Borrowing it
Nothing to install: this file belongs to philipyaz/cos. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/philipyaz/cos/main/.claude/skills/cos-setup/SKILL.mdgit clone --depth 1 https://github.com/philipyaz/cosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/philipyaz/cos/cos-setup)<a href="https://agentmods.dev/skills/philipyaz/cos/cos-setup"><img src="https://agentmods.dev/badge/skills/philipyaz/cos/cos-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/philipyaz/cos/cos-setup"><img src="https://agentmods.dev/badge/skills/philipyaz/cos/cos-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00167 | $0.12829 |
| Opus 5.5 | $0.00067 | $0.05132 |
| Sonnet 5.5 | $0.00033 | $0.02566 |
| Haiku 4.5 | $0.00017 | $0.01283 |
Grade C, and why
cos-setup scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s "$BOARD_URL/api/addons" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{const a=JSON.parse(s).addons.find(x=>x.id==="nutrition");process.exit(a&&a.enabled===true?0:1)})' && echo "add-on enabled Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s "$GUARD_SIDECAR_URL/healthz" How it starts
The opening of the file, as written. The whole thing — 600 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cos — full first-run setup (orchestrator)
This is the root runbook that brings the whole system up on a fresh machine. It does not re-implement the component skills — it sequences them in the one order that works, because each step produces what the next one needs: the vault must exist before the MCP can point at it and before backup has something to protect; the guard model must be configured before the guard bridge can report a real classifier; all the bridges + sidecars must be wired before backup can snapshot live, populated stores. Run the four sub-skills in order, stop at each CHECKPOINT, and only advance when it passes. End with the § End-to-end verification, then finish with Step 5 — operator automation, which is what makes the system run itself.
Every shell step below begins with the loader line
source "$(git rev-parse --show-toplevel)/config/load-config.sh", which exports $REPO_ROOT
(git-derived), $BREW_PREFIX, $LAUNCH_AGENTS_DIR, $COWORK_CONFIG, $VAULT_DIR, $BOARD_URL,
and the bridge/sidecar ports + URLs — use those instead of hardcoding paths, ports, or your
username. The only value still derived inline is $U=$(id -u), which launchctl needs at runtime.
Prerequisites checklist (gather these BEFORE step 1)
- node + npm (Homebrew) — bridges, vault Agent SDK, backup.
node -v. - supergateway —
npm install -g supergateway. The stdio→HTTP bridge for Claude Code. - uv (Homebrew:
brew install uv) — runs the two Python sidecars (search:8008, guard:8009); self-provisions each venv on first launch. - hf CLI (
pip install -U huggingface_hub/brew install huggingface-cli) + a Llama license — only if you want the real gated guard model (step 2). The heuristic-only fallback needs none of this. - ANTHROPIC_API_KEY (
sk-ant-…) inconfig/secrets.env— the vault bridge embeds the Agent SDK and makes outbound Anthropic calls; it is the only bridge that needs a key, and the key goes in this one gitignored file (the launch wrapper loads it), never in the plist. - A PRIVATE GitHub backup repo + a recovery passphrase — step 4. Encrypted, off-site.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +8 lines b2783e6ed5d8
- 1mo ago First seen · 592 lines · 167 tokens per session scan C eda5bfa65013
cos-setup is a skill published in the GitHub repository philipyaz/cos (4 stars, last pushed 2d ago), licensed MIT. It adds 167 tokens to every session and 12,829 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
wiki-lint
Health-check a wiki vault. Finds orphan pages (no inbound links), dead wikilinks (point to non-existent pages), missing frontmatter fields, stale claims, empty sections, and pages absent from catalog.md. Produces a structured report with severity tiers and proposes concrete fixes — but does not auto-apply them unless…
pulse
Weekly read of what is actually getting built or done, per work-block — from the tracker, the code, and the docs. State of the work, not the stream of events. Distinct from the digest, which is signal since the last run.
meta-sync-template
Interactive flow to propagate the reference (.template) vault's plugins, snippets, and root docs to one or more configured vaults. Reads the active router config, lists every vault with online status, flags vaults missing obsidian-local-rest-api upfront, lets the user pick all or a subset, and optionally re-clones…
save
File the current Claude conversation (or a specific insight from it) as a structured wiki note. Auto-detects the right type (decision, answer, session-log, technique, ADR), writes appropriate frontmatter, places the file in the correct wiki folder, and updates catalog.md, journal.md, hot.md. Use when the user says…
wiki-export
Export a vault's wiki either as a single portable file (llms.txt or llms-full.txt per the llmstxt.org standard) or as an OKF knowledge bundle (Google's Open Knowledge Format v0.1 — a shareable directory of markdown files any AI agent can consume). Use when the user says "export my wiki", "make an llms.txt", "share my…
wiki-query
Answer a question using ONLY the existing wiki vault as the knowledge base — no web search, no general LLM knowledge. Reads hot.md first (cheap recent context), then catalog.md to navigate, then drills into specific pages, then optionally semantic-searches the wiki, and synthesizes an answer with citations. Use when…