Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add MauricioPerera/KDD --skill delegar-pool-ccddgit clone --depth 1 https://github.com/MauricioPerera/KDDWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mauricioperera/kdd/delegar-pool-ccdd)<a href="https://agentmods.dev/skills/mauricioperera/kdd/delegar-pool-ccdd"><img src="https://agentmods.dev/badge/skills/mauricioperera/kdd/delegar-pool-ccdd/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mauricioperera/kdd/delegar-pool-ccdd"><img src="https://agentmods.dev/badge/skills/mauricioperera/kdd/delegar-pool-ccdd.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 11 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.01555 |
| Opus 5 | $0.00063 | $0.00777 |
| Sonnet 5 | $0.00025 | $0.00311 |
| Haiku 4.5 | $0.00013 | $0.00155 |
Grade A, and why
delegar-pool-ccdd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Delegar UNA tarea a pool exec con CCDD gate
Capa mínima sobre delegar-pool (mecánica de
lanzamiento/logs/anti-riesgo, agnóstica a la tarea) + el contrato CCDD
definido en
kdd-okf-ccdd-hybrid
(7 secciones + frontmatter, si el repo usa KDD). Esta skill NO reescribe esos
dos — solo fija el flujo de delegar UNA tarea suelta a pool y agrega lo
verificado en vivo (2026-07-26, Python y Rust) que es específico de pool
como implementador.
Rol (inviolable)
- Yo NO implemento. Interpreto el pedido, lo traduzco a un TASK-CONTRACT
con tests congelados, delego a
pool exec --unsafe-auto-allowvíadelegar-pool, y verifico el resultado yo mismo (nunca me fío del exit code ni del resumen final depool). - Recibir → contrato + tests → un solo comando de delegación → verificar → reportar → pedir la siguiente decisión.
Cómo delegar
- Redactar el TASK-CONTRACT (formato
kdd-okf-ccdd-hybrid: front-matter + 7 secciones) y los property-tests congelados en el mismo turno, ANTES de invocarpool. - Validar el contrato con
lint_task_contract(contract_text, test_code)hasta{"ok": true}— corregir yo el contrato, no delegarle eso apool. - Hashear (
sha256) el archivo de tests congelado y guardarlo. Crear en disco el target (stub vacío o implementación previa con bug, según el caso) y el archivo de tests ANTES de invocarpool. - Delegar con el comando base de
delegar-pool(--unsafe-auto-allowSIEMPRE,-d <dir>apuntando exactamente al directorio de la tarea — doble-chequear esa ruta, un-dmal apuntado escribe en el lugar equivocado sin aviso). El prompt le pide correr eltest_commandprimero (no asumir que pasa) y iterar SOLO sobre el target si falla. - Verificar yo mismo: re-hashear los tests (deben ser idénticos), correr el
test_commandde forma independiente, y si el repo tiene gate CCDD real corrermeasure_complexity+check_signaturesobre el código final (Python vía AST nativo, Rust/otros vía tree-sitter conlanguage: <lang>en la llamada).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 95 lines · 127 tokens per session scan A fa78bdcfb71f
delegar-pool-ccdd is a skill published in the GitHub repository MauricioPerera/KDD (7 stars, last pushed 2d ago), licensed MIT. It adds 127 tokens to every session and 1,555 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
kotlin-testing
Kotlin testing patterns with Kotest, MockK, coroutine testing, property-based testing, and Kover coverage. Follows TDD methodology with idiomatic Kotlin practices.
tdd-workflow
Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.
react-testing
React component testing with React Testing Library, Vitest/Jest, MSW for network mocking, accessibility assertions with axe, and the decision boundary between component tests and Playwright/Cypress end-to-end runs. Use when writing or fixing tests for React components, hooks, or pages.
cpp-testing
Use only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding coverage/sanitizers.
python-testing
Python testing best practices using pytest including fixtures, parametrization, mocking, coverage analysis, async testing, and test organization. Use when writing or improving Python tests.
react-patterns
React 18/19 patterns including hooks discipline, server/client component boundaries, Suspense + error boundaries, form actions, data fetching, state management decision trees, and accessibility-first composition. Use when writing or reviewing React components.