Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/mishahanin/heading-osnpx agentmods add skills/mishahanin/heading-os/calibrateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mishahanin/heading-os/calibrate)<a href="https://agentmods.dev/skills/mishahanin/heading-os/calibrate"><img src="https://agentmods.dev/badge/skills/mishahanin/heading-os/calibrate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mishahanin/heading-os/calibrate"><img src="https://agentmods.dev/badge/skills/mishahanin/heading-os/calibrate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 77 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 251 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Agent Snooping · line 254 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Excessive Agency · line 15 Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.Fix: Remove the model/provider override or disclose it prominently and require explicit operator approval before invoking an external coding CLI or billed model.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.03823 |
| Opus 5 | $0.00051 | $0.01912 |
| Sonnet 5 | $0.00020 | $0.00765 |
| Haiku 4.5 | $0.00010 | $0.00382 |
Grade A, and why
calibrate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 368 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/calibrate - End-of-Session Self-Improvement
Scans the current session for friction and successes. Proposes numbered patches grouped by target (Memory / Settings / Skills / Rules), applies approved patches, and makes a single atomic git commit. Corporate files route to a separate review queue, never auto-applied.
Design spec: docs/superpowers/specs/2026-05-13-calibrate-skill-design.md (data overlay: .heading-os-data/docs/superpowers/specs/2026-05-13-calibrate-skill-design.md).
Detection prompts: references/detection-prompts.md.
Memory store
Memory patches target the canonical auto-memory store in the DATA overlay, the
same store /dream, /memory-hygiene and the memory index read. Resolve it:
python3 -c "from scripts.utils.workspace import get_auto_memory_dir; print(get_auto_memory_dir())"
Do NOT write to the native harness store at
~/.claude/projects/<project-slug>/memory/. That store is a per-launch runtime
cache, keyed to the directory the session started in. A patch written there is
invisible to a session that launched from any other path. The SessionStart hook
.claude/hooks/memory-reconcile.py bridges the two stores. It syncs both
directions, newest-wins, and never deletes, so the patch is not lost. It does
not reach the canonical store or the memory index until the next session starts.
Phase 0 - Pre-flight + mode dispatch
Run these checks before any other work. Each failure has a specific recovery message; never abort silently.
-
Git available + in repo. Run
git rev-parse --is-inside-work-tree. If exit != 0: abort with "git not available or not in a repo. /calibrate cannot safely auto-commit." -
Working tree state. Run
git status --porcelain. The typical transient set isoutputs/,crm/aggregated/,.sessions/anddatastore/operations/tribe/fireside-state/. If any modified file sits outside it, warn: "Working tree has uncommitted changes that aren't typical transients. Step 5.1 may collide with them, and a failed Edit aborts the run. Proceed? (proceed / cancel)". Wait for explicit answer. Record the list: a file already dirty here is NOT this run's work and is never staged in Step 5.4.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +57 lines 288e5f79f116
- 9d ago First seen · 311 lines · 101 tokens per session scan A e0303652150f
calibrate is a skill published in the GitHub repository mishahanin/heading-os (11 stars, last pushed yesterday), licensed Apache-2.0. It adds 101 tokens to every session and 3,823 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
agentsview-usage
Search prior session history to recall how similar work was handled before. Use when you want to leverage a past approach, check prior experience on a topic, answer "how was this handled before", or cross-verify current handling against precedent from earlier sessions.
letter-hooker
Erweitert automation-self-care um Letter Hooks, Preflight-Bootloader, Dokument-Traversierungsregeln und selbstheilende Prompt-Kontext- Anreicherung für KI-Agenten und CLIs ohne native, ereignisgetriebene JSON-Lifecycle-Hooks (wie Antigravity / Gemini CLI). Nutzen, wenn ein Agent Preflight-Regeln injizieren, vor…
honcho
Configure and troubleshoot Honcho memory for Hermes.
qmd
Hybrid local search over notes, docs, and transcripts.
hive.context-preservation
Proactively extract critical values from tool results into working notes before automatic context pruning destroys them.
hive.note-taking
Maintain a free-form scratchpad of decisions, extracted values, and open questions so context pruning doesn't lose anything you still need.