Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mplind/second-reader --skill second-readergit clone --depth 1 https://github.com/mplind/second-readerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mplind/second-reader/second-reader)<a href="https://agentmods.dev/skills/mplind/second-reader/second-reader"><img src="https://agentmods.dev/badge/skills/mplind/second-reader/second-reader/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mplind/second-reader/second-reader"><img src="https://agentmods.dev/badge/skills/mplind/second-reader/second-reader.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00191 | $0.06783 |
| Opus 5.5 | $0.00076 | $0.02713 |
| Sonnet 5.5 | $0.00038 | $0.01357 |
| Haiku 4.5 | $0.00019 | $0.00678 |
Grade A, and why
second-reader scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 487 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Second Reader
Not a second brain. A second reader: nothing enters this vault, and nothing leaves it for the owner to act on, until an independent second reader has verified it against the sources.
What you are building
A Markdown knowledge repository, one folder that Obsidian opens as a vault, where raw source material becomes distilled, atomic, densely cross-linked, and fully sourced knowledge. The owner asks it questions and gets answers traced to their sources. It compounds: every question answered and every source read is filed back, so the vault gets richer with use.
Two properties separate this from a pile of notes, and both are non-negotiable.
Coverage. A reader of the vault should not need to have read the source. All the core, durable, useful information from a source lives in the vault, cited to its exact location. A shallow summary fails this bar.
Trust. Every claim traces to a source. Nothing is invented, nothing is over-firmed, interpretation is labelled as interpretation. The owner uses this vault to make real decisions and to speak with authority, so a fluent wrong answer is worse than an honest gap.
You hold both properties with one mechanism, described next. It is the heart of this skill.
The one rule: build, then independently validate, then loop
Never ship work from a single pass. A single pass is where defects enter, and the pass cannot see its own blind spots. Instead:
- Build the note, page, or answer in one pass (the digest).
- Validate it with a separate, independent pass that did not do the build, re-reading the source cold and auditing the build against the bar.
- Loop. If validation finds gaps or defects, run the build again with the validator's specific findings as targeted instructions, then validate again. Repeat until a validation round finds nothing.
The loop stops when a round finds nothing, not when the last batch of corrections has been made. The correction pass is itself unvalidated, and fix passes are where new defects sneak in, so a clean round after the last fix is what proves you are done.
What ships with it
18 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- examples/coverage-report.md 6.9 KB
- references/coverage-instrument.md 43 KB
- references/curriculum.md 8.8 KB
- references/evidence.md 14 KB
- references/lint.md 15 KB
- references/quality-loop.md 28 KB
- references/runbook.md 2.4 KB
- references/validation-lessons.md 11 KB
- references/vault-gate.md 7.0 KB
- references/vault-templates.md 22 KB
- scripts/build_tester_brief.py 10 KB runs code
- scripts/exam_io.py 2.0 KB runs code
- scripts/manifest_hash.py 2.1 KB runs code
- scripts/run_structural_gates.py 4.0 KB runs code
- scripts/split_brief_chunks.py 10 KB runs code
- scripts/verify_answer_files.py 5.2 KB runs code
- scripts/verify_exam_seed.py 16 KB runs code
- scripts/verify_report_seal.py 3.2 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 487 lines · 191 tokens per session scan A 74d89cee1592
second-reader is a skill published in the GitHub repository mplind/second-reader (1 stars, last pushed 1mo ago), licensed MIT. It adds 191 tokens to every session and 6,783 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
pdf-courseware-to-obsidian
A workflow that turns local PDF or PowerPoint course materials into structured Chinese study notes in an Obsidian vault. Obsidian is a note-taking app that stores linked Markdown files and related images.
wiki-ingest
Ingest exactly one research paper or source document into an open-llm-wiki vault. Use when the user explicitly asks to add, ingest, process, or publish a paper into the wiki. The workflow parses the source, drafts a source page, runs independent QA, publishes only after the quality gate passes, extracts and normalizes…
second-brain-ingest
Process raw source documents into wiki pages. Use when the user adds files to raw/ and wants them ingested, says "process this source", "ingest this article", "I added something to raw/", or wants to incorporate new material into their knowledge base.
memorb-ingest
A skill for turning raw content into structured memory pages. It is intended for material such as transcripts, articles, and PDFs.
publishing-mdbook-pdf
Publish a book / handbook / manual as an mdBook site on GitHub Pages WITH a print-quality PDF — cover page, running header + page-number footer with a credit line, REAL table-of-contents page numbers, Mermaid diagrams, non-Latin (e.g. Thai) fonts, and an optional single-file air-gap HTML viewer. Use when the user…
liteparse
Local document and PDF parsing that returns spatial text with bounding boxes. Use for extracting text from PDFs, DOCX, Office files, and images; running OCR on scans; producing layout-preserved JSON for RAG; batch-ingesting folders of papers; or rendering pages to PNG for multimodal agents. Distinguishing capabilities…