Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lpalbou/AgoraHub --skill coredocgit clone --depth 1 https://github.com/lpalbou/AgoraHubWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lpalbou/agorahub/coredoc)<a href="https://agentmods.dev/skills/lpalbou/agorahub/coredoc"><img src="https://agentmods.dev/badge/skills/lpalbou/agorahub/coredoc/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lpalbou/agorahub/coredoc"><img src="https://agentmods.dev/badge/skills/lpalbou/agorahub/coredoc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00111 | $0.02526 |
| Opus 5 | $0.00056 | $0.01263 |
| Sonnet 5 | $0.00022 | $0.00505 |
| Haiku 4.5 | $0.00011 | $0.00253 |
Grade A, and why
coredoc scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Core Doc
Use this skill to make a repository explain itself clearly to external users, contributors, and tools. Core docs should teach what the package is, how it works, how to use it, and what current limits matter. Write in a professional, positive tone that addresses external readers directly. Prefer faithful, maintainable docs over aspirational prose. If the code and docs disagree, the code wins and the docs must be repaired.
Start With The Right Pass
- If the repo already has documentation, inspect it before writing anything new. Preserve useful structure and tighten drift rather than replacing everything blindly.
- If the repo has no stable doc system, create the core set described in
references/core-doc-set.md. - If the task is mainly about creating or repairing
llms.txtorllms-full.txt, readreferences/llms-files.mdbefore editing. - If the task is broad documentation maintenance, read
references/maintenance-playbook.mdand work through the audit flow. - If the user is preparing or publishing a specific release, prefer the
releaseskill when available. Use this skill for the release's user-facing documentation, changelog, and LLM index updates.
Apply The Operating Rules
- Keep documentation faithful to the current repository. Do not describe features, APIs, or workflows that do not exist.
- Write as if you are speaking to an external user or contributor who needs clear guidance now. Prefer direct phrasing such as "you can", "use", and "see" where it improves clarity. Keep the tone professional, positive, and matter-of-fact rather than defensive, forensic, or self-referential.
- Write external-facing docs for users and contributors, not as project memory or a review of the team's mistakes. Explain current behavior, correct usage, guarantees, limits, and migration impact. Do not include repair narratives such as "the earlier value was bad observability" in README or topic docs. If old behavior matters for compatibility, describe it as a concise migration note without root-cause or blame narrative.
- Avoid time-relative or transition-heavy framing such as "current host", "active redesign path",
"earlier host", "new path", or "now uses" in public docs unless the user explicitly asked for
migration guidance. State the supported product plainly. Put timelines and step-by-step evolution
in
CHANGELOG.md, or in a tightly scoped FAQ entry when a compatibility question genuinely matters to users. - If the product depends on one canonical named workflow, bundle, profile, route, or entrypoint, state that public name directly in the user docs where it affects setup or usage. Do not make readers infer the supported runtime surface from internal file names, ADRs, backlog items, or implementation notes.
- Prefer stable public examples over machine-specific ones. When the CLI supports a stable handle, repo id, relative path, or documented collection-style reference, use that instead of absolute local cache paths, snapshot hashes, home-directory paths, or other machine-specific examples in public docs.
- Do not explain maintainer implementation details in public docs when the user-facing takeaway is
simply that a profile, route, or package now works. Examples that belong in backlog, ADRs,
reports, or
untracked/comments/instead of core docs include whether a package had to be rebuilt, which internal layers were kept at BF16 versus q8, which runtime carve-outs were added, or why an earlier experiment failed. In user docs, say what works, how to run it, what was measured, and what limits still matter. - Every core documentation page must answer stable user or contributor needs, not internal
incidents. This applies to
README.md,CHANGELOG.md, root policy docs,docs/*.md,docs/examples/*.md,llms.txt, andllms-full.txt, not only FAQ pages. Do not add headings, callouts, notes, tables, captions, changelog entries, or example prose like "Why did our previous result...", "What went wrong...", "we discovered...", or "this failed before..." to end-user docs. Convert them into neutral usage guidance such as "How to compare memory measurements" or put the analysis in backlog, ADRs, reports, oruntracked/comments/. - Benchmark, quantization, and performance docs may include exact settings, hardware, command profiles, and metric definitions. They must not include personal commentary, blame, forensic narratives, release-gate drama, or explanations of documentation mistakes. If unrelated benchmark profiles should not be compared, state the supported comparison scope neutrally and keep the diagnostic history out of core docs.
- Do not surface maintainer-only commentary in core docs, including internal validation recipes,
smoke-test instructions, "real model caveat" blocks, debugging narratives, or notes about how
the documentation was generated. If that information matters only to the owner, maintainer, or
developer, write it in
untracked/comments/<timestamp>_<topic>.mdinstead, and keep it out ofREADME.md,CHANGELOG.md,docs/*.md,llms.txt, andllms-full.txt. - Keep the core doc set present even when a section is currently thin. If a doc is not yet applicable, say so explicitly instead of omitting it.
docs/architecture.mdMUST contain at least one diagram that represents the system architecture (components and how they connect). Add further diagrams whenever they help a reader grasp the package quickly — for example a data/message/communication flow, a request lifecycle, a state machine, or a deployment topology. Prefer Mermaid fenced code blocks (```mermaid) so the diagram renders on GitHub and common docs sites and stays diffable in version control; use an image only when a diagram genuinely cannot be expressed in Mermaid, and then commit the source alongside it. Keep diagrams faithful to the current code and labeled so they are understandable without the surrounding prose.- Cross-link documents whenever one is a natural prerequisite, authority, or follow-up for another.
- Keep
docs/README.mdas the index for alldocs/*.mdpages, including topic deep dives. - Treat
docs/<topic>.mdas first-class documentation, not orphan notes. Every topic page should be linked and explained fromdocs/README.md. - Keep the public docs index focused on supported user and contributor guidance. Do not foreground
internal notes, devnotes, backlog artifacts, or historical drafts from
docs/README.mdunless the user explicitly wants maintainer-facing material in the public index. - Keep root docs and
docs/docs aligned. IfREADME.md,docs/getting-started.md, anddocs/architecture.mddisagree, fix the inconsistency in the same pass. - When the repo has ADRs or backlog artifacts, link to them where they materially help readers understand policy, roadmap, or design boundaries.
- Put user-visible release history in
CHANGELOG.md, limited to what changed, who is affected, and any migration or compatibility notes. Put process mistakes, root-cause analysis, and internal cleanup history in backlog, ADRs, reports, or incident notes. Do not let that internal history leak into README or topic docs. - Default the license to MIT when a new repo has no stated license and the user has not requested something else. Use the current year or year range and the best available copyright holder name.
- Verify claims against repository evidence where possible: manifests, package metadata, entry points, CLI help, config files, schemas, examples, tests, and working commands.
- Before finishing any core-doc update, scan the external-facing corpus (
README.md,CHANGELOG.md, root policy docs,docs/*.md,docs/examples/*.md,llms.txt, andllms-full.txt) for incident/postmortem language, including headings, callouts, table notes, image captions, changelog bullets, and examples. Remove or move anything that reads as maintainer memory rather than user guidance.
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 175 lines · 111 tokens per session scan A 759387b4aa7e
coredoc is a skill published in the GitHub repository lpalbou/AgoraHub (2 stars, last pushed 4d ago), licensed MIT. It adds 111 tokens to every session and 2,526 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
task-dependency-patterns
Task Management patterns with TaskCreate, TaskUpdate, TaskGet, TaskList tools. Decompose complex work into trackable tasks with dependency chains. Use when managing multi-step implementations, coordinating parallel work, or tracking completion status.
unit-converter
Converts values between metric and imperial units, using the project's agreed factors.
a2a-mcp-consumption
Configure and consume the bounded A2A Mesh MCP bridge without exposing unrestricted tools, credentials, or network access.
a2a-endpoint-validation
Validate an A2A endpoint, Agent Card, health route, and protocol behavior before using it in an agent workflow.
a2a-task-operations
Send, inspect, monitor, and cancel A2A tasks with explicit approval, bounded retries, and verifiable task evidence.
deploy-docker-compose
Run the Omnigent server as a Docker compose stack (server + Postgres) on any Docker host — your laptop, a VPS, EC2 by hand, or as the base layer of any container-platform deploy. Invoke when the user wants to build the image, bring up the compose stack, debug the stack on a host they already have, or extend the stack…