repository-manager-worker-operations

repository-manager-worker-operations is a skill for Codex from Knuckles-Team/repository-manager. It costs 186 tokens per session (2,925 once invoked), scanned A, original, MIT.

A set of repository-manager operations for registering remote machines and preparing source code to run there. It handles capacity records, authorised repository locations, fixed checkout steps, logs, artifacts, and lost-host recovery.

In plain words
What is it for?
Use it to register and inspect remote workers, verify dispatch permissions, stage an exact source commit, retrieve logs and artifacts, and reconcile an unavailable host. Live dispatch currently depends on tunnel-manager.
Why use it?
It provides controlled remote execution setup without accepting credentials or allowing callers to bypass checks about where work runs.

Skill for Codex

Written for Codex: agents/openai.yaml present.

Not installable: its command points at a path on the author’s own machine, so it runs nowhere else. The line is /home/apps/worktrees/epistemic-graph.

Good fit Use it to register and inspect remote workers, verify dispatch permissions, stage an exact source commit, retrieve logs and artifacts, and reconcile an unavailable host. Live dispatch currently depends on tunnel-manager.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

There is no command for this one: it runs only inside a plugin, and the catalogue could not identify which plugin ships it. The source is linked below.

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for repository-manager-worker-operations

README.md
[![agentmods](https://agentmods.dev/badge/skills/knuckles-team/repository-manager/repository-manager-worker-operations/github.svg)](https://agentmods.dev/skills/knuckles-team/repository-manager/repository-manager-worker-operations)
Your own site
<a href="https://agentmods.dev/skills/knuckles-team/repository-manager/repository-manager-worker-operations"><img src="https://agentmods.dev/badge/skills/knuckles-team/repository-manager/repository-manager-worker-operations/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for repository-manager-worker-operations

Your own site · 80×15
<a href="https://agentmods.dev/skills/knuckles-team/repository-manager/repository-manager-worker-operations"><img src="https://agentmods.dev/badge/skills/knuckles-team/repository-manager/repository-manager-worker-operations.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 186 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,925 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00186 $0.02925
Opus 5 $0.00093 $0.01463
Sonnet 5 $0.00037 $0.00585
Haiku 4.5 $0.00019 $0.00293

Measured 12d ago against content hash b851cb588b45, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

repository-manager-worker-operations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

repository_manager/skills/repository-manager-worker-operations/SKILL.md · 206 lines

How it starts

The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Manager — Worker Operations

rm_remote_workers composes RMDD-15's remote-execution registry/staging/artifact package with RMDD-08's CapacityInventory weighted resource ledger. It is the governed surface for placing and staging work on a non-local host — it never builds a raw shell string, never accepts a credential, and never lets a caller assert same-node execution the tool cannot itself verify.

⚠ Read this before anything else: two actions deliberately fail closed today

Verified against agent-packages/repository-manager main at fdce825:

  • recheck (and any live remote dispatch) refuses without the optional tunnel-manager dependency. Registration (register_worker/profile) never needs live inventory resolution, so the registry stays constructible without tunnel-manager installed — but the dispatch-time entitlement check raises a named RemoteExecutionUnavailableError (error_code: "dependency_blocked"), preserving the real ImportError as its cause, the moment inventory resolution is actually needed. If tunnel-manager IS installed but no inventory resolver is configured for this entrypoint, the refusal says that instead — still a refusal, never a silent no-op.
  • host_loss_reconcile always refuses. Host-loss reconciliation requires a live, WorkItem-authoritative ResourceScheduler.release (repository_manager.native_reservations.NativeWorkItemReservationPort, bound to a connected graph-os engine client). As of this lane, grepping the whole package for that construction wired into any MCP/CLI entrypoint finds none — not this one, and not RMDD-28's sibling native lane authority either. This module deliberately never substitutes a local in-memory reservation ledger for that missing authority — doing so would itself be the "parallel job ledger / second store" the program's correctness constraints forbid.

Never work around either refusal with a raw SSH command, a hand-rolled credential, or a local reservation you invented — report the refusal and escalate.

Read the full file on GitHub · 206 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 206 lines · 186 tokens per session scan A b851cb588b45

Subscribe to this mod's changes

repository-manager-worker-operations is a skill published in the GitHub repository Knuckles-Team/repository-manager (2 stars, last pushed 14d ago), licensed MIT. It adds 186 tokens to every session and 2,925 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

release-changelog-harness

Chooses ecosystem-native release and changelog tooling (Changesets, Melos, release-plz) plus binary distribution (GitHub Release tarballs, install.sh) when the product is an executable. Use for release CI, install.sh, versioning, CHANGELOGs, shipping MCP/CLI without clone, or meta repos that only ship skills via npx…

Arenukvern/mcp_flutter · 84 tokens

polish-docs-meta

Finalize documentation and project metadata for a ship-ready release. Use after implementation is complete, tests pass, and devcheck is clean. Safe to run at any stage — each step checks current state and only acts on what still needs work.

cyanheads/git-mcp-server · 53 tokens

github-via-nyxid

Operate a user's GitHub account through NyxID's credential-brokering proxy (service slug api-github) — read and write repositories, files, issues, pull requests, commits, branches, Actions, gists and anything else the GitHub REST API exposes, all on the user's behalf and without ever handling a raw token. NyxID…

ChronoAIProject/NyxID · 116 tokens

release-versioning

Discipline for release classification, version bumps, and changelogs, Conventional Commits classify the release range, SemVer computes the version from those commits, Keep a Changelog renders the result. Use when the user asks to cut a release, bump a version, write a changelog, decide if a change is a…

aethrox/doctrine · 84 tokens

git-workflow

Git best practices for version control and collaboration.

athola/skrills · 12 tokens

memory-commit

Use when the user explicitly says "remember this", "save this", "ghi nho", "luu lai", "save for next time", or otherwise asks to persist the immediately preceding context. Captures with the appropriate contexttype (decision, preference, fact, skill, task, conversation) so future sessions can retrieve it accurately.

n24q02m/mnemo-mcp · 72 tokens