Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mycelium-hq/ai-brain-starter --skill risegit clone --depth 1 https://github.com/mycelium-hq/ai-brain-starterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mycelium-hq/ai-brain-starter/rise)<a href="https://agentmods.dev/skills/mycelium-hq/ai-brain-starter/rise"><img src="https://agentmods.dev/badge/skills/mycelium-hq/ai-brain-starter/rise/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mycelium-hq/ai-brain-starter/rise"><img src="https://agentmods.dev/badge/skills/mycelium-hq/ai-brain-starter/rise.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 449 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
- medium Agent Snooping · line 98 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00103 | $0.05855 |
| Opus 5 | $0.00051 | $0.02927 |
| Sonnet 5 | $0.00021 | $0.01171 |
| Haiku 4.5 | $0.00010 | $0.00585 |
Grade B, and why
rise scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Strips warnings and disclaimersmediumAnti-refusal
Omitting safety caveats hides risk from the user and is a common jailbreak preamble.
| Morning anchors skipped 5+ days in a row | Surface: "You've skipped [anchor] 6 days running. Want to talk about it in tonight's /journal?" — note the streak, don't lecture | Copies of this mod
1 near-identical copy found in the catalogue:
- rise — 89% identical, 56 lines differ
How it starts
The opening of the file, as written. The whole thing — 463 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/rise — Morning Consciousness Routine
A conversational morning skill that runs the threshold ritual (anchor practices check, body track, body movement) AND the operational layer (priorities, intention, gratitude, calendar). One skill, one flow.
Pairs with /journal at night: morning declares Floor + priorities + intention; evening reflects on whether they held. The gap is a new /patterns input.
Language
Run the interview and write the entry in the language the user writes in. Spanish opener: "Buenos días. ¿Cómo te despiertas hoy?"
Step 0: Read the config (mandatory)
Look for Meta/rise-config.md (or ⚙️ Meta/rise-config.md for emoji-prefixed vaults). Parse the settings: block:
cycle_phase_aware: on | off— whether to pull cycle phase and scale movementmorning_anchors: [list]— practices to ask about at step 1 (meditation, red_light, cold_shower, etc.)todo_files: [list]— vault-relative paths for priority rankingscoring: { w_impact, w_urgency, w_effort, w_commit }— formula weightscalendar: on | off+calendar_accounts: [list]health_mcp: on | offsave_path: "Journals"— where to save morning entriescarry_forward: { sessions, monitor, decisions, calendar_lookback }— sources swept at Step 4.7 so work done since the last Rise arrives on its own. Omitted keys default to on.
If the file doesn't exist: copy templates/rise-config.md into the vault, then ask the user once:
"I created
rise-config.md. Quick setup:
- Do you have a menstrual cycle you'd like the body movement to scale to? (yes/no)
- What practices do you do first thing in the morning that I should check off? (meditation, red-light therapy, cold shower, prayer, walk, etc. — list whatever applies, or 'none')
- Where are your to-do files? Paste paths or 'skip' to recommend priorities by date instead."
Write their answers into the YAML in the file. Continue with those settings enabled for this run. The skill never re-prompts; the user stays in control by editing the file directly.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 463 lines · 103 tokens per session scan B da498fbf1c1c
rise is a skill published in the GitHub repository mycelium-hq/ai-brain-starter (36 stars, last pushed yesterday), licensed MIT. It adds 103 tokens to every session and 5,855 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (strips warnings and disclaimers). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
flow
Personal task and agent-session manager. CLI binary is flow (assumed on PATH) and stores metadata in /.flow/flow.db (SQLite). Use this skill when the user asks about their work, tasks, or projects in any natural phrasing — including but not limited to: "what's left", "what's remaining", "what's pending", "what do I…
daily-brief
Compose a morning briefing for the user by pulling today's calendar, open tasks, and relevant memory, then delivering a short prioritized summary over the primary chat channel. Use when the user asks for a daily brief, "what's on today", a standup, or sets up a scheduled morning digest.
tg-slot
Free a membership slot so a Telegram account can join or create a group. Accounts have a hard ceiling on channels plus supergroups, and at the ceiling both creating and joining fail with an error that misleadingly blames the target chat. Finds the least-valuable current memberships, proposes what to leave, and retries…
claudeai-sync
Pull new and changed claude.ai web conversations into an Obsidian vault, extract artifacts as first-class notes, concept-link them, and refresh the RAG index and dashboard. Idempotent: curated notes are never overwritten. Triggers: "/claudeai-sync", "pull claude.ai", "grab new claude.ai chats".
gmail
Check, search or digest Gmail across several mailboxes over the owner's own OAuth connector, with no browser and near-zero tokens for the raw pull. Read-only by default: drafting and sending go through the outbound approval gate. Triggers: "/gmail", "check mail", "any important emails", "find the email about ".
tg-post
Publish a vetted post to one of your own Telegram channels or supergroups over the MCP connector rather than a browser, with the channel resolved strictly by id from a registry, rate-guarded and draft-first. It never posts to a chat matched by name similarity. Triggers: "/tg-post", "publish to the telegram channel".