Borrowing it
Nothing to install: this file belongs to leostacowskicompasso/workshop-27-08-26. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/leostacowskicompasso/workshop-27-08-26/main/.opencode/skills/mentor-agent/SKILL.mdgit clone --depth 1 https://github.com/leostacowskicompasso/workshop-27-08-26Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/leostacowskicompasso/workshop-27-08-26/mentor-agent)<a href="https://agentmods.dev/skills/leostacowskicompasso/workshop-27-08-26/mentor-agent"><img src="https://agentmods.dev/badge/skills/leostacowskicompasso/workshop-27-08-26/mentor-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/leostacowskicompasso/workshop-27-08-26/mentor-agent"><img src="https://agentmods.dev/badge/skills/leostacowskicompasso/workshop-27-08-26/mentor-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.02557 |
| Opus 5.5 | $0.00014 | $0.01023 |
| Sonnet 5.5 | $0.00007 | $0.00511 |
| Haiku 4.5 | $0.00003 | $0.00256 |
Grade B, and why
mentor-agent scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
let res = await fetch('http://localhost:8787/', { method: 'POST', How it starts
The opening of the file, as written. The whole thing — 235 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Overview (shared across all 3 transports)
- SDK:
@modelcontextprotocol/server(>= 2.0.0),@modelcontextprotocol/node(>= 2.0.0) — both required for HTTP/Express, onlyserverfor stdio. - Prerequisite: dependencies must already be installed (
npm install/yarn install) at the repo root before running any server. - Startup model differs per transport:
stdio_mcpistype: "local"in.opencode/opencode.jsonc(command: ["npm", "run", "start:stdio"]) — OpenCode spawns and manages this process automatically. Never instruct a participant to runnpm run start:stdiomanually.http_mcp(http://localhost:8787) andexpress_mcp(http://localhost:8788) aretype: "remote"— OpenCode only connects, it does not start these. The participant must runnpm run start:http/npm run start:expressmanually, each in its own terminal (the--watchflag blocks the terminal). Only after the server is up do thehttp_mcp*/express_mcp*tools appear.
- All 4 tools (
nordesul-delivery,nordesul-deploy,nordesul-reference,nordesul-status) are imported unconditionally bytools/index.js— no server starts until every one of them exports something. - Full SDK v2 reference: https://ts.sdk.modelcontextprotocol.io/v2/
stdio
Implementation Reference
https://ts.sdk.modelcontextprotocol.io/v2/serving/stdio.html
Implementation Dependencies
@modelcontextprotocol/server—McpServer@modelcontextprotocol/server/stdio—serveStdio
Server Files
servers/stdio/main.js— entrypoint, registers the tools fromtools/index.jsviaMcpServer.registerTooland serves viaserveStdio.servers/stdio/config.js—SERVER.NAME/SERVER.VERSION,LOGGER.PREFIX.
How to Run
npm run start:stdio
# or
yarn start:stdio
How to Test Without Hanging
stdio doesn't use networking — send a JSON-RPC message via stdin in a single Node process (no --watch) and read the response from stdout. The process exits on its own once the input ends.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 235 lines · 35 tokens per session scan B 1450e2df05b7
mentor-agent is a skill published in the GitHub repository leostacowskicompasso/workshop-27-08-26 (3 stars, last pushed 16d ago), licensed Unlicense. It adds 35 tokens to every session and 2,557 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 1 finding (sends data to an external url). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
mentor-agent compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| mentor-agentleostacowskicompasso/workshop-27-08-26 | Skill | 3 | 16d ago | Unlicense | B | 35 | OpenCode |
| create-prprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 48 | Claude Code, Codex |
| draft-release-notesprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 174 | Claude Code, Codex |
| publish-npm-versionprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 182 | Claude Code, Codex |
| record-upgrade-instructionsprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 129 | Claude Code, Codex |
| triage-contributor-prprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 131 | Claude Code |
| contrib-prprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 65 | Claude Code, Codex |