Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add orwa-mahmoud/nightshift --skill install-nightshiftgit clone --depth 1 https://github.com/orwa-mahmoud/nightshiftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/orwa-mahmoud/nightshift/install-nightshift)<a href="https://agentmods.dev/skills/orwa-mahmoud/nightshift/install-nightshift"><img src="https://agentmods.dev/badge/skills/orwa-mahmoud/nightshift/install-nightshift/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/orwa-mahmoud/nightshift/install-nightshift"><img src="https://agentmods.dev/badge/skills/orwa-mahmoud/nightshift/install-nightshift.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.00814 |
| Opus 5.5 | $0.00010 | $0.00326 |
| Sonnet 5.5 | $0.00005 | $0.00163 |
| Haiku 4.5 | $0.00003 | $0.00081 |
Grade A, and why
install-nightshift scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Install Nightshift
Nightshift is a plugin, not a standalone skill. Its skills call a bundled runtime and depend on
hooks: the clock-out gate, the guard and the usage accounting. A copied skill folder carries none
of that, so this skill installs the real plugin from its marketplace,
https://github.com/orwa-mahmoud/nightshift, on each host the user wants it on.
1. Read what is installed
Check each host that exists on this machine. A host whose CLI is not on PATH and whose folder is
absent is not installed. Skip it.
| Host | Present when | Nightshift installed when |
|---|---|---|
| Claude Code | claude runs |
claude plugin list shows nightshift@nightshift |
| Codex | codex runs |
codex plugin list shows a nightshift@… entry installed |
| Cursor | ~/.cursor exists |
~/.cursor/plugins/cache/ holds a folder with nightshift in its name |
On Windows, ~ is %USERPROFILE%. Report each host on one line: absent, present without
Nightshift, or present with Nightshift and its version.
One copy per host. Codex can hold two Nightshift copies, for example a directory install and
the marketplace one. Two enabled copies both run their hooks, and Start refuses the shift. When a
host shows two, name both with their versions, keep the nightshift@nightshift copy, and give the
user the command to remove the other, such as codex plugin remove nightshift@<other-marketplace>.
Never add a copy beside an existing one.
2. Install on this host first
Install on the host you are running in, unless it already has Nightshift. For an older version, update it instead.
-
Claude Code
claude plugin marketplace add orwa-mahmoud/nightshift claude plugin install nightshift@nightshiftUpdate:
claude plugin marketplace update nightshift, thenclaude plugin update nightshift@nightshift. -
Codex
codex plugin marketplace add orwa-mahmoud/nightshift codex plugin add nightshift@nightshiftUpdate:
codex plugin marketplace upgrade nightshift.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 81 lines · 26 tokens per session scan A 61113a306aeb
install-nightshift is a skill published in the GitHub repository orwa-mahmoud/nightshift (78 stars, last pushed 4d ago), licensed MIT. It adds 26 tokens to every session and 814 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-23.
Other skills, from other repositories
civic-publish-gate
Run deterministic source, citation, freshness, privacy, meeting-certainty, accessibility, correction-state, and human-approval checks before civic publication.
civic-newsroom-plan
Plan an evidence-bound civic newsroom workflow with provenance, privacy, citation, correction, accessibility, and human publication gates.
editorial-correction-review
Review a challenged civic claim and prepare a visible, append-only correction or withdrawal with downstream propagation evidence.
local-resource-index
Index cited local emergency, transit, and human-service resources with authority, freshness, correction, and takedown controls.
generate-roadmap
Generate a prioritized improvement roadmap to increase AI readiness. Trigger phrases: "generate roadmap", "what should I improve", "how to reach the next level", "autonomy improvement plan", "what are my next steps for AI readiness" Optional argument: [target-level] (L1-L5, defaults to next level above current).
assess-verification
Assess the current verification maturity of a codebase and identify gaps. Trigger phrases: "assess verification", "verification maturity", "how is my testing", "verification strategy assessment", "what is my verification coverage", "audit my tests" Optional argument: [path-to-codebase] (defaults to current directory).