Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ondeinference/onde-cli/gitnpx skills add ondeinference/onde-cli --skill gitgit clone --depth 1 https://github.com/ondeinference/onde-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00009 | $0.00528 |
| Opus 5 | $0.00005 | $0.00264 |
| Sonnet 5 | $0.00002 | $0.00106 |
| Haiku 4.5 | $0.00001 | $0.00053 |
Grade A, and why
git scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Git skill
Core rule
- Use
--no-ff. Important.
What this means in practice
- Do not fast-forward merge feature branches, release branches, or hotfix branches.
- Prefer explicit merge commits so the branch history stays visible.
- Release prep goes through
developmenton its way tomain, with--no-ffat every hop. - Tag the merge commit that contains the final release state.
Branch flow
Feature branches merge into development. Releases go:
release/vX.Y.Z -> development -> main
Never merge a release branch straight into main — development has to carry the
release state too, or the next feature branch starts from a base that is missing it.
Release guidance
# 1. cut the release branch from development, commit the version bumps
git checkout development
git checkout -b release/vX.Y.Z
git commit -am "Prepare vX.Y.Z"
# 2. release branch -> development
git checkout development
git merge --no-ff release/vX.Y.Z -m "Merge release prep for vX.Y.Z"
# 3. development -> main
git checkout main
git merge --no-ff development -m "Merge development for vX.Y.Z"
# 4. tag the main merge commit, then push
git tag vX.Y.Z
git push origin development
git push origin main
git push origin vX.Y.Z
The tag belongs on the step-3 merge commit on main, not on the release branch and not
on development. Pushing the tag is what triggers the wrapper publish workflows, which
read the version from the tag.
If the work is already on main, make a normal commit and tag that commit. Do not rewrite history just to avoid a merge commit.
Avoid
git merge --ffgit pull --ff-onlyas a default recommendation for this repo's merge policy- Tagging a branch tip that has not been merged into
mainwhen the intended release source of truth ismain - Merging a release branch directly into
main, skippingdevelopment
Why
The repo wants explicit history. Release commits should be easy to find, easy to audit, and clearly connected to the branch that introduced them.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 71 lines · 9 tokens per session scan A aaf7064ddee4
git is a skill published in the GitHub repository ondeinference/onde-cli (0 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 9 tokens to every session and 528 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
claude-maintain-models
Add new AI models to Kiln's mlmodellist.py and produce a Discord announcement. Use when the user wants to add, integrate, or register a new LLM model (e.g. Claude, GPT, DeepSeek, Gemini, Kimi, Qwen, Grok) into the Kiln model list, mentions adding a model to mlmodellist.py, asks to discover/find new models that are…
kiln-prerelease-check
Run the Kiln pre-release smoke test suite plus the standard CI checks (checks.sh), diagnose every prerelease test that broke (and why), and write a clean readable report with recommended actions. Read-only — it never edits code. Use when the user wants to validate a release candidate, run prerelease tests, or asks for…
release-digest
Post a "what's changed since the last release" recap to the release Slack channel for final QA. Groups merged PRs by author and classifies each as feature / bug fix / task. Use when the user wants a release recap, a changelog since the last tag, or to prep QA before cutting a release from main.
kiln-check-deprecation
Check Kiln's model list for deprecated or sunset models across all providers. Use when the user wants to find deprecated models, check model availability, audit the model list for stale entries, or mentions model deprecation/sunset/end-of-life.
kiln-check-finetune-deprecation
Check Kiln's fine-tunable model list for deprecated or unsupported base models. Use when the user wants to audit fine-tuning support, check if fine-tune base models are still valid, or mentions fine-tune model deprecation.
playwright
Look at Kiln's UI in a real browser, and run its end-to-end tests. Use when checking UI you are changing, taking a screenshot of the app, driving the app with playwright-cli, starting the dev sandbox with playwrightserver.sh, running or debugging npm run tests:e2e, or working with the seeded fixture project that gives…