deprecate

deprecate is a skill for Claude Code from mehrad-dm/mastermind. It costs 97 tokens per session (1,339 once invoked), scanned A, original, MIT.

A planned process for retiring an old feature, API, database column, configuration key, package, or service. It adds the replacement, moves users to it, and removes the old part after nothing depends on it.

In plain words
What is it for?
Use it to migrate callers from an old API or version, check whether supposedly unused code is still used, and safely remove obsolete system parts.
Why use it?
It reduces the risk of breaking hidden users or consumers that still read the old interface.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the mastermind plugin — 23 skills, 4 agents, 1 hook shipped together

Good fit Use it to migrate callers from an old API or version, check whether supposedly unused code is still used, and safely remove obsolete system parts.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/mehrad-dm/mastermind/deprecate
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add mehrad-dm/mastermind --skill deprecate
Clone the repo
git clone --depth 1 https://github.com/mehrad-dm/mastermind

Made for: Claude Code.

Or install mastermind, the plugin that ships this one along with the rest of its 23 skills, 4 agents, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for deprecate

README.md
[![agentmods](https://agentmods.dev/badge/skills/mehrad-dm/mastermind/deprecate.svg)](https://agentmods.dev/skills/mehrad-dm/mastermind/deprecate)
Your own site
<a href="https://agentmods.dev/skills/mehrad-dm/mastermind/deprecate"><img src="https://agentmods.dev/badge/skills/mehrad-dm/mastermind/deprecate.svg" alt="Measured on agentmods" height="20"></a>
Per session 97 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,339 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Rogue Agent · line 26
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00097 $0.01339
Opus 5 $0.00048 $0.00669
Sonnet 5 $0.00019 $0.00268
Haiku 4.5 $0.00010 $0.00134

Measured 8d ago against content hash 086094e08754, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

deprecate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/deprecate/SKILL.md · 98 lines

How it starts

The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MasterMind: Deprecate

Every other skill adds or fixes. This one deletes, migrates and retires: the half of engineering where the reward (a smaller system) arrives long after the risk, and where what breaks is whatever you couldn't see was still reading it.

The shape: expand → migrate → contract

Any removal that can't land in one atomic commit takes three phases, in this order, each shipped on its own:

  • Expand: add the new thing beside the old. Both work. Nothing has moved yet, and stopping here breaks nothing.
  • Migrate: move consumers in batches sized by blast radius: one caller at a time where a mistake pages someone, a whole service where it doesn't. Verify each batch before starting the next.
  • Contract: remove the old, once nothing reads it.

Renaming users.email_addr to users.email on a live system, as five deploys:

1  add `email` · backfill · write both · still read `email_addr`   ← expand, fully reversible
2  read `email` · keep writing both                                ← the only behavior change; watch it
3  move every caller off `email_addr`, batch by service            ← migrate
4  stop writing `email_addr` · leave the column for one rollback window
5  drop the column                                                 ← contract

Each line deploys and reverts on its own; the sequence is the safety. Collapse any two and you get the classic outage: during a rolling deploy both versions run at once, so the instance that hasn't restarted yet is still writing to the column you just dropped.

Prove it's unused: never assert it

Never contract on a search you didn't run, and never treat one symbol search as the answer. "Nothing references it" is a claim about the whole system, and the places that break are the ones a symbol search can't see: config and environment, infra and CI, docs, runbooks and dashboards, other repos and clients you don't build, and every dynamic reference: a name assembled from a string, reflection, a container registration, a route table, a serialized payload, a stored default, an analytics event name. Search for the spelling, everywhere it could be written, not the identifier inside one tree.

Read the full file on GitHub · 98 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 98 lines · 0 tokens per session scan A 086094e08754

Subscribe to this mod's changes

deprecate is a skill published in the GitHub repository mehrad-dm/mastermind (24 stars, last pushed 8d ago), licensed MIT. It adds 97 tokens to every session and 1,339 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.