Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add philipyaz/cos --skill reminders-reviewgit clone --depth 1 https://github.com/philipyaz/cosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/philipyaz/cos/reminders-review)<a href="https://agentmods.dev/skills/philipyaz/cos/reminders-review"><img src="https://agentmods.dev/badge/skills/philipyaz/cos/reminders-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/philipyaz/cos/reminders-review"><img src="https://agentmods.dev/badge/skills/philipyaz/cos/reminders-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00232 | $0.07690 |
| Opus 5 | $0.00116 | $0.03845 |
| Sonnet 5 | $0.00046 | $0.01538 |
| Haiku 4.5 | $0.00023 | $0.00769 |
Grade A, and why
reminders-review scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
It writes to the board **only** through the **`board`** MCP — never `bash`/`curl` How it starts
The opening of the file, as written. The whole thing — 411 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Reminders → Review (the open-reminder sweep)
This skill keeps the board's reminders list honest. Reminders are lightweight nudges — CHECK this, DO that, be READY for the parcel — and unlike messages or cases they have no channel that clears them: nothing marks a reminder done just because the parcel arrived, the deadline passed, or you quietly decided not to apply. So they pile up. This sweep is the counter-force: it walks every open reminder, works out whether the nudge has served its purpose, and closes the ones that have — by completing (it got done / happened) or dismissing (it's no longer relevant) — so what's left is genuinely still-actionable.
It writes to the board only through the board MCP — never bash/curl
(Cowork's sandbox blocks outbound HTTP; the tools exist for exactly this). The board
is a state machine; YOU are the intelligence. The board just lists, reads, and flips
the status of reminders deterministically — it has no notion of "this one is stale."
Judging closeability is entirely your job here, from the context the reads give
you. The only writes this skill makes are complete_reminder,
update_reminder {status:"dismissed"}, and — for the filtered-mail digest (STEP 5) —
resolve_triage_decision; it never creates, links, or deletes a reminder (that's the
reconcilers' job, and hard-delete is nobody's job in this sweep).
Guardrail 1 — overdue is NOT the same as done. A passed due date, or a nudge that's sat for weeks, is a prompt to ASK, not a licence to close. "Submit the meter readings by Fri" going overdue might mean you did it — or that you still owe it and it's now urgent. Only auto-close when the completion is PROVEN by concrete state (a checklist fully checked, a linked case in a done/closed lane, a one-shot delivery/event whose date has clearly passed). When "done" is merely inferred from age, propose it or leave it as NEEDS-YOU — never silently flip it.
Guardrail 2 — the human's hand wins, and a reminder carries no author. Unlike a case, a reminder has no
human/agentattribution and no manual-actions block, so you cannot tell whether the user is deliberately keeping one open. Treat that uncertainty conservatively: auto-close only the PROVEN-done set (Guardrail 1); route every inferred-stale close — age, a lapsed decision, a cold FYI — through approval so the user confirms. And neverdelete_reminderin this sweep: complete/dismiss is the reversible close (a done/dismissed reminder is restorable from Trash for ~30 days); a hard delete is not yours to make here.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +16 lines 4b1e31de3752
- 10d ago First seen · 395 lines · 232 tokens per session scan A 9fe829a82892
reminders-review is a skill published in the GitHub repository philipyaz/cos (4 stars, last pushed today), licensed MIT. It adds 232 tokens to every session and 7,690 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
meta-sync-template
Interactive flow to propagate the reference (.template) vault's plugins, snippets, and root docs to one or more configured vaults. Reads the active router config, lists every vault with online status, flags vaults missing obsidian-local-rest-api upfront, lets the user pick all or a subset, and optionally re-clones…
write-bundle
Run several vault writes as ONE logical operation with rollback — the note + the index + the journal + hot.md either all land, or none do. Use whenever a single user-visible action touches 2+ files and a half-written result would be wrong. Also the recovery entry point for bundles a crash left unfinished. EN triggers…
canvas
Create or modify Obsidian canvas (.canvas) files — visual layout layer where wiki pages, images, PDFs, and free-form text cards are arranged spatially. Supports adding nodes, defining zones (labeled regions), and laying out content with auto-positioning. Use when the user says "create a canvas", "add to canvas"…
write-frontmatter-merge
Apply multiple frontmatter updates at once (sequential, NOT atomic — partial failures are reported per-key). Use when you want to update 2+ properties on the same file in one call. EN triggers: "update multiple properties on X", "set status, score, and tags on X", "mark Y as closed with outcome stopped", "bulk-update…
template-execute
Execute a Templater template, optionally writing the rendered output to a new file. Arguments are exposed to the template via tp.mcpTools.prompt("key") (directly under tp, NOT under tp.user — easy footgun). EN triggers: "render the X template", "run the daily template", "execute Templates/X.md with arg1=v1", "use…
read-search
Plain-text (substring) search inside a vault, with surrounding context. EN triggers: "find in my vault", "search for the literal string X", "grep for X", "where do I mention X", "find files containing X". FR triggers : "trouve dans mon vault", "cherche la chaîne X littéralement", "grep ", "où est-ce que je mentionne…