Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add panaversity/ksor --skill add-sourcesgit clone --depth 1 https://github.com/panaversity/ksorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/panaversity/ksor/add-sources)<a href="https://agentmods.dev/skills/panaversity/ksor/add-sources"><img src="https://agentmods.dev/badge/skills/panaversity/ksor/add-sources/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/panaversity/ksor/add-sources"><img src="https://agentmods.dev/badge/skills/panaversity/ksor/add-sources.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.01814 |
| Opus 5 | $0.00043 | $0.00907 |
| Sonnet 5 | $0.00017 | $0.00363 |
| Haiku 4.5 | $0.00009 | $0.00181 |
Grade A, and why
add-sources scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 137 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Add sources
Getting knowledge into the record is the everyday work of this project. The
rules that make it governed are in AGENTS.md → "Writing knowledge" (shape,
frontmatter, audience, draft until the owner approves, copy values exactly,
never invent). This file is the ACT: how a source becomes a document that
passes those rules, whatever kind of source it is.
The source is one of two kinds — and usually both
A file — PDF, Word, slides, HTML, a Notion export, pasted text — is knowledge that already exists somewhere. Your job is to move it without losing anything: convert it, structure it, and prove every load-bearing value survived.
A person — "it's just how we do it" — is knowledge that exists nowhere yet. Your job is to draw it out by asking, write it as the record and not as a transcript, and record only what they confirm.
A real owner has both: the policy PDF, and the exception everyone knows that the PDF never mentions. So the person step runs EVERY time, after the file: "what does this not cover?" is the question that finds the pages nobody wrote.
When the source is a file
-
Extract the text first, into a scratch file outside
knowledge/. The extraction is what you convert from and what you verify against, so it has to be a file you can grep, not something you remember reading:format extractor PDF pdftotext -layout in.pdf /tmp/in.txt(poppler)docx / odt / html / epub pandoc in.docx -t gfm -o /tmp/in.mddocx on macOS textutil -convert txt in.docx -output /tmp/in.txt(built in)anything markitdown in.pdf > /tmp/in.md, if installedNotion / Obsidian export already markdown — no extraction needed; the file IS the extraction
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +45 lines · +30 tokens per session 3f818f52d5fe
- 10d ago First seen · 92 lines · 56 tokens per session scan A 34aacba878df
add-sources is a skill published in the GitHub repository panaversity/ksor (152 stars, last pushed 6d ago), licensed Apache-2.0. It adds 86 tokens to every session and 1,814 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
google-drive-knowledge-bank
Build and query a knowledge bank from Google Docs meeting notes. Use when the user wants to ingest meeting notes from Google Drive, or when answering questions about previously ingested meeting notes. Trigger on phrases like "ingest my meeting notes", "load meeting notes from folder", "what did we discuss about X"…
foundry-hosted-agent-validation
Step-by-step process for validating a Python Foundry hosted agent sample (under python/samples/04-hosting/foundry-hosted-agents/) end to end — running it locally (native runtime and azd ai agent run) and after deploying it to an Azure AI Foundry project with azd. Use this when asked to validate a hosted agent sample.
agentmemory-agents
How agentmemory wires into host coding agents via the connect command. Use when installing agentmemory into a specific agent, when asked which agents are supported, or when a connect adapter writes the wrong config path.
typescript-providers
Implement, modify, test, or document TypeScript provider packages under ts/packages/providers, including framework adapters for OpenAI, Anthropic, Google, LangChain, Mastra, Vercel, LlamaIndex, Cloudflare, and Claude Agent SDK. Use for provider-specific TS work; do not use for core-only changes.
azure-ai-formrecognizer-java
Azure AI Document Intelligence SDK for Java (com.azure:azure-ai-documentintelligence). Use for extracting text, tables, key-value pairs from documents, receipts, invoices, IDs, or building custom document models. Triggers: "document intelligence java", "form recognizer java", "extract text from PDF java", "OCR…
last30Days
Resolve "last30Days" to a concrete ISO date range relative to your run time — a rolling 30-day window ending today. Returns inclusive civil dates plus exact UTC instants so you have temporal context without computing dates by hand. Read-only: no writes, no network. Use before a "last 30 days" / trailing-month task…