Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add martin1847/evolab --skill agent-backend-standardgit clone --depth 1 https://github.com/martin1847/evolabWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/martin1847/evolab/agent-backend-standard)<a href="https://agentmods.dev/skills/martin1847/evolab/agent-backend-standard"><img src="https://agentmods.dev/badge/skills/martin1847/evolab/agent-backend-standard/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/martin1847/evolab/agent-backend-standard"><img src="https://agentmods.dev/badge/skills/martin1847/evolab/agent-backend-standard.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00203 | $0.02185 |
| Opus 5 | $0.00102 | $0.01092 |
| Sonnet 5 | $0.00041 | $0.00437 |
| Haiku 4.5 | $0.00020 | $0.00218 |
Grade A, and why
agent-backend-standard scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Backend — 后端工程手册（hub）
agent 时代后端工程规范的集中入口。本文件是目录(ToC):每章一句话 + reference 指针。深度全在 references/,按需读单章,别全量加载。
双层落地:软层 = 本手册(write-time 预防);硬层(CI 门禁 / ruleset / 清扫 bot)归 你的 IaC 仓 / IaC CTO。 粒度:同属"写·评审 agent 后端代码"这一触发的 concern 都在本 hub 作章;独立 skill 仅限触发动词不同者——埋点 →
observability-standard、git →git-workflow-standard、A2A 对外契约 → A2A 对外契约规范(本 hub 交叉引用,不重复)。 TBD 章 = 已占位、待真实素材再写实(不空写通用建议)。
Book I — Foundations
- I-1 何时该建 agent →
references/agent-foundations.md—— simplicity-first 升级路径(单调用→augmented→工作流→agent 循环,实测不够才升);已知步骤用真控制流;停止条件量化不了就别建。 - I-2 架构与控制流 →
references/agent-foundations.md—— 五工作流基元(chaining/routing/parallel/orchestrator-workers/evaluator)、循环四分类(turn/goal/time/proactive)、单 vs 多 agent(artifact handoff 不对话)、上下文工程四处方(just-in-time/compaction/note-taking/sub-agent)。
Book II — Engineering Concerns
- II-3 上下文与 prompt 工程 →
references/prompt-context.md—— 含 prompt 内容生命周期(写死值绑 eval、模型耦合打REVISIT-WHEN)。 - II-4 工具 / 函数设计(ACI) →
references/tool-design.md—— 质量定义="只拿工具能答多跳真问题";描述/示例杠杆大于实现(Tool Search 49→74%、Examples 72→90%);命名空间/token 效率(response_format、~25k 上限、中间结果不过模型可省 98%)/错误为 LLM 而写;有状态 handle 四约束(MCP 2026-07-28)。(交叉引 A2A 对外契约规范) - II-5 记忆 / 状态 / 持久 →
references/state-durability.md—— workflow 首次 runnable / 首个副作用前原子固化 immutable effective-config snapshot(snapshot_id+ digest);step / resume / recovery 只读该 snapshot,缺失 / 损坏 / digest mismatch fail-closed。 - II-6 检索 / RAG / grounding —— chunking、faithfulness、向量弱点。TBD
- II-7 韧性 / 错误 / 幂等 →
references/resilience.md—— 每个外部/LLM/工具调用:超时 + 有界重试 + 幂等 + 熔断 + 池/并发;事件循环不阻塞(async 运行时承重条,五层门禁:lint→测试期检测→staging 阈值→生产 lag 遥测→部署断言)。 - II-8 人在环(HITL)+ resume 安全 →
references/hitl-resume-safety.md—— 可恢复 flow 的 resume 安全:六道闸防御(持久 checkpoint 校验请求 ctx、fail-closed、runtime 层)。clarify/approve 协议交叉引 A2A 对外契约规范。 - II-9 安全 · 护栏 · 生成操作的有界执行 →
references/safety-bounded-execution.md—— 执行不可信生成操作(尤 SQL)的硬边界、安全分层、workflow 迭代上限。
Book III — Operations & Governance
- III-10 评估与测试 →
references/evals.md—— 从 20-50 真实失败起步/两专家同判=好任务/grade outputs not paths;pass^k 非 pass@k、<3pp 差距不当能力差;judge 用 Kappa 校准+多 judge 一致门+Unknown 逃生口;威胁模型=被测物会作弊(reward hacking);MCP server eval 形态(10 多跳问题+字符串比对)。 - III-11 可观测与成本 / 时延 →
references/observability-cost.md—— 薄:成本/token/时延预算;埋点本体交叉引observability-standard,不重复。 - III-12 规范治理 →
references/governance.md—— 例外/偏离、owner、手册如何演化。
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/agent-foundations.md 2.3 KB
- references/caching-discipline.md 3.9 KB
- references/code-dependency-lifecycle.md 9.1 KB
- references/data-write-discipline.md 8.0 KB
- references/engineering-interface.md 10 KB
- references/evals.md 2.6 KB
- references/governance.md 2.7 KB
- references/hitl-resume-safety.md 2.7 KB
- references/observability-cost.md 1.2 KB
- references/prompt-context.md 1.6 KB
- references/resilience.md 3.9 KB
- references/safety-bounded-execution.md 4.5 KB
- references/secrets-discipline.md 3.0 KB
- references/selfcheck-gates.md 4.4 KB
- references/state-durability.md 2.6 KB
- references/tool-design.md 2.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 44 lines · 203 tokens per session scan A 8f54f5f4e17f
agent-backend-standard is a skill published in the GitHub repository martin1847/evolab (6 stars, last pushed today), licensed MIT. It adds 203 tokens to every session and 2,185 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
spring-boot-patterns
Spring Boot best practices and patterns. Use when creating controllers, services or repositories, or when the user asks about Spring Boot layering, wiring, configuration or exception handling. For JPA and Hibernate behaviour, use jpa-patterns instead.
api-contract-review
Review REST API contracts for HTTP semantics, versioning, backward compatibility, and response consistency. Use when user asks "review API", "check endpoints", "REST review", or before releasing API changes.
continuum-tools-mcp
Connect MCP servers (Stdio/SSE/StreamableHTTP) to a Continuum agent, configure tool filtering, set up tool-context capture/injection (e.g. sessionid), and read run artifacts (UI widgets, structured tool data). Invoke when the user asks "connect MCP", "filesystem tool", "remote API tool", "auto-capture sessionid"…
posthog
Complete guide for the PostHog plugin — REST API access for querying analytics with HogQL, managing feature flags, inspecting events and persons, reading insights, experiments, cohorts, surveys, and more.
github
Complete guide for the GitHub plugin — REST API access for repositories, issues, pull requests, actions, releases, and search using a GitHub Personal Access Token.
supabase
Complete guide for the Supabase plugin — Management API access for running SQL queries, listing projects, managing edge functions, secrets, migrations, and inspecting project health.