pack-draft

pack-draft is a skill for Claude Code, Codex from microsoft/cat-agent-skills. It costs 172 tokens per session (2,613 once invoked), scanned A, original, MIT.

A drafting tool that turns approved access and mobilisation outputs into an internal engagement pack, joiner briefing, and first-week plan. It keeps holds and draft labels rather than making new decisions.

In plain words
What is it for?
It is for preparing a reviewable onboarding pack after access checks are complete, including a joiner briefing and first-week plan.
Why use it?
It makes governed onboarding information readable while preserving warnings, withheld content, and review status.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one.

Good fit It is for preparing a reviewable onboarding pack after access checks are complete, including a joiner briefing and first-week plan.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/microsoft/cat-agent-skills/pack-draft
About the project

microsoft/cat-agent-skills is a static website that catalogs reusable instruction sets and related packages for AI agents. People use it to search, filter, rate, and download skills for Cowork, Copilot Studio, and Scout, along with Copilot plugins and Scout automations. The catalogue entries are the skills, instructions, plugins, and settings displayed by the site.

microsoft/cat-agent-skills · 101 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add microsoft/cat-agent-skills --skill pack-draft
Clone the repo
git clone --depth 1 https://github.com/microsoft/cat-agent-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pack-draft

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/cat-agent-skills/pack-draft/github.svg)](https://agentmods.dev/skills/microsoft/cat-agent-skills/pack-draft)
Your own site
<a href="https://agentmods.dev/skills/microsoft/cat-agent-skills/pack-draft"><img src="https://agentmods.dev/badge/skills/microsoft/cat-agent-skills/pack-draft/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for pack-draft

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/cat-agent-skills/pack-draft"><img src="https://agentmods.dev/badge/skills/microsoft/cat-agent-skills/pack-draft.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 172 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,613 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00172 $0.02613
Opus 5.5 $0.00069 $0.01045
Sonnet 5.5 $0.00034 $0.00523
Haiku 4.5 $0.00017 $0.00261

Measured yesterday against content hash cae1c930610d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

pack-draft scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 8 executable files (scripts/access_checklist.py, scripts/contract_validate.py, scripts/knowledge_match.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

submissions/engagement-mobilization-onboarding-pack/skills/pack-draft/SKILL.md · 74 lines

How it starts

The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Pack Draft

Purpose

Turn engine output into a readable internal draft for the engagement manager to review; the engines have already made every decision.

When to use

Last step, after wall-check has written access-checklist.json and mobilization-pack.md. If no access-checklist.json exists yet (a cold "start / build the onboarding pack" request), do not draft: start with engagement-retrieve, which runs the chain.

When NOT to Use

  • Any wall, access, roster or knowledge decision - use wall-check, roster-pull or knowledge-match.
  • Sending the pack to the joiner, team or client - out of scope; the pack is draft-only.
  • Staffing or closeout work - use engagement-staffing-bench-match or engagement-closeout-knowledge-harvest.
  • A generic onboarding guide, template or Word document that is not tied to this engagement's governed outputs - use the built-in docx skill.
  • Word output of this pack: draft the governed Markdown here first, then hand it to docx keeping the DRAFT banner, pack status, holds and [withheld ...] markers unchanged.

Inputs

access-checklist.json and mobilization-pack.md (contract ps.engagement-mobilization-onboarding-pack.v1), plus the raw inputs the chain read (raw directory, staffing input, confirmed roster, Closeout governed.json, wall register and workspace inventory) for the pre-render check.

Steps

  1. Before reading either file, run python3 scripts/verify_render.py --access access-checklist.json --pack mobilization-pack.md --raw-dir <raw> --staffing <staffing.json> --confirmed-roster <raw>/confirmed-roster.csv --closeout <closeout governed.json> --wall-register <raw>/ethical-wall-register.csv --workspace-inventory <raw>/workspace-inventory.csv. It validates the access checklist against its stage contract and hold-evidence rules, re-runs every engine on the raw inputs and refuses an access checklist that differs from the re-derivation in any field (every hold member compared exactly), a pack that differs from the engine's rendering by any byte, or a pack whose rendered lines trip the instruction screen when read in order, citations and IDs included (confidentiality-and-ethical-wall-rules.md #1.4,#4.5). If it exits non-zero, stop: quote the error verbatim, draft nothing and re-run the chain from engagement-retrieve. Draft only from files that passed this check unchanged.
  2. Confirm access-checklist.json exists and the contract version matches (otherwise see Failure handling); if mobilization_pack.status is on_hold_internal_only, the pack is still drafted for internal use: lead with the holds and their citations, render the held draft as internal-only, keep every [withheld ...] marker, never draft or restore content that depends on an open hold, and say it must not be shared with the joiner until the holds clear. The holds are hold_reasons and every open entry in holds. Every engine section is still rendered in order (step 3); anything the engine held stays as its hold line or [withheld ...] marker.
  3. Keep the engine sections and order: client context, scope and exclusions, deliverables and dates, prior-knowledge digest, team roster, access checklist, confidentiality and wall briefing, first-week plan, escalations and holds.
  4. Rephrase for readability only; keep every status, permission, hold, citation and [withheld ...] marker exactly as written. First-week plan items come only from the ## First-week plan lines of mobilization-pack.md; never add or restore items. An item the engine restated as title-and-citation only because it points at pending-review knowledge (by ID, title, any generic "prior knowledge"/"knowledge digest" reference whatever its verb, voice or noun form, or an ID split across adjacent items) stays restated, and a "Continues SOW first-week item N" line stays as written: never restore its SOW wording from scope_summary.first_week_focus or tell the joiner to read that material (knowledge-reuse-rules.md #2.5).
  5. Keep the DRAFT banner. Keep the engine's Proposed, not assigned: <name> for <role> line exactly as rendered: never reword it and never move a proposed name into the confirmed roster lines; pending_practice_review knowledge is referenced by title and citation only. Never write or summarise a Closeout lesson: lessons in excluded_items have no written text yet (knowledge-reuse-rules.md #2.4).
  6. End with the reviewer checklist: resolve holds, confirm wall briefing with Risk/Conflicts, approve access requests, then share internally.

Read the full file on GitHub · 74 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 74 lines · 172 tokens per session scan A cae1c930610d

Subscribe to this mod's changes

pack-draft is a skill published in the GitHub repository microsoft/cat-agent-skills (101 stars, last pushed yesterday), licensed MIT. It adds 172 tokens to every session and 2,613 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-07.

Related

pack-draft compared with skills from other repositories

pack-draft next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
pack-draftmicrosoft/cat-agent-skillsSkill101yesterdayMITA172Claude Code, Codex
imagegenopenai/codexSkill134ktodayApache-2.0A113Codex
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79kyesterdayMITA200Claude Code, Codex
playwright-climicrosoft/playwrightSkill100kyesterdayApache-2.0A19Claude Code
browser-automationopenclaw/openclawSkill394ktodayMITA36Claude Code
systematic-debuggingobra/superpowersSkill314k4d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143ktodayMITA95Claude Code