Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pssah4/digital-innovation-agents --skill dia-guidegit clone --depth 1 https://github.com/pssah4/digital-innovation-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pssah4/digital-innovation-agents/dia-guide)<a href="https://agentmods.dev/skills/pssah4/digital-innovation-agents/dia-guide"><img src="https://agentmods.dev/badge/skills/pssah4/digital-innovation-agents/dia-guide/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pssah4/digital-innovation-agents/dia-guide"><img src="https://agentmods.dev/badge/skills/pssah4/digital-innovation-agents/dia-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00075 | $0.04769 |
| Opus 5 | $0.00037 | $0.02384 |
| Sonnet 5 | $0.00015 | $0.00954 |
| Haiku 4.5 | $0.00007 | $0.00477 |
Grade A, and why
dia-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 466 lines — stays where its author put it; the contents beside it link to each section on GitHub.
V-Model Workflow Guide
What this skill does (and does not do)
/dia-guide is the read-only orientation layer of DIA, invoked
explicitly by the user. It:
- Reads
BACKLOG.md, the latest DIA commit trailers (git log --format='%(trailers:key=DIA-Handoff,valueonly)'), and git state - Recommends the next phase skill in plain text
- Audits whether the last phase-end commit carries the binding
trailers (
DIA-Phase,DIA-Handoff, andDIA-Triagewhere triage happened) - Runs the Closing Handoff after a green
/security-audit - Owns two narrow CRUD moments at workflow boundaries: (a) the
post-
/dia-realignitem promotion (below), and (b) the item-start branch creation when the user enters at A/B/C from a fresh repo
What the guide does NOT do:
- It does not perform artifact triage. Triage lives in every phase
skill's MANDATORY Phase 0 block (see
skills/project-conventions/references/graph-invariants.md). - It does not enforce the plan gate;
/codingruns it, the guide only reads the result. - It does not run consistency checks per phase. The pre-commit hook enforces the drift-critical invariants; the full check runs before release (security-audit Step 7 / Closing Handoff).
- It does not call other skills. It recommends; the user invokes.
Item-start branch creation
When the user picks entry-point A, B, or C in the hybrid entry-point detection (see "Start: Determine Phase" below), the guide creates a fresh feature branch from the configured source branch before the phase skill takes over. The phase skill itself does not own this because the branch must exist before the first artifact is written.
Steps:
- Read
.dia/config.toml. Extractsource_branch(defaultdevelop),mode, andprofile. If the file is missing, fall back todevelop,git-only,full. - Slug input. Ask the user (single
AskUserQuestion, short plain-text "Other" slot) for a short kebab-case slug describing the item. The slug becomes the suffix of the feature branch name. - Branch creation.
If the branch already exists, switch to it and warn the user. Do not overwrite work.git fetch origin <source_branch> --quiet || true git checkout <source_branch> git pull --ff-only origin <source_branch> 2>/dev/null || true git checkout -b feature/<slug> - Mode-aware GitHub side-effect. If
mode = "github-sync"and an issue already tracks this item, remind the user to assign themselves soflow.py sync-statuscan mirror the assignee into the BACKLOGClaimcolumn once the item has a real ID. The phase skill that first writes a backlog row callsflow.py create-issue. - Hand-off. Print the branch name, then recommend the phase
skill: A ->
/business-analysis, B ->/requirements-engineering, C ->/architecture.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 466 lines · 75 tokens per session scan A 0a61b9085f88
dia-guide is a skill published in the GitHub repository pssah4/digital-innovation-agents (39 stars, last pushed 1mo ago), licensed MIT. It adds 75 tokens to every session and 4,769 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
prowler-ui
Prowler UI-specific patterns. For generic patterns, see: typescript, react-19, nextjs-16, tailwind-4. Trigger: When working inside ui/ on Prowler-specific conventions (shadcn, folder placement, actions/adapters, shared types/hooks/lib).
prowler-pr
Creates Pull Requests for Prowler following the project template and conventions. Trigger: When working on pull request requirements or creation (PR template sections, PR title Conventional Commits check, changelog gate/no-changelog label), or when inspecting PR-related GitHub workflows like conventional-commit.yml…
prowler-test-api
Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC. Trigger: When writing tests for api/ (JSON:API requests/assertions, cross-tenant isolation, RBAC, Celery tasks, viewsets/serializers).
tailwind-4
Tailwind CSS 4 patterns and best practices. Trigger: When styling with Tailwind (className, variants, cn()), especially when dynamic styling or CSS variables are involved (no var() in className).
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
prowler-docs
Prowler documentation style guide and writing standards. Trigger: When writing documentation for Prowler features, tutorials, or guides.