agentmods.dev

lobu-operator

lobu-operator is a skill for Claude Code, Codex from lobu-ai/lobu. It costs 0 tokens per session (1,085 once invoked), scanned A, original, Apache-2.0.

A development guide for contributing to the Lobu monorepo, a repository that contains multiple related packages. It covers worktrees, package rules, testing, pull requests, and rollout checks.

In plain words
What is it for?
Use it when fixing bugs or adding features in Lobu, including changes involving its SDK, automations, connectors, or agent and skill configuration.
Why use it?
It provides the repository-specific steps and documents needed to make changes safely and verify them across the affected workflow.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions CLAUDE.md; mentions AGENTS.md.

not rated 230repo +2 changed 4d ago A scan SkillSpector: warn 0 tokens original Apache-2.0

Good fit Use it when fixing bugs or adding features in Lobu, including changes involving its SDK, automations, connectors, or agent and skill configuration.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/lobu-ai/lobu/lobu-operator
View source ↗ lobu-ai/lobu lobu.ai
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add lobu-ai/lobu --skill lobu-operator
Clone the repo
git clone --depth 1 https://github.com/lobu-ai/lobu

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for lobu-operator

README.md
[![agentmods](https://agentmods.dev/badge/skills/lobu-ai/lobu/lobu-operator/github.svg)](https://agentmods.dev/skills/lobu-ai/lobu/lobu-operator)
Your own site
<a href="https://agentmods.dev/skills/lobu-ai/lobu/lobu-operator"><img src="https://agentmods.dev/badge/skills/lobu-ai/lobu/lobu-operator/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for lobu-operator

Your own site · 80×15
<a href="https://agentmods.dev/skills/lobu-ai/lobu/lobu-operator"><img src="https://agentmods.dev/badge/skills/lobu-ai/lobu/lobu-operator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,085 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Memory Poisoning · line 32
    Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
    Fix: Protect agent memory and state from modification by untrusted content. Use read-only memory for critical instructions and validate all state changes.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01085
Opus 5.5 $0.00000 $0.00434
Sonnet 5.5 $0.00000 $0.00217
Haiku 4.5 $0.00000 $0.00109

Measured 4d ago against content hash b5b59610b0e7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

lobu-operator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/lobu-operator/SKILL.md · 69 lines

How it starts

The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Lobu Operator — Repo Guide

This is a fast index, not a replacement for repository instructions. Root AGENTS.md and the nearest package AGENTS.md are authoritative; CLAUDE.md includes the root rules for Claude sessions.

Before You Act

  1. Read root AGENTS.md, the touched package's nearest AGENTS.md, and the relevant docs/GOTCHAS.md section.
  2. Read the concept docs before touching automation: docs/CONCEPTS.md (entities vs events, identity, end-to-end lifecycle), docs/AUTOMATIONS.md (Automation contract), docs/connector-authoring.md (custom connectors), docs/README.md (index).
  3. Run make task-setup NAME=<slug> and work only in the resulting .claude/worktrees/<slug>/ directory. Never switch branches or edit in the main checkout.
  4. Read lobu.config.ts when configuration or runtime semantics matters; inspect the active agent and skill directories because composition is data-driven.
  5. Reproduce a bug before changing code. Capture red→fix→green evidence and exercise every branch touched; a typecheck alone is not completion.

Dev Workflow

make task-setup NAME=<slug>
cd .claude/worktrees/<slug>
make dev                  # gateway + workers + Vite on the allocated port
make clean-workers        # reap an orphaned gateway from a crashed dev run

Prerequisites are Bun, the supported Node version, and Postgres with pgvector via DATABASE_URL. make dev uses the shared local Postgres; make dev-embedded uses per-worktree embedded Postgres. Read .env.local for the allocated ports.

Correctness Invariants

  • Design for at least three replicas. Shared required state and cross-pod signals belong in Postgres, never a process-local singleton or Map.
  • events is append-only. Replace or hide records with superseding/tombstone events; never delete history.
  • User-facing reads must not aggregate growing history. Materialize bounded answers on writes and read them back by index.
  • Never bulk-delete production organizations. Treat apparently empty organizations as real signups requiring individual confirmation.
  • Workers receive placeholders/proxied access, device-pinned credentials, or short-lived provider-derived leases—never durable stored credentials.
  • Agent-facing vocabulary always says Automation; engine-only vocabulary stays internal.
  • Durable dispatch and delivery failures fail closed. Retry, defer, or surface terminal failure; never reinterpret an ambiguous coordination error as permission to proceed.

Read the full file on GitHub · 69 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed b5b59610b0e7
  2. 1mo ago Changed 18abb572066f
  3. 1mo ago First seen · 69 lines · 0 tokens per session scan A 19a095f34b85

Subscribe to this mod's changes

lobu-operator is a skill published in the GitHub repository lobu-ai/lobu (230 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,085 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Git and workflowagentagent-infrastructurechatbotclawdbotopenclawpersonal-assistant
Related

Other skills, from other repositories

github

Manage GitHub issues and pull requests, inspect CI runs, and query repository data.

HKUDS/nanobot · 19 tokens

contribute-spec-fix

Fix a broken OpenAPI spec in jentic-public-apis with an OpenAPI Overlay, validate it (spectral lint + idempotency check), and contribute it back via a PR to the community catalog. Falls back to applying the same overlay to the local Jentic registry if the user can't wait for maintainer approval, and closes the loop by…

jentic/jentic-one · 138 tokens

github

A writing guide for GitHub issues, pull requests, code reviews, and release notes in Zhin projects. GitHub is a service where teams track bugs, discuss changes, review code, and publish project updates.

zhinjs/zhin · 58 tokens

github-cli

A command-line tool connection for GitHub tasks that built-in tools do not cover. It uses GitHub's command-line program to work with issues, pull requests, releases, workflows, searches, and the GitHub API.

zhinjs/zhin · 30 tokens

worktree-isolate

A workflow for doing risky or experimental changes in an isolated Git worktree, which is a separate working copy of the same repository. The changes can then be merged into the main checkout or discarded.

open-octo/octo-agent · 91 tokens

github-repository

A GitHub repository workflow skill for preparing a workspace, applying file patches, pushing a branch, and creating a pull request. A pull request is a proposed code change submitted for review before it is merged.

zhinjs/zhin · 23 tokens