Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add o-samoilov/quasar-graph --skill researchgit clone --depth 1 https://github.com/o-samoilov/quasar-graphWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/o-samoilov/quasar-graph/research)<a href="https://agentmods.dev/skills/o-samoilov/quasar-graph/research"><img src="https://agentmods.dev/badge/skills/o-samoilov/quasar-graph/research/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/o-samoilov/quasar-graph/research"><img src="https://agentmods.dev/badge/skills/o-samoilov/quasar-graph/research.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.03250 |
| Opus 5 | $0.00032 | $0.01625 |
| Sonnet 5 | $0.00013 | $0.00650 |
| Haiku 4.5 | $0.00006 | $0.00325 |
Grade A, and why
research scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/quasar-graph:research
Answer a natural-language question — or trace a pasted error — by reading the real source code of the relevant projects, using a backend graph as the router: the graph supplies the connections (edges) and the paths (projectPath, repoUrl) needed to scope and locate the code.
This is the read-side counterpart to scan: scan builds the map, research navigates it into the code. It is read-only w.r.t. the graph — it never calls build_graph / push_graph / write_node_manifests / create_graph / pull_graph and writes nothing under .quasar-graph/. The only things it may change on disk are syncing relevant repos under base_dir — cloning the missing ones and fast-forward-pulling the already-present ones (Phase 1, after one confirmation) — and the saved base_dir in ~/.quasar-graph/config.json. It requires the quasar-graph MCP server (the graph lives on the backend — there is no offline mode).
Conventions
Read references/conventions.md at the quasar-graph plugin root before acting. It defines the action vocabulary this skill is written in (dispatch a sub-agent, load a skill, selection prompt, …) with its per-harness degradations, the selection UI rules, the login retry flow, and the repo identity & binding cache rules.
In this skill every gate (Research the current project's graph, Search all <N>, Sync & research) is a fixed-choice selection prompt; an empty backend list means report and stop; free-form inputs (the base_dir path, the research query) stay plain text.
Phase 0 — Bind graph
Goal: choose the backend project + graph, load the graph into context (NOT to disk), and resolve a local base_dir for rebasing project paths.
This runs in the main thread via the bundled quasar-graph MCP server.
- Confirm the
quasar-graphMCP tools are available. If not, report:Research needs the quasar-graph MCP server (the graph lives on the backend). Enable it and retry.Then stop. - Authentication. On a
Not authenticated with the quasar-graph backendfailure, run the login retry flow from the conventions file. If it still fails, stop (research has no offline mode). - Working-directory shortcut. Before asking anything, try to resolve the directory research was invoked from to a graph it is already bound to:
- Run
git remote get-url originthere; no git remote → skip to step 4. Normalize the URL with the graph's own rules ("Repo identity & binding cache" in the conventions file). - Read the binding cache
~/.quasar-graph/cache/bindings.json(shape and ownership in the conventions file — research only reads it, never writes). Missing file or no entry under the normalized URL → skip to step 4. - Dedupe the matched entries by
graph_id. One graph → ask with a selection prompt whether to research it (Research the current project's graph, listed first, naming the boundnode_name/Pick another project). Several graphs → offer one option per graph the same way (label =node_name+ a graph identifier, following the selection UI rules) plus a finalPick another projectoption. - On accept, capture that entry's
project_idandgraph_idand continue at step 6 — steps 4–5 are skipped. If step 6'sget_graphthen fails (stale cache — the graph is gone), fall back to step 4 and leave the cache untouched. OnPick another project, continue with step 4.
- Run
- Call
list_workspacesandlist_projects. Ask which project to research using the selection UI rules (incl. workspace labeling). If empty, report there are no projects on the backend and stop. Captureproject_id. - Call
list_graphswithproject_id. If the list is empty, report that this project has no graphs on the backend (suggest running/quasar-graph:scanfirst) and stop. Otherwise ask which graph the same way; showname / nodes_count / scanned_atper option. Capturegraph_id. - Call
get_graphwithgraph_id. Keep the returned graph (nodes[],edges[]) in context only — do NOT write it to disk (that ispull_graph's job, and research does not use it). - Ask for the local
base_dir(plain text). Default: the savedbase_dirfrom~/.quasar-graph/config.jsonif present, else~/Projects; resolve~to an absolute path via$HOME(runecho $HOMEif needed). After the user confirms, if the absolute path differs from the stored value, write it back to that config (create the file and its directory if missing; preserve any other keys). Do not createbase_dirnow. This rebases each node's relativeprojectPath(abs = join(base_dir, projectPath)).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 109 lines · 63 tokens per session scan A 192a335ea316
research is a skill published in the GitHub repository o-samoilov/quasar-graph (3 stars, last pushed 28d ago), licensed MIT. It adds 63 tokens to every session and 3,250 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
archify
Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG, dark/light themes, optional trace motion, and PNG/JPEG/WebP/SVG/WebM export. Accept plain-language requirements or pasted Mermaid flowchart, sequenceDiagram, and…
drawio-skill
Create, edit, synchronize, inspect, test, and publish editable draw.io diagrams. Use when the user explicitly requests draw.io/diagrams.net, needs a polished architecture, ERD, UML, sequence, C4, SysML, BPMN, network, swimlane, ML, or infrastructure diagram, wants code/IaC/SQL/OpenAPI converted into a diagram, or…
architecture-diagram
Create a professional, dark-themed software/system architecture diagram as a single self-contained HTML file with inline SVG. Use when asked to visualize system components, layers, services, or how parts of a codebase fit together.
archscribe
A tool for turning technical descriptions, articles, processes, or reference images into hand-drawn-style diagrams. It can produce editable Excalidraw diagrams, image and video previews, and interactive HTML.
architecture-drawer
Use when asked to draw system architecture diagrams, generate technical architecture SVGs, or export architecture diagrams to editable PowerPoint presentations. Supports multi-layer diagrams with automatic layout validation and scoring (16-dimension evaluator catches collisions, overlaps, dangles, crossings, palette…
aws-architecture-diagram
Generate AWS architecture diagrams in draw.io format. Activates when the user asks to create, generate, or build an architecture diagram, system diagram, or draw.io diagram for AWS services.