Borrowing it
Nothing to install: this file belongs to O0000-code/CC-Workshop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/O0000-code/CC-Workshop/main/.codex/skills/cc-workshop-patrol/SKILL.mdgit clone --depth 1 https://github.com/O0000-code/CC-WorkshopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/o0000-code/cc-workshop/cc-workshop-patrol)<a href="https://agentmods.dev/skills/o0000-code/cc-workshop/cc-workshop-patrol"><img src="https://agentmods.dev/badge/skills/o0000-code/cc-workshop/cc-workshop-patrol/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/o0000-code/cc-workshop/cc-workshop-patrol"><img src="https://agentmods.dev/badge/skills/o0000-code/cc-workshop/cc-workshop-patrol.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.01227 |
| Opus 5.5 | $0.00019 | $0.00491 |
| Sonnet 5.5 | $0.00009 | $0.00245 |
| Haiku 4.5 | $0.00005 | $0.00123 |
Grade A, and why
ensemble-patrol scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 150 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CC Workshop Tauri Project Patrol
Overview
Perform a comprehensive quality audit on the CC Workshop Tauri 2 desktop application, covering both the React frontend and Rust backend.
Workflow
1) Prepare
- Verify you are in the CC Workshop project directory (
CC Workshop2/). - Run
git fetch origin mainto ensure you have the latest state. - Note the current branch and HEAD commit for the patrol report.
2) Run Frontend Tests
- Execute the frontend test suite:
npm run test - Record: total tests, passed, failed, skipped.
- If any tests fail, classify as "critical" and note the failing test names.
3) Run Backend Tests
- Execute the Rust test suite:
cd src-tauri && cargo test - Record: total tests, passed, failed.
- If any tests fail, classify as "critical".
4) Frontend Linting
- Run ESLint on the frontend source:
npx eslint src/ - Run TypeScript type checking:
npx tsc --noEmit - Record: total warnings, total errors from both tools.
5) Rust Linting
- Run Clippy with strict mode:
cd src-tauri && cargo clippy -- -D warnings - Run format check:
cd src-tauri && cargo fmt -- --check - Record any warnings or formatting issues.
6) Scan for TODO/FIXME/HACK
- Search all source files for tech debt markers:
grep -rn "TODO\|FIXME\|HACK\|XXX" src/ --include="*.ts" --include="*.tsx" grep -rn "TODO\|FIXME\|HACK\|XXX" src-tauri/src/ --include="*.rs" - Count and categorize by type and layer (frontend vs backend).
- Note files with more than 3 markers as high-priority tech debt.
7) Check Recent Changes
- Run
git log --since=24.hours --onelineto list recent commits. - For each commit, review the diff for:
- Unsafe Tauri IPC calls (not using
safeInvoke) - Missing error handling in async functions
- TypeScript
anytypes that should be properly typed - Rust
unwrap()calls that should use proper error handling - Files exceeding 300 lines
- Unsafe Tauri IPC calls (not using
- Record any issues found.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 150 lines · 47 tokens per session scan A 5d2dd47cd6ef
ensemble-patrol is a skill published in the GitHub repository O0000-code/CC-Workshop (18 stars, last pushed 5mo ago), licensed MIT. It adds 47 tokens to every session and 1,227 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
swift-testing-pro
Writes, reviews, and improves Swift Testing code using modern APIs and best practices. Use when reading, writing, or reviewing projects that use Swift Testing.
finishing-a-branch
Wrap up finished code work safely: confirm the tests pass, then let the Commander choose to merge it, open a pull request, or keep it for later. Nothing is deleted or overwritten without the Commander's clear go-ahead.
receiving-code-review
Handle review feedback on code with care: understand each point, check it against the real code before changing anything, fix what is right, and push back with reasons on what is wrong. Use when review comments arrive.
web-app-qa
Test a web app the way a real user would: click through the main flows, try odd inputs, watch for errors, and keep screenshots as proof. You get a bug report ranked by how serious each problem is.
verification-before-completion
Never say work is done, fixed or passing without fresh proof: run the check that proves it, read the result, then report what it showed. Use before any claim of success, and before saving, committing or handing work over.
verify-ui-change-in-cloud
Verifies user-facing Warp client changes by spawning a cloud agent with computer use to test Warp. Use only when the user explicitly requested computer-use verification or accepted an offer to run it, and ONLY in non-sandboxed environments and local environments. Triggers a cloud agent that runs the test-warp-ui skill.