Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/qgolem/orc/installnpx skills add qGolem/orc --skill installgit clone --depth 1 https://github.com/qGolem/orcWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00025 | $0.07925 |
| Opus 5 | $0.00013 | $0.03963 |
| Sonnet 5 | $0.00005 | $0.01585 |
| Haiku 4.5 | $0.00003 | $0.00792 |
Grade C, and why
install scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
find ~/.claude/plugins -path "*/install/templates/deps" -type d 2>/dev/null | head -1 Enumerates other installed skillsmediumAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
find skills/ .claude/skills/ -name "*.sh" -type f 2>/dev/null How it starts
The opening of the file, as written. The whole thing — 859 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Install
Interactive setup wizard for the orc plugin. Uses AskUserQuestion for every decision point.
Process
Step 1: Welcome and Verify Claude Code
claude --version 2>/dev/null || echo "NOT_FOUND"
If NOT_FOUND: tell user to install Claude Code first, then re-run /orc:install.
Otherwise extract version. If < 1.0.33, warn that some features may not work.
Display welcome:
Welcome to orc — orchestrated planning and code review for Claude Code.
Step 2: Check plugin status
The fact that this skill is running means the plugin is loaded. Confirm this.
Determine context:
ls skills/install/SKILL.md 2>/dev/null && echo "IS_PLUGIN_REPO" || echo "IS_CONSUMER"
If IS_PLUGIN_REPO: Note they can load from any project with claude --plugin-dir /path/to/this/repo.
If IS_CONSUMER: Plugin is installed correctly.
Step 3: Script permissions and runtime setup
Discover all scripts and hooks that need execution access:
find skills/ .claude/skills/ -name "*.sh" -type f 2>/dev/null
ls .claude/hooks/index.ts 2>/dev/null && echo "HAS_HOOKS" || true
For each script found, present an AskUserQuestion with:
- A description of what the script does
- An ASCII diagram of its execution flow
- A choice to grant execute permission or skip
Important: Check current permissions first with ls -la <path>. If already executable, note this and skip the question.
Script: skills/half-clone/scripts/half-clone-conversation.sh
What it does: Clones the later half of a Claude Code conversation into a new session, discarding earlier context to free tokens. Used by /orc:half-clone.
Present this to the user:
<AskUserQuestion>
<Question
question="Grant execute permission to half-clone-conversation.sh?"
header="half-clone"
multiSelect="false"
options='[
{"label": "Grant (Recommended)",
"description": "chmod +x — required for /orc:half-clone to work",
"preview": "half-clone-conversation.sh (575 lines)\n\nUsed by: /orc:half-clone\nRuntime: bash 3.2+ (macOS/Linux)\nInput: session-id, project-path\nOutput: new .jsonl conversation file\n\n┌─────────────────────────────────────┐\n│ /orc:half-clone │\n│ └─ calls half-clone-conversation.sh│\n└──────────────┬──────────────────────┘\n │\n ▼\n┌──────────────────────────────────┐\n│ 1. Find conversation .jsonl │\n│ ~/.claude/projects/<dir>/ │\n│ └─ <session-id>.jsonl │\n└──────────────┬───────────────────┘\n │\n ▼\n┌──────────────────────────────────┐\n│ 2. Count clean user messages │\n│ Filter: type=user, skip meta │\n│ Calculate halfway point │\n└──────────────┬───────────────────┘\n │\n ▼\n┌──────────────────────────────────┐\n│ 3. Generate new session UUID │\n│ Pre-generate UUIDs for awk │\n│ (batch, not per-line) │\n└──────────────┬───────────────────┘\n │\n ▼\n┌──────────────────────────────────┐\n│ 4. Single-pass awk transform │\n│ ├─ Skip first N lines │\n│ ├─ Remap session/msg UUIDs │\n│ ├─ Strip thinking blocks │\n│ ├─ Halve token counts │\n│ └─ Tag first kept message │\n└──────────────┬───────────────────┘\n │\n ▼\n┌──────────────────────────────────┐\n│ 5. Write new .jsonl + history │\n│ ~/.claude/projects/<dir>/ │\n│ └─ <new-session>.jsonl │\n│ ~/.claude/history.jsonl │\n│ └─ append entry │\n└──────────────────────────────────┘\n\nSafe: reads original, writes new file.\nNo destructive operations."},
{"label": "Skip",
"description": "Don't grant — /orc:half-clone won't work until you do"}
]'
/>
</AskUserQuestion>
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 859 lines · 25 tokens per session scan C 538c43a102f5
install is a skill published in the GitHub repository qGolem/orc (5 stars, last pushed 5mo ago), licensed MIT. It adds 25 tokens to every session and 7,925 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 2 findings (reads agent configuration directories, enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
foundry-config-setup
Resolve missing setup caused by a hardcoded Foundry project endpoint or model in a sample. Use when a sample fails because it uses a placeholder/hardcoded projectendpoint (for example "https://your-project.services.ai.azure.com") or a hardcoded model instead of reading them from the environment.
trigger-authoring-tasks
Covers writing backend Trigger.dev tasks with @trigger.dev/sdk: defining task() and schemaTask(), the run function and its ctx, retries, waits, queues and concurrency, idempotency keys, run metadata, logging, triggering other tasks (and the Result shape), scheduled/cron tasks, and the essentials of trigger.config.ts.…
background
Use when the user wants to see, inspect, cancel, or prune background agents fired during prior chain runs. Read/manage .hyperflow/background/registry.json and the per-agent output buffers at .hyperflow/background/ .md. Standalone — never auto-invoked. Trigger with /hyperflow:background, "list background agents"…
local-frontend-check
Smoke-test or verify UI behaviour on the local Jarvis Registry frontend running at http://localhost/gateway. Use for manual regression checks, bug-fix verification, and end-to-end confirmation of specific flows without running the automated test suite.
brooks-sweep
Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes are confirmed before execution. Drawing on twelve classic engineering books. Triggers when: user…
Research Synthesis Workflow
A step-by-step guide to synthesizing research from multiple sources into a coherent summary.