Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add optimiziramsi/skills --skill relaygit clone --depth 1 https://github.com/optimiziramsi/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/optimiziramsi/skills/relay)<a href="https://agentmods.dev/skills/optimiziramsi/skills/relay"><img src="https://agentmods.dev/badge/skills/optimiziramsi/skills/relay/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/optimiziramsi/skills/relay"><img src="https://agentmods.dev/badge/skills/optimiziramsi/skills/relay.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00173 | $0.05985 |
| Opus 5.5 | $0.00069 | $0.02394 |
| Sonnet 5.5 | $0.00035 | $0.01197 |
| Haiku 4.5 | $0.00017 | $0.00598 |
Grade A, and why
relay scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 331 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Relay — the primary chat of a pair-programming-by-worktree session
The human and this chat (the primary) share ONE working worktree + branch. The human edits
files there and leaves comments — their reference of "what is being addressed". The primary
turns comments into topics and drives each through a sub chat running the worktree
skill on its own worktree. Work lands on <integration> only through that
skill's gate, in the sub chat, approved by the human there. The shared branch is reference
only: nothing on it ever reaches <integration> directly, and it is deleted when the relay ends.
<integration> / <protected> resolve exactly as in the worktree skill (GIT_GUARD_INTEGRATION_BRANCH
/ GIT_GUARD_PROTECTED_BRANCH, else probe and confirm). Everything here assumes the Claude desktop
app's session tools (start_session, SendMessage, archive_session, set_session_model,
set_session_effort, Monitor); without them, the primary can only prepare briefs for the human
to paste.
Voice
Same as the worktree skill: silent execution, terse required beats. The required beats here are: the start report · a topic proposal / question · a spawn report (slug + session) · a land report (what landed, what was stripped, what is still in flight) · the close report. One status line for everything in flight — never a list of the sub chats' pending questions.
Start — the primary's gate
/relay loaded → this chat is the primary. Before anything else:
- Prove the shared worktree:
pwdunder the worktrees dir (never the main checkout);git rev-parse --abbrev-ref HEAD= this worktree's own branch — any name the app gave it (typicallyfeature/relay-<topic>-<hash>; the app names worktree branches, never rename it) — that is neither<integration>nor<protected>; cut off<integration>(fork-point compare as in the worktree skill). That branch is<relay-branch>below. Mismatch → HARD STOP, hand the human a restart prompt (new session, worktree ON, base<integration>). - Check the models:
RELAY_PRIMARY_MODELSis the preference list for this chat,RELAY_SUB_MODELSfor sub chats — bothmodel@effortlists, first available wins (echo $RELAY_SUB_MODELS; defaults in § Settings). If this chat is not running the first entry it can, say so in one line; the human picks the model in the app. Run at the highest effort the list allows: a sub chat starts at or below the primary's own model/effort, and lifting it afterwards (§ Spawn) costs the human one confirmation per sub chat. - Write
.agent/relay.mdin the shared worktree (create or resume): the topic,<relay-branch>,<integration>, a## Topicstable —slug · session · branch · status · files(status:proposed/in flight/landed/done), and## Watcher(state dir, armed-until). Commit it as the single evolving state commit (§ The shared branch) — it is never landed, it dies with the branch. - Check the landing wiring once:
git worktree list— if<integration>is checked out in the main checkout, every sub chat's land is refused the moment that checkout is dirty, and the primary can do nothing about it but report. Say so in one line (the fix is the worktree skill's one-time_integrationworktree); a sub chat blocked on a dirty<integration>checkout is a one-line report to the human, never a reason to touch that tree. - Keep the watcher's state out of git: append
.agent/relay-watch/to$(git rev-parse --git-common-dir)/info/exclude(never to a tracked.gitignore). - Take stock of what is already there: read
git diff HEADyourself, thenrelay-watch --seed <worktree> .agent/relay-watchso the watcher reports only what the human writes from now on — otherwise its first tick floods you with every pre-existing comment, your own notes included. Existing comments are the backlog: list them as topic candidates in one message (file · count · gist) and let the human pick; never one question per file. - Arm the watcher (§ Watcher) and report: path · branch ·
<integration>· models · "watching".
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +7 lines 2cd0c6ee0048
- 12d ago Changed · +35 lines · -1 tokens per session 524f13951cca
- 14d ago Changed · +2 lines 558134cfa77f
- 16d ago First seen · 287 lines · 174 tokens per session scan A 82d2741af7b7
relay is a skill published in the GitHub repository optimiziramsi/skills (2 stars, last pushed 3d ago), licensed MIT. It adds 173 tokens to every session and 5,985 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
relay compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| relayoptimiziramsi/skills | Skill | 2 | 3d ago | MIT | A | 173 | Claude Code |
| merge-batchdiegosouzapw/OmniRoute | Skill | 85k | 3d ago | MIT | A | 46 | Claude Code |
| prowler-commitprowler-cloud/prowler | Skill | 15k | today | Apache-2.0 | A | 44 | Claude Code, Codex |
| gh-auth-isolationgithub/gh-aw | Skill | 5.6k | today | MIT | A | 20 | Claude Code, Codex |
| github-skillzeenie-ai/OpenCompany | Skill | 1.1k | yesterday | MIT | A | 51 | Claude Code |
| comet-githubrpamis/comet | Skill | 3.3k | yesterday | MIT | A | 72 | Claude Code, Codex |
| re0-mergeLilMGenius/paperthin | Skill | 1.4k | today | MIT | A | 51 | Claude Code, Codex |