Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mxyhi/ok-skills --skill autoresearchgit clone --depth 1 https://github.com/mxyhi/ok-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mxyhi/ok-skills/autoresearch)<a href="https://agentmods.dev/skills/mxyhi/ok-skills/autoresearch"><img src="https://agentmods.dev/badge/skills/mxyhi/ok-skills/autoresearch/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mxyhi/ok-skills/autoresearch"><img src="https://agentmods.dev/badge/skills/mxyhi/ok-skills/autoresearch.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.01900 |
| Opus 5 | $0.00009 | $0.00950 |
| Sonnet 5 | $0.00004 | $0.00380 |
| Haiku 4.5 | $0.00002 | $0.00190 |
Grade A, and why
autoresearch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
98% identical to autoresearch — 3 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Autoresearch — Autonomous Goal-directed Iteration
Safety Invariants (all subcommands)
- Never push, publish, or deploy without explicit user approval.
- Bounded by default. Override with
Iterations: unlimited. - All results logged to
autoresearch/{subcommand}-{YYMMDD}-{HHMM}/directory. - Chain handoff via
handoff.json. Evals reads*-results.tsv.
Dispatch (bare $autoresearch)
Parse the invocation in this order:
| Condition | Mode |
|---|---|
Metric: or Verify: present |
Classic — existing metric loop, unchanged |
| Free-form natural-language goal, no metric/verify | Orchestrator — see Orchestrator section |
| Nothing | Setup wizard — interactive config builder |
--classic flag |
Force Classic regardless of goal text |
--auto flag |
Force Orchestrator regardless of goal text |
Print a banner on every invocation: [autoresearch] mode: classic | orchestrator | wizard.
Subcommands
| Command | Does | Default Iterations |
|---|---|---|
$autoresearch |
Iterate against a metric: modify → verify → keep/discard | 25 |
$autoresearch plan |
Convert a goal into validated Scope, Metric, Verify config | N/A |
$autoresearch debug |
Hunt bugs: hypothesize → test → falsify → repeat | 15 |
$autoresearch fix |
Crush errors one-by-one until zero remain | 20 |
$autoresearch security |
STRIDE + OWASP audit with red-team personas | 15 |
$autoresearch ship |
Ship through 8 phases: checklist → dry-run → deploy → verify | N/A |
$autoresearch scenario |
Generate edge cases across 12 dimensions | 20 |
$autoresearch predict |
5 expert personas debate before implementation | N/A |
$autoresearch learn |
Scout codebase → generate docs or wiki → validate → fix loop | 10 |
$autoresearch reason |
Adversarial debate with blind judges until convergence | 8 |
$autoresearch probe |
8 personas interrogate requirements until saturation | 15 |
$autoresearch improve |
Research ICP challenges, discover improvements, generate PRDs | 15 |
$autoresearch evals |
Analyze iteration results: trends, plateaus, regressions | N/A |
$autoresearch regression |
Regression stability gate: baseline vs candidate, verdict STABLE/UNSTABLE | N/A |
What ships with it
22 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 250 B
- autoresearch.md 4.8 KB
- debug.md 4.0 KB
- evals.md 5.0 KB
- fix.md 4.3 KB
- improve.md 6.0 KB
- learn.md 7.9 KB
- LICENSE 1.0 KB
- plan.md 2.8 KB
- predict.md 3.7 KB
- probe.md 4.8 KB
- reason.md 4.7 KB
- references/orchestrator-routing.md 6.8 KB
- references/predict-personas.md 3.1 KB
- references/reason-judge-protocol.md 3.4 KB
- references/security-checklist.md 3.4 KB
- regression.md 9.3 KB
- scenario.md 4.1 KB
- scripts/orchestrate.sh 18 KB runs code
- scripts/score-regression.sh 7.5 KB runs code
- security.md 4.6 KB
- ship.md 3.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 109 lines · 18 tokens per session scan A 93ee4758dee0
autoresearch is a skill published in the GitHub repository mxyhi/ok-skills (485 stars, last pushed 3d ago), licensed Apache-2.0. It adds 18 tokens to every session and 1,900 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 98% identical to autoresearch, differing in 3 lines, and is treated as a copy.
Other skills, from other repositories
idea-refine
Refines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague, when you need to stress-test assumptions before committing to a plan, or when you want to expand options before converging on one. Triggers on "ideate", "refine this idea", or…
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
chinese-documentation
A Chinese technical-documentation style guide covering spacing, punctuation, numbers, terminology, and links when Chinese and English appear together.
skillshare-implement-feature
Implement a feature from a spec file or description using TDD workflow. Use this skill whenever the user asks to: add a new CLI command, implement a feature from a spec, build new functionality, add a flag, create a new internal package, or write Go code for skillshare. This skill enforces test-first development…
create-slack-app
Use when a developer wants to create, scaffold, or bootstrap a new Slack app or agent from scratch with the Slack CLI. Covers prerequisites, authentication, choosing a workspace to install into, and creating + running a project from a Bolt (JS or Python) template locally. Trigger on "create a Slack app", "new Bolt…
browser_cdp
A guide for connecting browser-control tools to an existing Chrome session through its remote debugging interface. It explains scanning ports, attaching to a browser, choosing a port, sharing a browser, and switching to a more private control mode.