Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/pcx-wave/glean/gleaninnpx skills add pcx-wave/glean --skill gleaningit clone --depth 1 https://github.com/pcx-wave/gleanWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00062 | $0.01211 |
| Opus 5 | $0.00031 | $0.00606 |
| Sonnet 5 | $0.00012 | $0.00242 |
| Haiku 4.5 | $0.00006 | $0.00121 |
Grade A, and why
gleanin scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
2. `curl -sI` before declaring anything "not deployed." How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
gleanin
Rules from past failures. Apply every session.
Credentialed Write Gate
Rule:
- Before writing with ambient credentials, verify scope (
<tool> whoami,config view). - Exact-match created resource name against intent.
- On mismatch, roll back immediately.
- Never mark done when acceptance probe failed.
Check: grep -c "inoffensif\|harmless\|can delete\|not needed" in session transcript — zero for any failed write.
Delegation Preflight
Rule:
- Scan delegation payload against delegate's Known Limitations first.
- Verify with
git diff, not the delegate's[OK]lines. - On partial landing, name the limitation before hand-editing.
- Structural integrity check every delegate-touched file.
Check: git diff --stat HEAD after delegation — changed file count must match expected.
Device First Check
Rule:
- Search filesystem (
find,grep,ls) before asking the user. curl -sIbefore declaring anything "not deployed."- Syntax check + tail check before committing.
Check: grep -c "AskUserQuestion\|curl.*not.find\|edit.*then.*ask" in session transcript — near zero with this rule.
Reference First Porting
Rule:
- Read the reference before editing any formula or algorithm.
- Cite
file:lineper edit. - Apply supplied values verbatim before re-derivation.
Check: grep -rn "TODO\|FIXME\|guess\|maybe" <target-file> — zero after a port.
Protocol index
Trigger-loaded protocols. When a trigger matches the current task, Read the file before proceeding.
- Exact form first — literal search, decisive git comparison, file-borne payloads — Load this in any session that (a) greps source code, (b) makes claims about → read ~/distillation/artifacts/exact-form-first.md
- Hang-bisect protocol — trace before retry, never escalate timeouts blind — Load this whenever a script or pipeline invocation times out (exit 124), → read ~/distillation/artifacts/hang-bisect-protocol.md
- Reproduce the report first — locate what the user sees before defending what you did — Load this whenever a user disputes visible state: "your changes don't → read ~/distillation/artifacts/reproduce-report-first.md
- Route census before auth policy — classify every endpoint once, edit once — Load this whenever you are about to add or change authentication, API-key → read ~/distillation/artifacts/route-census-before-auth.md
- Single-file batch edit — plan the change-set, then edit once — Load this whenever a task requires 3 or more changes to the same file — → read ~/distillation/artifacts/single-file-batch-edit.md
- boundary-aware handoff — When dividing work between two or more models (or model sessions): → read ~/fable-build/rules/boundary-aware-handoff.md
- content-integrity tests — For data-driven products (games, rule engines, content systems): → read ~/fable-build/rules/content-integrity-tests.md
- contract-first interface — When building a system that runs across multiple targets (offline, online, → read ~/fable-build/rules/contract-first-interface.md
- cost-time-quality accounting — Every build produces a cost accounting artifact: → read ~/fable-build/rules/cost-time-quality-accounting.md
- cross-model relay — When routing build phases across multiple models: → read ~/fable-build/rules/cross-model-relay.md
- deterministic default — Use fixed seeds for all world/level generation: → read ~/fable-build/rules/deterministic-default.md
- effort setting by phase — When configuring a build phase, set effort level explicitly: → read ~/fable-build/rules/effort-setting-by-phase.md
- goal-verification-report loop — Replace step-based phase execution with a goal→report pattern for → read ~/fable-build/rules/goal-verification-report.md
- phase stage verification — When a phase spans significant work, split it into stages (1/2/3): → read ~/fable-build/rules/phase-stage-verification.md
- review findings accounting — Every code review produces a numbered list of findings. → read ~/fable-build/rules/review-findings-accounting.md
- safety overfit testing — For products that use LLM outputs (chatbots, content generators, agents): → read ~/fable-build/rules/safety-overfit-testing.md
- thought-partner interview — Before writing ANY spec, template, or brief, interview the model as a → read ~/fable-build/rules/thought-partner-interview.md
- vision self-correction loop — When the build produces visual output (UI, 3D scenes, renders, screenshots): → read ~/fable-build/rules/vision-self-correction.md
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 83 lines · 62 tokens per session scan A 08437112a33d
gleanin is a skill published in the GitHub repository pcx-wave/glean (2 stars, last pushed 26d ago), licensed MIT. It adds 62 tokens to every session and 1,211 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fabulous
Fable 5 behaviour for Opus-family models - working doctrine injected at session start, plus deep reference playbooks (planning, debugging, verification, review, orchestration...) loaded per task. Also invocable manually via /fabulous.
terraform-skill
Use when working with Terraform or OpenTofu - creating modules, writing tests (native test framework, Terratest), setting up CI/CD pipelines, reviewing configurations, choosing between testing approaches, debugging state issues, implementing security scanning (trivy, checkov), or making infrastructure-as-code…
xlsx
当电子表格文件是主要输入或输出时使用此技能。这意味着用户想要:打开、读取、编辑或修复现有的 .xlsx、.xlsm、.csv 或 .tsv 文件(例如添加列、计算公式、格式化、制图、清理混乱数据);从头创建新的电子表格或从其他数据源创建;或在表格文件格式之间进行转换。当用户通过名称或路径引用电子表格文件时特别触发——即使是随意提及(如"我下载目录里的 xlsx")——并且想对其进行操作或从中生成内容。也适用于将混乱的表格数据文件(格式错误的行、错位的表头、垃圾数据)清理或重构为规范的电子表格。交付物必须是电子表格文件。当主要交付物是 Word 文档、HTML 报告、独立 Python 脚本、数据库管道或 Google Sheets…
terraform-cli-setup
Terraform CLI 安装与初始化技能。当用户本地未安装 Terraform 时自动完成安装,确保 terraform 命令可用并能执行 init/validate。不负责 Provider 凭证配置,凭证在实际使用时由 terraform-skill 引导。.
copilot-history-ingest
Ingest GitHub Copilot CLI session history into an Obsidian wiki as distilled knowledge pages. Use this skill when the user wants to capture their Copilot CLI sessions into a personal wiki — extracting architecture decisions, debug notes, and patterns into searchable Obsidian pages. Triggers on phrases like "ingest my…
obsidian-layout-adjustment
Workflow for working with the user on changing how Obsidian looks using CSS snippets. Use this whenever the user asks to restyle Obsidian, tune a vault's visual layout, adjust tabs, sidebars, note surfaces, properties, backlinks, graph panes, file explorer rows, icons, links, shadows, active states, or CSS snippets.…