Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add MerkyorLynn/Lynn --skill proactive-agentgit clone --depth 1 https://github.com/MerkyorLynn/LynnWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/merkyorlynn/lynn/proactive-agent)<a href="https://agentmods.dev/skills/merkyorlynn/lynn/proactive-agent"><img src="https://agentmods.dev/badge/skills/merkyorlynn/lynn/proactive-agent.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium System Prompt Leakage · line 40 Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.Fix: Guard against indirect extraction by refusing to summarize, translate, or rephrase system instructions. Add explicit anti-extraction clauses.
- medium System Prompt Leakage · line 79 Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.Fix: Guard against indirect extraction by refusing to summarize, translate, or rephrase system instructions. Add explicit anti-extraction clauses.
- medium System Prompt Leakage · line 546 Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.Fix: Guard against indirect extraction by refusing to summarize, translate, or rephrase system instructions. Add explicit anti-extraction clauses.
- medium Excessive Agency · line 301 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
- medium Excessive Agency · line 512 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.04901 |
| Opus 5 | $0.00023 | $0.02450 |
| Sonnet 5 | $0.00009 | $0.00980 |
| Haiku 4.5 | $0.00005 | $0.00490 |
Grade A, and why
proactive-agent scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
3. Look for shell commands, curl/wget, or data exfiltration patterns Copies of this mod
2 near-identical copies found in the catalogue:
- proactive-agent — 100% identical, 0 lines differ
- proactive-agent — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 633 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Proactive Agent 🦞
By Hal Labs — Part of the Hal Stack
A proactive, self-improving architecture for your AI agent.
Most agents just wait. This one anticipates your needs — and gets better at it over time.
What's New in v3.1.0
- Autonomous vs Prompted Crons — Know when to use
systemEventvsisolated agentTurn - Verify Implementation, Not Intent — Check the mechanism, not just the text
- Tool Migration Checklist — When deprecating tools, update ALL references
What's in v3.0.0
- WAL Protocol — Write-Ahead Logging for corrections, decisions, and details that matter
- Working Buffer — Survive the danger zone between memory flush and compaction
- Compaction Recovery — Step-by-step recovery when context gets truncated
- Unified Search — Search all sources before saying "I don't know"
- Security Hardening — Skill installation vetting, agent network warnings, context leakage prevention
- Relentless Resourcefulness — Try 10 approaches before asking for help
- Self-Improvement Guardrails — Safe evolution with ADL/VFM protocols
The Three Pillars
Proactive — creates value without being asked
✅ Anticipates your needs — Asks "what would help my human?" instead of waiting
✅ Reverse prompting — Surfaces ideas you didn't know to ask for
✅ Proactive check-ins — Monitors what matters and reaches out when needed
Persistent — survives context loss
✅ WAL Protocol — Writes critical details BEFORE responding
✅ Working Buffer — Captures every exchange in the danger zone
✅ Compaction Recovery — Knows exactly how to recover after context loss
Self-improving — gets better at serving you
✅ Self-healing — Fixes its own issues so it can focus on yours
✅ Relentless resourcefulness — Tries 10 approaches before giving up
✅ Safe evolution — Guardrails prevent drift and complexity creep
Contents
- Quick Start
- Core Philosophy
- Architecture Overview
- Memory Architecture
- The WAL Protocol ⭐ NEW
- Working Buffer Protocol ⭐ NEW
- Compaction Recovery ⭐ NEW
- Security Hardening (expanded)
- Relentless Resourcefulness
- Self-Improvement Guardrails
- Autonomous vs Prompted Crons ⭐ NEW
- Verify Implementation, Not Intent ⭐ NEW
- Tool Migration Checklist ⭐ NEW
- The Six Pillars
- Heartbeat System
- Reverse Prompting
- Growth Loops
What ships with it
13 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- _meta.json 134 B
- assets/AGENTS.md 3.8 KB
- assets/HEARTBEAT.md 2.9 KB
- assets/MEMORY.md 836 B
- assets/ONBOARDING.md 2.4 KB
- assets/SOUL.md 1.4 KB
- assets/TOOLS.md 1.0 KB
- assets/USER.md 926 B
- references/onboarding-flow.md 4.0 KB
- references/security-patterns.md 3.0 KB
- scripts/security-audit.sh 4.0 KB runs code
- SKILL-v2.3-backup.md 20 KB
- SKILL-v3-draft.md 17 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 633 lines · 46 tokens per session scan A 571521d9f6f3
proactive-agent is a skill published in the GitHub repository MerkyorLynn/Lynn (42 stars, last pushed 2d ago), licensed Apache-2.0. It adds 46 tokens to every session and 4,901 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cua-driver
Drive a native GUI app (macOS, Windows, Linux) via the Qwen Cua Driver CLI (default) or MCP server; snapshot its accessibility tree, act through snapshot-bound element tokens, native menu paths, exact window geometry, or pixel coordinates, and verify from fresh state. Use when the user asks you to operate, drive…
codegraph
Analyze indexed codebases via graph database (neug) and vector index (zvec). Covers call graphs, dependencies, dead code, hotspots, module coupling, architecture reports, semantic search, impact analysis, bug root cause from GitHub issues, class diagrams (UML), and PR review (risk scoring, conflict detection…
stuck
Diagnose frozen, stuck, or slow Qwen Code sessions on this machine. Scans for problematic processes, high CPU/memory usage, hung subprocesses, and debug logs. Use /stuck or /stuck to focus on a specific process.
e2e-testing
Guide for running end-to-end tests of the Qwen Code CLI, including headless mode, MCP server testing, and API traffic inspection. Use this skill whenever you need to verify CLI behavior with real model calls, reproduce user-reported bugs end-to-end, test MCP tool integrations, or inspect raw API request/response…
structured-debugging
Hypothesis-driven debugging methodology for hard bugs. Use this skill whenever you're investigating non-trivial bugs, unexpected behavior, flaky tests, or tracing issues through complex systems. Activate proactively when debugging requires more than a quick glance — especially when the first attempt at a fix didn't…
terminal-capture
Automates terminal UI screenshot testing for CLI commands. Applies when reviewing PRs that affect CLI output, testing slash commands (/about, /context, /auth, /export), generating visual documentation, or when 'terminal screenshot', 'CLI test', 'visual test', or 'terminal-capture' is mentioned.