Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ntaffzii/Skill-Agents --skill project-discoverygit clone --depth 1 https://github.com/ntaffzii/Skill-AgentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ntaffzii/skill-agents/project-discovery)<a href="https://agentmods.dev/skills/ntaffzii/skill-agents/project-discovery"><img src="https://agentmods.dev/badge/skills/ntaffzii/skill-agents/project-discovery.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.00412 |
| Opus 5 | $0.00029 | $0.00206 |
| Sonnet 5 | $0.00012 | $0.00082 |
| Haiku 4.5 | $0.00006 | $0.00041 |
Grade A, and why
project-discovery scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Project Discovery
Build a practical understanding of a project before proposing or making changes.
Workflow
-
Identify the goal
- Determine whether the user needs an overview, architecture summary, stack analysis, risk assessment, implementation plan, migration direction, or onboarding notes.
-
Inspect high-signal files
- Read
README.md, project instructions, package manifests, lockfiles, docs, architecture notes, CI config, test config, and main entry points. - Prefer actual files over guesses — the research-methodology source-tier idea applies here too: a file in the repo outranks a README's description of what the repo does, which outranks an outside blog post about the project.
- Read
-
Map the system
- Identify core modules, data flow, user-facing surfaces, external services, build commands, test commands, deployment hints, and local conventions.
- Note areas that need follow-up inspection instead of pretending certainty.
-
Assess readiness
- Call out missing docs, unclear ownership, brittle tests, risky dependencies, weak validation, or hidden configuration.
- Keep recommendations incremental.
-
Report
- Respond in the user's language.
- Link to files when possible.
- End with a practical next step.
Output Format
# Project Discovery
## What This Project Does
## Stack
## Important Files
## Architecture Notes
## Development Workflow
## Risks And Unknowns
## Recommended Next Steps
Rules
- Do not propose broad rewrites before understanding local patterns.
- Distinguish verified facts from assumptions.
- Keep the report useful for the next action, not encyclopedic.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 57 lines · 58 tokens per session scan A 765ef9adea4a
project-discovery is a skill published in the GitHub repository ntaffzii/Skill-Agents (4 stars, last pushed 5d ago), licensed MIT. It adds 58 tokens to every session and 412 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
auto-research
Research uncertain questions with an explicit, user-approved web search or ChatGPT consultation, then present options and wait for implementation approval.
pake
Package any website or local web build into a lightweight desktop app using Pake (Tauri/Rust). Use when the user wants to: wrap a URL as a native app, build a desktop app from a website or a local dist/ folder, use Pake CLI to package a page, set up proxy for a packaged app, customize app icons or bundle IDs, or…
acceptance
End-to-end verification and self-evidence for a delivery in any repository, with or without a preconfigured verify plan. Discover an existing plan when one was handed to this run; otherwise author checks and publish a standalone acceptance. Pick the proving surface (CLI / web / desktop / iOS Simulator), drive the real…
therapeutic-ifs
Unified inner work engine: Schema deconstruction (diagnosis) + IFS therapy (treatment). Absorbs: schema-deconstruction.
dashboard-builder
Build self-contained interactive HTML dashboards with charts, filters, and tables. Generates a single browser-openable file — no server or dependencies required.
red-team-review
Unified adversarial review: v4.3 Strategic Matrix (MTA-004). 7-phase framework: Priors → Rubric → Adversarial Lenses → SWOT/TOWS → MCDA Decision Engine → Blind Spot/Kill Switch → Executive Summary. Absorbs: bias-detector.