Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/lukasrepublic/agentic-foundry/id-baselinenpx skills add lukasrepublic/agentic-foundry --skill id-baselinegit clone --depth 1 https://github.com/lukasrepublic/agentic-foundryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lukasrepublic/agentic-foundry/id-baseline)<a href="https://agentmods.dev/skills/lukasrepublic/agentic-foundry/id-baseline"><img src="https://agentmods.dev/badge/skills/lukasrepublic/agentic-foundry/id-baseline.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00191 | $0.02455 |
| Opus 5 | $0.00096 | $0.01228 |
| Sonnet 5 | $0.00038 | $0.00491 |
| Haiku 4.5 | $0.00019 | $0.00246 |
Grade A, and why
id-baseline scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
id-baseline — read-only adopt-existing-IaC craft (infra-delivery step 2, ★ entry mode)
The infra-delivery step sequence (a documented procedure this skill family forms — no workflow engine or state-machine file ships) drives an infra change → merge. Step 2 has four entry modes, one
per starting condition. id-baseline is the entry mode for "an IaC repo already exists" — the
operator points at an existing OpenTofu/Terraform repo and adopts it. Unlike id-import
(greenfield — codify live infra that has NO IaC), id-baseline adopts an existing repo and
validates it is drift-free against the live environment. The procedure the generic agent
runs: point at the existing IaC root, resolve the active stack profile, run the acceptance
seam infra_binding.plan read-only and require the plan empty, then produce the
drift-free / drift REPORT and record the observation. The acceptance seam is
tofu plan == ∅ — an empty plan means the IaC equals reality (the adoption is clean, which
doubles as the forever drift check). It NEVER applies and NEVER auto-reconciles — adoption
is read-only validation, proven by the empty diff; drift is surfaced, never fixed.
ADVISORY — not a gate, no machine-adjudicated GREEN verdict
This skill is ADVISORY. It produces a baseline/drift report + a .foundry/-partitioned drift
step-report note; it does NOT gate, approve, or block any merge. Crucially, adoption
VALIDATES — it is not a change being delivered through a merge process — so id-baseline does
NOT claim a machine-adjudicated GREEN verdict (mirroring id-verify/id-plan, which are advisory
and not-self-certified). The empty-plan signal is the REPORT (drift-free / drift), recorded as a
plain step-report note for the operator + the id-drift/id-rollback consumers — NOT an
automated PASS. Honest disclosure: the bespoke emit_infra_walk_evidence recorder this note used
to be written through does not exist in scripts/ — retired.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 125 lines · 191 tokens per session scan A 95825d5f0bf5
id-baseline is a skill published in the GitHub repository lukasrepublic/agentic-foundry (1 stars, last pushed today), licensed MIT. It adds 191 tokens to every session and 2,455 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
researcher
Delegate a deep research or survey task to Google's Antigravity CLI (agy staffer, fast Gemini). Use when the user says /agy:researcher, "ask agy to research", "have the agy staffer survey X", or wants a second, independent deep-dive on a topic or codebase without spending the host model's quota.
OCR Review-to-Approval Loop
Drive a PR to an approved code review by looping OCR's multi-agent review and address steps. Runs /ocr:review then /ocr:address repeatedly until the review verdict is APPROVE, then one final /ocr:address for leftover suggestions, posting every review and every address round to the GitHub PR as comments. Use when the…
outsystems-mcp
You are connected to OutSystems over the MCP HTTP transport. OutSystems is a cloud-native low-code platform where apps are built from OML (OutSystems Model Language), a binary format describing entities, screens, actions, and logic. Every tool call carries the harness's validated OAuth bearer; tenant + user identity…
writing-javascript
How browser JavaScript is written in this repo — both surfaces now speak one modern dialect and this says what that means for the code you type, where ES modules are impossible and where they are merely unused, and how to pick a feature (Baseline plus a file:// gate). Covers functional idiom over imperative DOM work…
writing-python
How Python is written in this repo — free functions over classes, structured returns instead of mutated arguments, comprehensions, no module state, and the stdlib-only, annotation-free, Python 3.8 dialect the AST lints enforce. Covers modular structure and the import-layer rule, DRY without copying a helper into a…
dora-expert
DORA expert for EU financial entities. Deep knowledge of Digital Operational Resilience Act including 5 pillars, ICT risk management, incident reporting, resilience testing, third-party oversight, and information sharing for financial sector digital resilience.