Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/lukasrepublic/agentic-foundry/id-discovernpx skills add lukasrepublic/agentic-foundry --skill id-discovergit clone --depth 1 https://github.com/lukasrepublic/agentic-foundryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lukasrepublic/agentic-foundry/id-discover)<a href="https://agentmods.dev/skills/lukasrepublic/agentic-foundry/id-discover"><img src="https://agentmods.dev/badge/skills/lukasrepublic/agentic-foundry/id-discover.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00177 | $0.02262 |
| Opus 5 | $0.00088 | $0.01131 |
| Sonnet 5 | $0.00035 | $0.00452 |
| Haiku 4.5 | $0.00018 | $0.00226 |
Grade A, and why
id-discover scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
id-discover — read-only everyday-change survey craft (infra-delivery step 2, ★ entry mode)
The infra-delivery step sequence (a documented procedure this skill family forms — no workflow engine or state-machine file ships) drives an infra change → merge. Step 2 has four entry modes, one
per starting condition. id-discover is the everyday-change default — the entry mode for
"a baseline already exists and you're making a routine change." Unlike the three onboarding modes
that establish a baseline — id-import (greenfield — codify live infra that has NO IaC),
id-baseline (adopt an existing IaC repo + validate it drift-free), id-architect (forward-design a
topology) — id-discover assumes a baseline and surveys the change: a read-only inventory
of the target infra (the relevant IaC roots, the in-scope live resources) plus the change surface
the intended change touches, so the downstream spine (id-implement → id-validate → id-plan → id-impact)
starts idiom-faithful and correctly scoped. It is the infra analog of the sd-discover brownfield
survey — same role at the same SDLC position (survey BEFORE implement) over infra instead of an
application codebase. It NEVER mutates — discovery is read-only inventory; it does not apply,
scaffold, or reconcile.
ADVISORY — not a gate, no machine-adjudicated GREEN verdict
This skill is ADVISORY. It produces a change-scope report + a .foundry/-partitioned survey
step-report note; it does NOT gate, approve, or block any merge. Crucially, discovery is a
SURVEY — it is not a change being delivered through a merge process — so id-discover does NOT
claim a machine-adjudicated GREEN verdict (mirroring id-baseline/id-verify/id-plan, which are
advisory and not-self-certified). The change-scope report is the survey output — the inventoried
roots/resources + the scoped change surface — recorded as a plain step-report note for the operator
- the downstream
id-implement/id-plan/id-impactconsumers, NOT an automated PASS. Honest disclosure: the bespokeemit_infra_walk_evidencerecorder this note used to be written through does not exist inscripts/— retired.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 117 lines · 177 tokens per session scan A 66e3b233f354
id-discover is a skill published in the GitHub repository lukasrepublic/agentic-foundry (1 stars, last pushed yesterday), licensed MIT. It adds 177 tokens to every session and 2,262 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
OCR Review-to-Approval Loop
Drive a PR to an approved code review by looping OCR's multi-agent review and address steps. Runs /ocr:review then /ocr:address repeatedly until the review verdict is APPROVE, then one final /ocr:address for leftover suggestions, posting every review and every address round to the GitHub PR as comments. Use when the…
outsystems-mcp
You are connected to OutSystems over the MCP HTTP transport. OutSystems is a cloud-native low-code platform where apps are built from OML (OutSystems Model Language), a binary format describing entities, screens, actions, and logic. Every tool call carries the harness's validated OAuth bearer; tenant + user identity…
writing-javascript
How browser JavaScript is written in this repo — both surfaces now speak one modern dialect and this says what that means for the code you type, where ES modules are impossible and where they are merely unused, and how to pick a feature (Baseline plus a file:// gate). Covers functional idiom over imperative DOM work…
writing-python
How Python is written in this repo — free functions over classes, structured returns instead of mutated arguments, comprehensions, no module state, and the stdlib-only, annotation-free, Python 3.8 dialect the AST lints enforce. Covers modular structure and the import-layer rule, DRY without copying a helper into a…
dora-expert
DORA expert for EU financial entities. Deep knowledge of Digital Operational Resilience Act including 5 pillars, ICT risk management, incident reporting, resilience testing, third-party oversight, and information sharing for financial sector digital resilience.
codebase-navigator
Deep structural codebase comprehension, AST dependency graph traversal, symbol caller/callee tracing, and monorepo navigation strategies for massive codebases.