Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lhh1301506137/CoTend --skill cotend-diagnose-onlygit clone --depth 1 https://github.com/lhh1301506137/CoTendWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lhh1301506137/cotend/cotend-diagnose-only)<a href="https://agentmods.dev/skills/lhh1301506137/cotend/cotend-diagnose-only"><img src="https://agentmods.dev/badge/skills/lhh1301506137/cotend/cotend-diagnose-only/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lhh1301506137/cotend/cotend-diagnose-only"><img src="https://agentmods.dev/badge/skills/lhh1301506137/cotend/cotend-diagnose-only.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00286 | $0.02136 |
| Opus 5 | $0.00143 | $0.01068 |
| Sonnet 5 | $0.00057 | $0.00427 |
| Haiku 4.5 | $0.00029 | $0.00214 |
Grade A, and why
cotend-diagnose-only scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
3. app route or API call with curl/HTTP script; How it starts
The opening of the file, as written. The whole thing — 143 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Diagnose Only
Diagnose the problem without changing project files.
Default: read-only investigation. Do not edit code, configs, tests, docs, package files, lockfiles, or generated artifacts unless the user explicitly authorizes moving from diagnosis to fix.
When To Use
Use this skill when:
- user says "只诊断", "先分析原因", "先别改代码", "别改代码", "先别动", "先别修", "先不要改", "先定位", "先查原因", "先告诉我为什么", "先分析,不要动代码", "diagnose only", or similar;
- user says "看看 AI 对这个模块的理解是否正确", "检查 AI 对这个模块的理解是否正确", "AI 对这个模块理解得对不对", "有没有理解偏", or equivalent evaluative wording without separately authorizing a change;
- user expresses doubt about a current change and asks for judgment or cause analysis without authorizing edits;
- verification failed and the cause is unclear;
- AI UAT found a failure but the right fix is uncertain;
- reviewer blocks work and Primary AI needs root cause before patching;
- the same bug has been fixed repeatedly and keeps returning;
- high-risk behavior is observed and blind patching would be unsafe.
- the user says a feature is not what they intended, development keeps moving but the product remains half-finished, or asks whether the AI misunderstood the feature while withholding edit authorization.
- a subagent, background agent, or model/tool call produces no trustworthy first response and it is unclear whether it is still reasoning, queued, disconnected, completed without a receipt, or stuck in a tool process.
If the same user instruction clearly asks to diagnose, then fix and verify, that explicit follow-on authorization satisfies the generic control-Skill handback. Report the diagnosis first, then proceed under the active project workflow without asking “continue?” again.
Rules
- Build or identify a feedback loop before forming conclusions.
- Prefer deterministic evidence over code-reading guesses.
- Do not make broad claims from a single symptom.
- Generate 3-5 falsifiable hypotheses before selecting the likely cause.
- If you cannot reproduce or inspect enough evidence, say so and list exactly what artifact is needed.
- Do not change files. If a temporary command creates artifacts, place them in OS temp or clean them up before finishing.
- Do not treat "先看看/先判断/先查一下" plus an edit-withholding phrase as permission to patch. Wait for explicit fix authorization such as "可以改了", "开始修", or "按方案改".
- Explicit edit-withholding wording such as "diagnose only", "只诊断", or "不要改" overrides nearby ambiguous repair language. It forbids the follow-on fix; report the diagnosis and return control.
- Apply natural-language precedence before acting: explicit withholding always remains read-only; without withholding, explicit mutation such as "重新对齐", "更新并修复", "对齐并修复", "确认后更新", or "修正这个理解" routes directly to
$cotend-semantic-alignment; otherwise evaluative wording outranks generic "理解对齐" / "语义对齐" and stays here. - Do not leak secrets in the report; redact paths or values when needed.
- Classify the likely cause as
technical,semantic_drift,mixed, orinsufficient_evidence. Do not force a semantic explanation onto an ordinary reproducible bug. - For
semantic_driftormixed, classify scope before authorization: a full-project check remains full-project read-only, while a named-feature check stays local. Compare latest user-confirmed intent, original idea evidence, historical AI inference/proposals, current Plan Tree/requirements, and actual product behavior as separate surfaces. Code and AI-written documents show what exists; they do not prove what the user wanted. - Never update semantic authority, Plan Tree, requirements, decision records, or source code during diagnosis. A proposed L0-L2 correction remains
pending_user_confirmationand hands off to$cotend-semantic-alignmentonly after explicit user authorization. - When the user asks about decision-relevant delivery-state intent for a capability—including completion/availability/integration/readiness/activity/end-to-end delivery, implementation/build, working/runnable, landing, or equivalent wording—load
cotend-collaboration/references/acceptance-test-harness.md,cotend-collaboration/references/capability-completion.md, and the uniquecotend.execution-closure.v1shape insemantic-contract-templates.md. In read-only mode, evaluate or reference one exact-scope result without persisting it: preserve stable capability IDs, current semantic/design/implementation/verification basis, direct/proxy limits, necessary dimensions and safe wording. Old packets/results with stale/unknown basis are historical only. Do not copy the derivation here, expand ordinary diagnosis into six axes, or ask the user to confirm L3/L4. - For a native-agent first-response stall, load
cotend-collaboration/references/native-agent-orchestration.md. Classify from evidence asnormal_reasoning_or_queueing | transport_or_connection_stall | completed_receipt_missing | tool_or_process_stall | insufficient_evidence. Inspect available agent/thread status, last activity, transport errors, tool output, process/job state, durable receipts, and workspace/external effects. Do not infer "never executed" from silence. Read-only or proven-idempotent work may restart after the original is stopped or conclusively absent; ambiguous side-effecting work must be reconciled or stopped before retry. Do not impose a universal timeout, retry count, WebSocket/provider setting, or community success claim.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 143 lines · 286 tokens per session scan A e5418942e8c8
cotend-diagnose-only is a skill published in the GitHub repository lhh1301506137/CoTend (2 stars, last pushed 18d ago), licensed Apache-2.0. It adds 286 tokens to every session and 2,136 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systemic-issue-triage
Trigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.
issue-root-resolution
Trigger: root audit, atacar la raíz, issue roots, backlog roots, mechanism map, deletion-driven fix, resolver issues de raíz, close outdated issues. Audit and resolve issue clusters by verified root cause.
rdd-defect-workflow
Trigger: RDD, receipt-driven development, review authority, receipt/lineage, correction/recovery, delivery gate/kill switch, bounded review defects. Guide work.
memstack-development-performance-audit
Use this skill when the user says 'performance audit', 'why is it slow', 'optimize performance', 'page speed', 'Core Web Vitals', 'lighthouse', 'load time', or needs to diagnose and fix frontend or backend performance issues. Do NOT use for code reviews or security audits.
ijfw-debug
Root-cause analysis with hypothesis tracking. Trigger: 'debug', 'broken', 'not working', 'fix this bug', /debug.
ring:searching-code
Forensic code search and analysis with optional Chain of Draft (CoD) ultra-concise mode. Five-phase methodology (clarification, planning, execution, analysis, synthesis) with severity assessment. Use for targeted investigation of specific patterns, bugs, or vulnerabilities. Skip for broad architecture mapping (use…