mold

mold is a skill for Claude Code, Codex from paulnsorensen/easy-cheese. It costs 182 tokens per session (3,436 once invoked), scanned A, original, MIT.

An interactive design workflow for turning an unclear idea or partly formed feature into an approved software specification.

In plain words
What is it for?
Use it to shape features, APIs, or product ideas, compare design options, resolve assumptions, and produce a specification ready for development.
Why use it?
It helps expose missing requirements and important choices before implementation begins, using discussion, evidence, and prototypes where needed.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions subagents.

Part of the easy-cheese plugin — 18 skills shipped together

not rated 18repo changed today A scan Socket: passSnyk: passSkillSpector: pass 182 tokens original MIT

Good fit Use it to shape features, APIs, or product ideas, compare design options, resolve assumptions, and produce a specification ready for development.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/paulnsorensen/easy-cheese/mold
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add paulnsorensen/easy-cheese --skill mold
Clone the repo
git clone --depth 1 https://github.com/paulnsorensen/easy-cheese

Made for: Claude Code, Codex.

Or install easy-cheese, the plugin that ships this one along with the rest of its 18 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mold

README.md
[![agentmods](https://agentmods.dev/badge/skills/paulnsorensen/easy-cheese/mold/github.svg)](https://agentmods.dev/skills/paulnsorensen/easy-cheese/mold)
Your own site
<a href="https://agentmods.dev/skills/paulnsorensen/easy-cheese/mold"><img src="https://agentmods.dev/badge/skills/paulnsorensen/easy-cheese/mold/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mold

Your own site · 80×15
<a href="https://agentmods.dev/skills/paulnsorensen/easy-cheese/mold"><img src="https://agentmods.dev/badge/skills/paulnsorensen/easy-cheese/mold.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 182 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,436 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 12 Jun 2026
  • Snyk pass 29 May 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00182 $0.03436
Opus 5 $0.00091 $0.01718
Sonnet 5 $0.00036 $0.00687
Haiku 4.5 $0.00018 $0.00344

Measured today against content hash efd4923fca2a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

mold scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/mold/SKILL.md · 153 lines

How it starts

The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/mold

Ceremony scales to the job. The Bounds pass picks one of three tiers from references/tiers.md: Quick writes a one-confirm mini-spec, Light runs only the dialogue modes the open forks need, and Full runs the whole Flow below. /cheese's tier-1 escalation enters mini-spec mode with no confirm; see ## Agent-invoked mini-spec mode.

Flow

  1. Bounds pass — open the Goal / Decided / Asking / [AGENT-DECIDED] ledger with the goal pinned as one sentence; only an explicit user fork changes it. Map every input's goals and non-goals as one [AGENT-DECIDED] line; ask the user only when the goal is genuinely unknown or a leverage trigger fires. Run the shape check, then announce the tier with its reason (references/tiers.md). Quick exits here: one fast confirm, then ## Agent-invoked mini-spec mode. Upgrade the tier whenever the evidence changes; never downgrade silently.
  2. Route — choose the secondary mode from references/modes.md, announce it, and correct false premises first.
  3. Dialogue — consequential forks are the user's to pick. A fork is consequential per the leverage line in ../age/references/voice.md. Every other fork is [AGENT-DECIDED]. Supply options, trade-offs, and evidence before you ask. Ground each critical claim through code, the Validate Cycle, or a Prototype Cycle. Resolve every contradiction. Render the decision map after three consecutive fork questions, or on request.
  4. Sketch — For work across modules or with a new public interface, run references/shape-check.md. Bind identity and role nouns to code referents. Record the Placement block; no bodies.
  5. Plan for approval — run the fresh-context fork-coherence taste test with python3 skills/mold/scripts/mold.pyz taste-test and persist its digest-bound pass; a failure reopens only named forks, and the third failed verdict stops. Light with one expected curd stops here: no planner, and the handoff is /cook --auto <spec-path>. Otherwise dispatch a typed PlannerRequest, validate its PlannerResultWriterView (one retry, then stop before the handshake), normalize on the host, and persist only the typed PlannerResult and CurdPlan. A legacy projection needs an explicit migration request and must be lossless or UnsupportedProjection. Present the plan's semantic curds and waves at the handshake. See references/curdle.md § "Pre-approval typed planner dispatch".
  6. Two-key handshake — Before extraction, the user and agent must agree to the draft spec and displayed typed plan. The user provides an explicit verb. The agent performs a coherence self-check. Neither key changes nor disappears. See references/handshake.md.
  7. Curdle — Resolve the durable spec path with SPEC=$(python3 skills/mold/scripts/mold.pyz artifact-path specs <slug>). Phase one writes the local artifact and write-ahead prepared state before any external call. It writes the approved spec at "$SPEC". It also writes the host-validated PlannerResult and CurdPlan. It also writes local issue drafts and the session's non-obvious decisions as durable ADRs. Phase two publishes approved follow-ups. Retain the prepared recovery state when an external capability is unavailable or publication fails. Phase two reconciles their state and references into the durable spec before any handoff.
  8. Publish and hand off — after reconciliation, run python3 skills/mold/scripts/mold.pyz curd-count. Then publish the approved CurdPlan with python3 skills/mold/scripts/mold.pyz publish and keep the returned HandoffPointer path; Light with one curd skips publish and hands /cook --auto <spec-path>. Prompt through ## Handoff. Dispatch only the user's non-stop selection.

Read the full file on GitHub · 153 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +4 tokens per session efd4923fca2a
  2. 3d ago Changed · -2 lines · +27 tokens per session 53c7fb87e31a
  3. 10d ago First seen · 155 lines · 151 tokens per session scan A 0a3be56b0141

Subscribe to this mod's changes

mold is a skill published in the GitHub repository paulnsorensen/easy-cheese (18 stars, last pushed today), licensed MIT. It adds 182 tokens to every session and 3,436 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.