 在 TeamCreate 后执行 `mkdir -p /tmp/{team-name} && chmod 700 /tmp/{team-name}`） Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 548 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Preamble (run first)
_UPD=$(~/.claude/skills/cto-fleet/bin/cto-fleet-update-check 2>/dev/null || true)
[ -n "$_UPD" ] && echo "$_UPD" || true
If output shows UPGRADE_AVAILABLE <old> <new>: read ~/.claude/skills/cto-fleet/cto-fleet-upgrade/SKILL.md and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with 4 options, write snooze state if declined). If JUST_UPGRADED <from> <to>: tell user "Running cto-fleet v{to} (just updated!)" and continue.
参数解析：从 $ARGUMENTS 中检测以下标志：
--auto：完全自主模式（不询问用户任何问题，全程自动决策）--once：单轮确认模式（仅在阶段 1 域分组结果后确认一次，后续全程自动执行）--depth=cards|standard|deep：输出深度（默认standard）cards：仅卡片（300-600 字/仓）+ 域综合（1500-3000 字/域）。轻量、最快standard：cards + 顶层全景架构 + 总报告 + 横切 4 章（技术栈/业务流程/风险/术语）。推荐默认值deep：standard + 每仓库 runbook 级深度报告（3000-6000 字 / 14 节，可独立支撑线上 debug）
--parallel=N：并行域 analyst 数（默认 6；--auto时 8；上限受单批次资源约束）--out=path：输出目录（默认~/docs/research/<YYYY-MM-DD>-<slug>/，slug 由仓库根目录推导）--repos=glob：限定仓库 glob（默认<cwd>/**/.git递归发现的所有 git 仓库）--focus=domainA,domainB：仅深挖指定域；其他域只做 cards-only--validate-mermaid=true|false：Mermaid v10.9.5 真实 parser 验证（默认true，强制开启）--lang=zh|en：输出语言（默认zh中文）
| 模式 | 用户确认范围 | 条件节点处理 |
|---|---|---|
| 标准模式（默认） | 域分组确认 + 深度选项确认 + 综合阶段确认 + 最终交付确认 | 正常询问用户 |
单轮确认模式（--once） |
仅阶段 1 域分组+深度+并行度合并提问一轮 | 自动决策 + 收尾汇总 |
完全自主模式（--auto） |
不询问用户 | 全部自动决策，收尾汇总所有决策 |
单轮 / 自主模式下自动决策规则：
- 域数自动决策：grouper 给出的域数若在 6-14 之间则采纳；超出范围则按"主路径仓库 ≥ 5 → 独立成域；< 5 → 合并到最近邻"重组
- 重点深挖仓库自动选择：每域选 LOC 最大的 1-3 个 + 最近 6 个月活跃的 1-2 个，去重后取前 4
- 并行度：
--auto默认 8；--once默认 6 --focus处理：被 focus 的域走 deep；未被 focus 的域走 cards- 熔断机制（无论何种模式都触发）：
- 仓库总数 > 250 仓：必须暂停，建议
--repos=拆分 - 单域仓库数 > 30：警告并提示拆分该域为 sub-domain
- 总 LOC > 5M：警告耗时长（预估 2-4 小时）
- Mermaid parser 失败 > 5 块在自动修复 2 轮后仍未通过：暂停人工 review
- 任何域 analyst 连续 2 次失败：暂停 + 询问是否换批次或减重
- 仓库总数 > 250 仓：必须暂停，建议
使用 TeamCreate 创建 team（名称格式 team-multirepo-audit-{YYYYMMDD-HHmmss}，避免多次调用冲突），你作为 team lead 按以下流程协调。
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 548 lines · 0 tokens per session scan A 17da2d66596e
team-multirepo-audit is a skill published in the GitHub repository ketor/cto-fleet (5 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 223 tokens to every session and 8,983 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
autoreview
Pre-commit/ship code review: Codex default; optional Claude or Pi.
omh-code-review
This is a Hermes-native code-review workflow skill.
revdiff-plan
Review the last Codex assistant message (plan, analysis, or proposal) with inline annotations in a TUI overlay. Extracts the most recent response from Codex rollout files and opens it in revdiff for review and annotation. Activates on "revdiff-plan", "review plan with revdiff", "annotate plan", "review last response"…
code-reviewer
Code review specialist focused on patterns, bugs, security, and performance.
full-repo-review
Comprehensive four-wave review of all repo source files, producing a prioritized issue backlog.
agent-teams-simplify-and-harden
Implementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors find zero issues or…