Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/neverinfamous/memory-journal-mcp/autonomous-devnpx skills add neverinfamous/memory-journal-mcp --skill autonomous-devgit clone --depth 1 https://github.com/neverinfamous/memory-journal-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00058 | $0.00841 |
| Opus 5 | $0.00029 | $0.00420 |
| Sonnet 5 | $0.00012 | $0.00168 |
| Haiku 4.5 | $0.00006 | $0.00084 |
Grade B, and why
autonomous-dev scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletemediumDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- **Command Gates**: Do not execute destructive commands (`rm -rf`, `git reset --hard`) without explicit Human-in-the-Loop approval. Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Autonomous Development Workflow
This skill provides a deterministic software engineering harness, designed to wrap AI code generation with strict alignment gates, adversarial evaluations, CI/CD pipeline principles, and collaborative Git practices. Load this skill when designing or orchestrating multi-step architectural features, automating deployment workflows, or writing code inside a structured environment.
1. Project Alignment Gate (PROJECT.md)
Before beginning implementation, you MUST cross-reference the proposed feature against PROJECT.md at the repository root. If PROJECT.md is missing, ask the user to clarify the project goals or constraints before proceeding.
- In-Scope: Confirm the feature directly serves a goal in
PROJECT.md. Proceed. - Out-of-Scope: Hard block. Halt work immediately and inform the user.
- Constraints: Abide strictly by the constraints (language, architecture, dependencies) defined in the project file.
2. Security Safety Nets
- Execution Sandboxing: Never run unknown or unverified shell scripts directly. Execute isolated tasks within the
tmp/scratch directory. - Secret Protection: Check for exposed credentials or PII in diffs before committing. Never commit
.env. - Command Gates: Do not execute destructive commands (
rm -rf,git reset --hard) without explicit Human-in-the-Loop approval.
3. Generator / Evaluator Pipeline
Features cannot simply be written and committed. They must navigate a rigid pipeline based on the adversarial evaluation pattern:
- Research: Analyze local scope and external dependencies via parallel search strategies.
- Planning: Formulate architecture and acceptance criteria (generator).
- Acceptance Tests FIRST: Tests must be written before main implementation (TDD).
- Implementation: Produce code.
- HARD GATE: 0 test failures. You cannot proceed if tests fail. No stubs/placeholders allowed.
- Adversarial Review: Self-evaluate the code as a skeptical reviewer (evaluator). Actively search for edge cases, security vulnerabilities, efficiency loss, and anti-patterns.
- Documentation: Ensure docs stay tightly in sync with the codebase after the feature clears CI.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 80 lines · 58 tokens per session scan B dafabc7f3976
autonomous-dev is a skill published in the GitHub repository neverinfamous/memory-journal-mcp (20 stars, last pushed 1mo ago), licensed MIT. It adds 58 tokens to every session and 841 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
mie-generator
Generate or update MIE (Metadata Interoperability Exchange) YAML files that describe RDF databases for TogoMCP. Use this skill whenever the user asks to create, write, regenerate, update, or improve an MIE file for any RDF database (UniProt, ChEMBL, Reactome, Rhea, PubChem, MeSH, PDB, or any new bio/chem database…
image-context-runtime
Use for image-heavy Codex work when generated or inspected media should stay behind a bounded MCP boundary and the controlling task should receive only durable Job IDs, hashes, relative references, and compact text handoffs.
rijksmuseum-mcp-plus
Research workflows for the Rijksmuseum MCP+ server, addressing Dutch arts, crafts, and history across the museum's holdings. Capabilities include keyword, structured, and semantic text search, AI-driven image analysis, geospatial queries, collection statistics, Iconclass-driven iconographic discovery, AAM/CMOA-aligned…
qa-generator
Generate, refresh, or replace benchmark questions for the TogoMCP evaluation set (benchmark/questions/questionXXX.yaml). Use whenever the user asks to create, add, extend, refresh, re-validate, replace, redirect, or retire benchmark questions — e.g. "add a few benchmark questions", "extend the QA set", "we need more…
setup
Configure the Qdrant Power after installation. Use this skill for missing uvx, missing environment variables, unapproved environment variables, unavailable Qdrant tools, "Failed to connect" errors, and setup requests.
prism
PRISM finds entities (genes, proteins, compounds) at the INTERSECTION of two or more property sets on RDF knowledge graphs via TogoMCP — e.g. "genes common to disease X and druggable pathway Y", "targets both linked to phenotype P and modulated by existing drugs". Use whenever the user asks a set-intersection /…