Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add melodic-software/claude-code-plugins --skill audit-progressive-disclosuregit clone --depth 1 https://github.com/melodic-software/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/melodic-software/claude-code-plugins/audit-progressive-disclosure)<a href="https://agentmods.dev/skills/melodic-software/claude-code-plugins/audit-progressive-disclosure"><img src="https://agentmods.dev/badge/skills/melodic-software/claude-code-plugins/audit-progressive-disclosure/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/melodic-software/claude-code-plugins/audit-progressive-disclosure"><img src="https://agentmods.dev/badge/skills/melodic-software/claude-code-plugins/audit-progressive-disclosure.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00113 | $0.03977 |
| Opus 5.5 | $0.00045 | $0.01591 |
| Sonnet 5.5 | $0.00023 | $0.00795 |
| Haiku 4.5 | $0.00011 | $0.00398 |
Grade A, and why
audit-progressive-disclosure scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 203 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Repository context. Gather first
Collect these with individual Bash calls, one command per call, never combined into a single invocation:
- Current branch,
git branch --show-current - Uncommitted .md files (sample, first 10; empty = none matched or the probe returned nothing),
git status --porcelain | grep -E '\.md"?$' | head -10
The pipe is the bound and belongs in the command. A read-time cap ("read only the first 10 entries") bounds nothing: the Bash tool returns the command's complete output into context before there is anything to decide about.
Treat a failure (not a repository, git unavailable) as an unknown value and carry on. Keep these as
separate body Bash calls rather than pre-compute lines: the harness runs a skill's whole pre-compute
block as one shell invocation, and a worktree-isolated session refuses a compound command that
contains git. The dated record for that composition claim is the source-control plugin's
worktree/reference/gather-block.md,
"The pre-compute block runs as one shell invocation".
Purpose
Agent-facing instruction markdown, CLAUDE.md/AGENTS.md, .claude/rules/, skill/agent/command
bodies, their bundled spokes, has a load cost set by its tier: always-loaded content is paid
every session, invocation-loaded content recurs for the rest of the session once triggered, and
on-demand content is free until read. This skill audits both directions of that economy: content
that should move DOWN a tier (split opportunities), and existing hub/spoke structures whose
pointers no longer let an agent pull exactly the file it needs (structure defects). It is a
read-only classifier: findings carry treatment guidance; the author applies every edit.
Full tier tables, official numbers, split triggers, and pointer-quality criteria: read context/tier-model.md when adjudicating any finding that needs the exact threshold, routing rule, or citation posture (Anthropic-prescribed vs corroborated vs community).
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- context/tier-model.md 14 KB
- evals/evals.json 8.5 KB
- evals/fixtures/broken-skill/context/details.md 93 B
- evals/fixtures/broken-skill/context/queries.md 90 B
- evals/fixtures/broken-skill/context/scratch-notes.md 99 B
- evals/fixtures/broken-skill/SKILL.md 218 B
- evals/fixtures/healthy-skill/reference/redlining-rules.md 274 B
- evals/fixtures/healthy-skill/SKILL.md 559 B
- evals/fixtures/mixed-instructions.md 1.5 KB
- evals/fixtures/synced-rule/.claude/rules/pr-body-contract.md 336 B
- evals/fixtures/synced-rule/docs/adr/0007-pr-body-rule-always-loaded.md 316 B
- evals/fixtures/synced-rule/README.md 302 B
- scripts/detect.sh 15 KB runs code
- scripts/detect.test.sh 14 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +1 lines 174db8c0f8e1
- 12d ago Changed · +1 lines 7ebd5e7bfd5c
- 17d ago Changed · +5 lines 7958de9db9dd
- 20d ago Changed · +15 lines c21338a8d124
- 21d ago Changed · -79 tokens per session 5a3c91f415cd
- 1mo ago Changed · -67 tokens per session d2218df95604
- 1mo ago Changed · +8 lines 4eaeb925fcac
- 1mo ago Changed · +12 lines dce2a4a5299c
- 1mo ago First seen · 161 lines · 259 tokens per session scan A 695b2192b843
audit-progressive-disclosure is a skill published in the GitHub repository melodic-software/claude-code-plugins (26 stars, last pushed today), licensed MIT. It adds 113 tokens to every session and 3,977 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
parallel-orchestrator
Manage parallel Claude Code workstreams using git worktrees. Use when: splitting large tasks across multiple workers, coordinating parallel development, monitoring worker progress, integrating completed work, analyzing work item documents (code reviews, issue lists). Triggers: parallel, orchestrator, worktrees…
parallel-worker
Execute focused implementation tasks in a parallel workflow. Use when: working on assigned files in a worktree, making checkpoint commits, signaling dependencies or blockers, completing orchestrator-assigned tasks. Triggers: worker, checkpoint, worktree, assigned scope, commit prefix, parallel task.
optimize-local-search
For NP-hard optimization: TSP, scheduling, assignment problems. Uses greedy construction + local improvement (2-opt, hill climbing).
solve-constraint-puzzle
For constraint satisfaction: Sudoku, scheduling, N-queens, logic puzzles, SAT-like problems, assignment problems. Uses propagate-then-search pattern.
test-with-examples
For example-driven development: test cases as specifications, input/output pairs, documentation through examples.
validate-before-process
For input validation: check format and constraints before processing, fail fast with clear errors, defensive parsing.