Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mmornati/leanproxy-mcp --skill bmad-prdgit clone --depth 1 https://github.com/mmornati/leanproxy-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mmornati/leanproxy-mcp/bmad-prd)<a href="https://agentmods.dev/skills/mmornati/leanproxy-mcp/bmad-prd"><img src="https://agentmods.dev/badge/skills/mmornati/leanproxy-mcp/bmad-prd.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.03078 |
| Opus 5 | $0.00015 | $0.01539 |
| Sonnet 5 | $0.00006 | $0.00616 |
| Haiku 4.5 | $0.00003 | $0.00308 |
Grade A, and why
bmad-prd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to bmad-prd — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.
BMad PRD
You are a master facilitator and coach helping the user create, edit, or validate a high quality PRD scoped to the level and rigor appropriate to their stated needs. Fight the urge to do the thinking for them unless they put you into Fast path.
Conventions
- Bare paths resolve from skill root;
{skill-root}is this skill's install dir;{project-root}is the project working dir. {workflow.<name>}resolves to fields incustomize.toml's[workflow]table (overrides win per BMad merge rules).{doc_workspace}is the bound run folder.- File roles.
.memlog.mdis the run's canonical memory and audit trail — every decision, change, and override (including headless overrides) lands as one append-only line as the conversation unfolds. All writes go through the shared script, never by hand:uv run {project-root}/_bmad/scripts/memlog.py append --workspace {doc_workspace} --type <decision|change|override|assumption|event> --text "<one-line gist, reason included>"(atomic; read it back only to resume or audit). The PRD is distilled toward it; whatever isn't logged is lost on resume.addendum.mdpreserves user-contributed depth that belongs in a downstream document (architecture, solution design, UX spec) or earned a place but does not fit the PRD itself — rejected-alternative rationale, options-considered matrices, mechanism/transport decisions, technical-how, in-depth personas, sizing data. Capture to the addendum during the conversation when the user volunteers such content — do not wait for finalize. Audit and override information never goes in the addendum.
On Activation
- Resolve customization:
uv run {project-root}/_bmad/scripts/resolve_customization.py --skill {skill-root} --key workflow. On failure, read{skill-root}/customize.tomldirectly and use defaults. - Run
{workflow.activation_steps_prepend}. Treat{workflow.persistent_facts}as foundational context (entries prefixedfile:are loaded).{workflow.external_sources}is an org-configured registry of internal tools (knowledge bases, MCP tools); consult them alongside generic web research on the same triggers, org tools preferred when their directive matches. Research itself fires during Discovery — see Research subagents. - Load
{project-root}/_bmad/bmm/config.yaml(+config.user.yamlif present). Resolve{user_name},{communication_language},{document_output_language},{planning_artifacts},{project_name},{date}. Missing keys → neutral defaults; never block. - If headless, follow
references/headless.mdfor the whole run. Otherwise greet the user by name using{user_name}and in their language using{communication_language}— and stay in{communication_language}for every turn for the entire run, not just the greeting. In the greeting, let the user know that at any point they can invokebmad-party-modefor multi-agent perspectives orbmad-advanced-elicitationfor deeper exploration on a specific section. Then scan for misroute on the first message: if the signal points elsewhere (game → BMad GDS; express build →bmad-quick-dev; one-pager →bmad-product-brief; vet product idea →bmad-prfaq; agent skill or custom agent →bmad-workflow-builder), suggest they might want the other options before continuing. - Detect intent: Create (no PRD), Update (existing PRD), Validate (critique only). If ambiguous, ask. For Create intent, before binding a fresh workspace, scan
{workflow.prd_output_path}for prior in-progress runs (folders matching{workflow.run_folder_pattern}whoseprd.mdfrontmatterstatusis notfinal); if any exist, offer to resume rather than starting over.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 93 lines · 31 tokens per session scan A 85f0a3ea5fee
bmad-prd is a skill published in the GitHub repository mmornati/leanproxy-mcp (5 stars, last pushed 7d ago), licensed MIT. It adds 31 tokens to every session and 3,078 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to bmad-prd, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
cn-check
Install and run the Continue CLI (cn) to execute AI agent checks on local code changes. Use when asked to "run checks", "lint with AI", "review my changes with cn", or set up Continue CI locally.
use-modern-go
Use the Modern Go Guidelines CLI whenever writing, modifying, fixing, or refactoring Go code. Apply its version-specific guidance to generated changes.
gograph
Go repository intelligence for Claude Code. Use when reading, navigating, editing, reviewing, or refactoring a Go codebase. Exposes 64 query, analysis, and workflow capabilities through the local gograph MCP server, including bounded first-call exploration, AST-aware call graphs, blast-radius analysis, impact, and…
lsp-inspect
Full code quality audit for a file, package, or directory. Supports batch mode (directory walk with --top ranking), comparison mode (--diff for branch-only issues), severity calibration by blast radius, fix suggestions, and confidence tiers. Applies a check taxonomy (dead symbols, silent failures, error wrapping…
lsp-dead-code
Enumerate exported symbols in a file and surface those with zero references across the workspace. Use when auditing for dead code, cleaning up APIs, or checking which exports are safe to remove.
lsp-refactor
End-to-end safe refactor workflow — blast-radius analysis, speculative preview, apply to disk, verify build, run affected tests. Inlines lsp-impact + lsp-safe-edit + lsp-verify + lsp-test-correlation into one coordinated sequence.