apply

apply is a skill for Claude Code from nick-railsback/skill-engine. It costs 36 tokens per session (935 once invoked), scanned A, original, MIT.

A controlled step for moving a reviewed proposal into the live contextualizer, the system that supplies working context to an agent.

In plain words
What is it for?
Use it after a proposal has passed the required review and sign-off checks. It validates the manifest and review record before applying the files.
Why use it?
It prevents unapproved or incomplete proposals from changing the live setup and keeps the review record with the change.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the skill-engine plugin — 12 skills shipped together

Good fit Use it after a proposal has passed the required review and sign-off checks. It validates the manifest and review record before applying the files.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/nick-railsback/skill-engine/apply
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add nick-railsback/skill-engine --skill apply
Clone the repo
git clone --depth 1 https://github.com/nick-railsback/skill-engine

Made for: Claude Code.

Or install skill-engine, the plugin that ships this one along with the rest of its 12 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for apply

README.md
[![agentmods](https://agentmods.dev/badge/skills/nick-railsback/skill-engine/apply/github.svg)](https://agentmods.dev/skills/nick-railsback/skill-engine/apply)
Your own site
<a href="https://agentmods.dev/skills/nick-railsback/skill-engine/apply"><img src="https://agentmods.dev/badge/skills/nick-railsback/skill-engine/apply/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for apply

Your own site · 80×15
<a href="https://agentmods.dev/skills/nick-railsback/skill-engine/apply"><img src="https://agentmods.dev/badge/skills/nick-railsback/skill-engine/apply.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 36 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 935 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00036 $0.00935
Opus 5.5 $0.00014 $0.00374
Sonnet 5.5 $0.00007 $0.00187
Haiku 4.5 $0.00004 $0.00093

Measured 1mo ago against content hash c80a7581ef1d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

apply scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugin/skill-engine/skills/apply/SKILL.md · 59 lines

How it starts

The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Apply

Promote a reviewed proposal into the live contextualizer. Atomic-rename per file. Preserve the REVIEW.md audit trail in the live tree. Refuse to run when the proposal has not been signed off, when the sign-off is reject, or when more than one Step 3 box is ticked.

When to invoke

After /skill-engine:review <name> has run, the user has filled Step 1 of REVIEW.md, re-run review to populate Step 2, ticked verdict boxes on each disagreement (optional — for the engine's own read; the engine does not consume these), and ticked exactly one Step 3 box (reviewed or provisional).

Resolving <name> and <install>

Same resolution as /skill-engine:review: <name> is the slug without the -context suffix; bare invocation works when exactly one *-context.proposed/ exists under <install>. See review/SKILL.md § Resolving <name> for the full rule.

Pre-promotion gates

Run these in order; any failure halts the apply and exits non-zero without mutating either tree: the manifest exists and parses, REVIEW.md exists and parses, the review loop actually ran (not just a ticked box — two literal-content checks against Step 1/Step 2), exactly one Step 3 box is ticked and it isn't reject, and the live tree hasn't changed since staging (per-entry content-hash comparison against the manifest's sha_before/sha_after). The exact checks, halt messages, and per-status hash rules are in references/pre-promotion-gates.md.

Promotion, review-state and preamble reconciliation

Promote file-by-file from the manifest (resume-safe per entry), then — before moving the audit trail — write research/review-state.json (the persisted sign-off ledger) and reconcile the provisional-mode preamble block in the live SKILL.md, then move REVIEW.md + manifest.json into the live .review/ and remove the emptied proposed directory. The per-status promotion rules, the ledger schema, and the preamble's exact delimiter format and four reconciliation cases are in references/promotion-and-reconciliation.md.

Read the full file on GitHub · 59 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed c80a7581ef1d
  2. 1mo ago First seen · 59 lines · 36 tokens per session scan A 101f406ef503

Subscribe to this mod's changes

apply is a skill published in the GitHub repository nick-railsback/skill-engine (2 stars, last pushed 6d ago), licensed MIT. It adds 36 tokens to every session and 935 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

vibe-reflect-and-compound

Captures reusable knowledge after work is done — learnings from feedback or failures, resolved bugs (symptom, root cause, prevention), and recurring code patterns — into the project's persistent memory file. Use after feedback, a non-trivial bug fix, a failed attempt, or the third repetition of a pattern.

ash1794/vibe-engineering · 70 tokens

memory-bank

Maintain and update project memory-bank files for persistent context across Claude Code sessions. Use when starting a new session, completing features, making architectural changes, or when context needs to be preserved. Triggers on: memory bank, project context, session start, context update, CLAUDE.md, project…

parisgroup-ai/imersao-ia-setup · 70 tokens

Memory System

Maintain a tiered, file-based memory system so project context and decisions survive across sessions instead of being rediscovered or contradicted each time.

niels-emmer/myace · 31 tokens

pm-engine

Interface with the PM-ENGINE-MEMORY file — the operator's accumulated PM tacit knowledge database. Enables agents to reference, search, and apply TK (Tacit Knowledge) entries, and supports TK extraction from experience (--mode extract), TK querying and referencing (--mode query), and TK-to-instruction conversion…

kimsanguine/hplan · 134 tokens

memory-arch

Design an agent memory system — working memory, episodic memory, semantic memory, and procedural memory. Use when building agents that need to remember context across sessions, learn from interactions, or maintain persistent knowledge. Covers storage strategy, retrieval patterns, and context management.

kimsanguine/hplan · 56 tokens

product-discovery

File-first orchestrator for product discovery and spec frameworks. Frames the problem with a Discovery Lead, Product Analyst, or System Architect role. Spawns parallel framework agents (Double Diamond, How Might We, Jobs to Be Done, user stories with INVEST, EARS for AI-coder specs, Gherkin), synthesizes into a PRD or…

theagenticguy/erpaval · 242 tokens