Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add paleo/alignfirst --skill paseo-alignfirst-workspacegit clone --depth 1 https://github.com/paleo/alignfirstWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/paleo/alignfirst/paseo-alignfirst-workspace)<a href="https://agentmods.dev/skills/paleo/alignfirst/paseo-alignfirst-workspace"><img src="https://agentmods.dev/badge/skills/paleo/alignfirst/paseo-alignfirst-workspace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/paleo/alignfirst/paseo-alignfirst-workspace"><img src="https://agentmods.dev/badge/skills/paleo/alignfirst/paseo-alignfirst-workspace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00290 |
| Opus 5.5 | $0.00016 | $0.00116 |
| Sonnet 5.5 | $0.00008 | $0.00058 |
| Haiku 4.5 | $0.00004 | $0.00029 |
Grade A, and why
paseo-alignfirst-workspace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Paseo AlignFirst Workspace
Prerequisites
First, you need:
- an existing workspace or worktree with its branch. Follow the usual procedure. If you don't know, do not invent, ask the user.
- the current Paseo project ID (use
paseo project ls --jsonif you don't have it).
Register a worktree as a Paseo workspace
paseo workspace create \
--isolation=local \
--project "<project-id>" \
--path="<absolute-worktree-path>" \
--title="<branch-name>"
Keep the = characters. Replace the placeholders with the actual values.
Archive a Paseo workspace
Before removing a workspace or worktree, archive the workspace in Paseo: paseo workspace ls --json lists the workspace IDs. Then:
paseo workspace archive <workspace-id>
Archiving keeps a registered worktree on disk. Remove it afterwards through the usual procedure.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 41 lines · 39 tokens per session scan A 4566dafa0e23
paseo-alignfirst-workspace is a skill published in the GitHub repository paleo/alignfirst (87 stars, last pushed yesterday), licensed CC0-1.0. It adds 39 tokens to every session and 290 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
Other skills, from other repositories
git-workflow
Use when implementation work is about to touch code (branch before the first commit), when a built task needs to ship as a pull request, when defining how branches, commits, and PRs map to plan tasks, or when parallel agents share one repository. Triggers on "create a branch", "commit this", "open a PR", "ship this…
moai-ref-git-workflow
Git workflow patterns, branch strategies, conventional commits, and PR templates reference for git operations. Agent-extending skill that amplifies manager-git expertise with production-grade git workflow patterns. NOT for: code implementation, testing, architecture design, documentation content.
git-commit-writer
Trigger when the user asks to write a commit message, generate a commit from staged changes, review a diff before committing, or says "/commit". Reads git diff --staged and produces an opinionated, convention-matching commit message.
commit-message
Generate a clean, conventional commit message from a description of your changes.
validate-changes
Evaluate staged changes using LLM-as-a-Judge before committing.
signing-preflight
Before the first commit of a session, check that commit signing will work — the key is loaded and unlocked — and ask the operator to unlock it once, up front, instead of discovering it after a hundred unsigned commits. Never disables signing silently, never re-signs history without asking. Use at the start of…