Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add OutlineDriven/outline-driven-development --skill cost-reductiongit clone --depth 1 https://github.com/OutlineDriven/outline-driven-developmentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/outlinedriven/outline-driven-development/cost-reduction)<a href="https://agentmods.dev/skills/outlinedriven/outline-driven-development/cost-reduction"><img src="https://agentmods.dev/badge/skills/outlinedriven/outline-driven-development/cost-reduction/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/outlinedriven/outline-driven-development/cost-reduction"><img src="https://agentmods.dev/badge/skills/outlinedriven/outline-driven-development/cost-reduction.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 15 Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.Fix: Remove jailbreak framing that nullifies safety policies or restrictions. Skill content must not instruct the agent to ignore its guidelines or operate without guardrails.
- high Anti-Refusal · line 47 Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.Fix: Remove jailbreak framing that nullifies safety policies or restrictions. Skill content must not instruct the agent to ignore its guidelines or operate without guardrails.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.01253 |
| Opus 5 | $0.00015 | $0.00626 |
| Sonnet 5 | $0.00006 | $0.00251 |
| Haiku 4.5 | $0.00003 | $0.00125 |
Grade A, and why
cost-reduction scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- cost-reduction — 92% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 48 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cost reduction
Contract
| Field | Bound contract |
|---|---|
| Trigger | A measured cost surface needs one-change-at-a-time reduction under frozen guardrails. |
| Authority | Human-gated: asks the human once before any production billing/infra mutation; otherwise reversible local: runs the pre-registered gate batteries and writes only to an append-only experiment log; rollback is version control. No remote mutation. Prose consent, invocation consent, prior-run consent, and post-start discovery do not approve an effect; end the run on scope drift. |
| Side effect | Guardrail-safe measured cost reduction. Each proposed change is adopted with N=5 gate evidence or recorded dead with the measurement that killed it. |
| Done | The fixed budget target is reached without any guardrail regression, or every proposed change is resolved as adopted or dead. |
| Stop | no safe saving; no progress; blocked. Bound: exact approved billing/infra scope, budget target, guardrails, and pass cap. |
Inputs
- Approved scope (required): the billing or infrastructure surface to reduce, frozen before mutation.
- Budget target (required): the cost reduction goal.
- Guardrails (required): quality gates that must not regress: planted-defect catch rate, rejects-extra-features check, end-to-end scenarios, and blind A/B deliverable-parity comparison against the current config.
- Pass cap (required): the maximum number of rungs to test.
- Expensive-model baseline (required): the current behavior for every judgment point the workflow contains.
Procedure
- Bound the approved billing/infra scope, budget target, guardrails, and pass cap; freeze before mutation. For production billing/infra mutation, make one harness ask/question call before the run starts. End the run on scope drift. Done when: the bound is frozen and start approval is collected or the run ends.
- Pre-register each proposed cost-reduction change (the rung): name it, state the mechanism, expected dollar saving, and every judgment point it moves to a cheaper tier. Done when: the rung is pre-registered with name, mechanism, leverage, and every judgment point enumerated.
- For each moved judgment point, prove it is mechanical: deterministic, scriptable, or cheaply verifiable after the fact. If a judgment point cannot be proven mechanical, restructure it so the expensive model makes the decision once at plan time, route it back up through an explicit escalation rule at execution time, or kill the rung. "The cheap model usually gets it right" is not acceptance evidence because judgment failures are rare, have a high blast radius, and are largely invisible to pass/fail gates. Done when: every moved judgment point is proven mechanical, restructured, escalated, or the rung is killed.
- Confirm the rung preserves the workflow's thesis. A change that coarsens the fresh-context-per-task property or batches dispatches to save cost is counter-thesis and is barred without a maintainer reversal. Done when: the rung is confirmed thesis-preserving, or barred as counter-thesis.
- Run the N=5 gate battery: the quality gate (planted-defect catch rate over five runs, rejects-extra-features, end-to-end scenarios, and blind A/B deliverable parity with the current config) and a judgment audit that interrogates every adjudication event across the five runs and scores each against the expensive-model baseline. Any silently-absorbed judgment call, where a cheaper tier resolves what it should have escalated, fails the rung regardless of scenario verdicts. Any quality regression kills the rung. Done when: the N=5 gate battery is run with quality gate and judgment audit results collected.
- Re-attribute claims post-hoc from the measured gate results. Report the dollar effect as the measured range, not the pre-registered estimate. If the measured win belongs to a different change than the one tested, attribute it there and claim only what the tested change owns. Done when: claims are re-attributed to the measured results.
- Append the rung's outcome to the append-only experiment log: adopted with its gate evidence attached, or dead with the measurement that killed it. For a dead rung, record a standing bar against re-proposing it without a structurally different design. Done when: the experiment log entry is appended with outcome, evidence, and standing bar if dead.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · -12 tokens per session 8aaaa165e974
- 5d ago First seen · 48 lines · 43 tokens per session scan A d79a8d62c158
cost-reduction is a skill published in the GitHub repository OutlineDriven/outline-driven-development (52 stars, last pushed 3d ago), licensed Apache-2.0. It adds 31 tokens to every session and 1,253 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
consult-deployment
Use when the user asks to rank deployment platforms and stacks against their product with quantitative trade-offs. Not for source or remote mutation.
cost-reduction
Use when a measured cost surface needs one-change-at-a-time reduction under frozen guardrails. Not for speed-only optimization: use optimize.
gke-workload-security
Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (auditcluster.sh), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny…
cloud-architect
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost…
x-scorecard
OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
cis-aws-compute-2.14
Ensure EC2 Auto Scaling Groups Propagate Tags to EC2 Instances that it launches.