Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ooooooooooooooooooop/agent-tools --skill task-mode-routergit clone --depth 1 https://github.com/ooooooooooooooooooop/agent-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/task-mode-router)<a href="https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/task-mode-router"><img src="https://agentmods.dev/badge/skills/ooooooooooooooooooop/agent-tools/task-mode-router/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/task-mode-router"><img src="https://agentmods.dev/badge/skills/ooooooooooooooooooop/agent-tools/task-mode-router.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00088 | $0.00905 |
| Opus 5.5 | $0.00035 | $0.00362 |
| Sonnet 5.5 | $0.00018 | $0.00181 |
| Haiku 4.5 | $0.00009 | $0.00090 |
Grade A, and why
task-mode-router scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
任务模式路由
目标
选择能够控制实际风险的最轻执行模式。只负责分类和路由，不代替后续 Skill 执行，也不因为分类而自动写入文件。
分类
小型任务
单文件或单点修改、目标明确、风险低、容易验证和回滚。
处理：直接做最小修改，不引入新抽象、依赖或长流程。
只读审计
用户要求检查、比较、解释、审查或报告状态，未授权文件、仓库、外部系统或配置写入。
处理：只收集证据；不生成额外报告文件，不同步、不清理、不修改策略或配置。
中型任务
涉及多个文件或需要适度判断，可能影响行为，且需要验证。
处理：给出短计划，说明影响面和风险，完成修改并报告验证与回滚方式。
大型任务
多文件功能、架构重构、规则系统变更、长期工作流或需要验收标准的任务。
处理：先明确目标、非目标、约束、影响和验收标准；判定为大型后，主会话立即触发硬熔断（禁止连续本地探查/改写），下一动作必须输出结构化 Brief 并拉起独立 Worker（Subagent）执行。
高风险任务
安装 Skill、MCP、CLI、插件或 hooks；修改用户级/全局配置；删除、移动或改变权限；运行不可信代码；使用浏览器登录状态或敏感页面。
处理：先审计来源、命令、写入路径、权限、上传风险和回滚方式；没有明确授权时停止。
路由顺序
按以下优先级判断：
- 只读请求保持只读，不因“顺便修复”而扩大范围。
- 高风险写入优先于任务规模判断。
- 再区分小型、中型和大型执行深度。
- 大型任务只有在确实需要可恢复锚点、检查点和交接记录时才使用
unified-taskflow。
低风险可逆动作偏好（LOW-RISK REVERSIBLE ACTION BIAS）
同时满足：目标明确、下一步可逆、验证容易 —— 优先 DO，而不是 ASK / PLAN MORE / AUDIT MORE。是否需要询问以 clarify-before-change 意图解析策略为准（可逆假设记录即推进）；是否停止以 execution-discipline 合法停止策略为准。高风险与安全边界判断继续优先于本偏好。
Skill 组合
- 本 Skill 只做模式分类。
- 有实质歧义时交给
clarify-before-change。 - 确定要修改时交给
minimal-implementation控制变更预算。 - 只有大型、跨阶段且需要恢复记录时才交给
unified-taskflow。 - 依赖关系只表示建议组合，不代表自动安装或自动执行。
输出契约
输出以下字段：
模式：small | audit | medium | large | high-risk
依据：触发该模式的事实
允许动作：当前模式可以做什么
禁止动作：当前模式明确不能做什么
下一步：需要调用的 Skill 或最小执行路径
如果证据不足，只指出缺失信息；不要用猜测替代风险分类。
验证
分类完成后检查：模式是否与用户授权一致、是否遗漏高风险写入、是否误把只读审计变成了修改任务。相关示例见 multi-file-change.md。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 82 lines · 88 tokens per session scan A a1bef822dc0c
task-mode-router is a skill published in the GitHub repository ooooooooooooooooooop/agent-tools (3 stars, last pushed 1mo ago), licensed MIT. It adds 88 tokens to every session and 905 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
analyze
Analyze a legacy app in any language before rewriting it in Elixir: inventory, features as goals, why each mechanism exists, runtime topology, external contracts. Use to start or refresh a rewrite.
session-deep-dive
Deep qualitative analysis of high-signal sessions. Spawns subagents with v2 template, synthesizes patterns, compares against known findings. Use after /session-scan.
brainstorm
Brainstorm Elixir/Phoenix features — explore ideas, compare approaches, gather requirements. Use when vague idea, not sure how to approach, or want to discuss before plan.
plugin-dev-workflow
Guide plugin development workflow — editing skills, agents, hooks, or eval framework in this repo. Use when modifying files in plugins/elixir-phoenix/, lab/eval/, or lab/autoresearch/. Ensures changes pass eval, lint, and tests before committing.
elixir-idioms
OTP/BEAM patterns and Elixir idioms — GenServer, Supervisor, Task, Registry, pattern matching, with chains, pipes. Use when designing processes or debugging BEAM issues.
tidewave-integration
Tidewave MCP runtime tools — debugging, smoke testing, live state inspection, SQL queries, hex docs. Use when evaluating code in a running Phoenix app.