armada-ledger

armada-ledger is a skill for Claude Code, Codex from rafmacalaba/armada. It costs 52 tokens per session (368 once invoked), scanned A, original, MIT.

A set of rules for placing software findings in the correct project record, or ledger. Findings include test failures, hostile review issues, and security vulnerabilities such as authentication bypasses.

In plain words
What is it for?
Use it to classify findings as defects, adversarial review issues, or security findings and track their status.
Why use it?
It prevents findings from being overlooked or recorded in the wrong place.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/rafmacalaba/armada/armada-ledger
Any agent
npx skills add rafmacalaba/armada --skill armada-ledger
Clone the repo
git clone --depth 1 https://github.com/rafmacalaba/armada

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for armada-ledger

README.md
[![agentmods](https://agentmods.dev/badge/skills/rafmacalaba/armada/armada-ledger.svg)](https://agentmods.dev/skills/rafmacalaba/armada/armada-ledger)
Your own site
<a href="https://agentmods.dev/skills/rafmacalaba/armada/armada-ledger"><img src="https://agentmods.dev/badge/skills/rafmacalaba/armada/armada-ledger.svg" alt="Measured on agentmods" height="20"></a>
Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 368 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00052 $0.00368
Opus 5 $0.00026 $0.00184
Sonnet 5 $0.00010 $0.00074
Haiku 4.5 $0.00005 $0.00037

Measured 5d ago against content hash 99e8f1790129, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

armada-ledger scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/skills/armada-ledger/SKILL.md · 19 lines

What it actually says

Armada: Ledger Routing

Every finding goes to exactly one ledger. Write to the wrong ledger and it will be ignored. Per-feature ledgers live under armada/ledgers/<feature>/.

Rules

  1. DEFECTS.md — for test failures, regression bugs, UI defects. Found by corvette (qa) during testing. Format: DEF-001, status OPEN, steps to reproduce.
  2. ADVERSARIAL_REVIEW.md — for hostile review findings. Found by xebec (adversary) during gate review. Format: ADV-001, Disposition PENDING.
  3. SECURITY_FINDINGS.md — for security vulnerabilities, injection vectors, auth bypasses. Found by frigate (security). Format: SEC-001, severity + CWE.
  4. Lifecycle: DEFECTS: OPEN -> FIX-READY -> CLOSED (corvette only). ADVERSARIAL: PENDING -> ACCEPTED/DISPATCHED -> CLOSED (via corvette). SECURITY: OPEN -> FIX-READY -> CLOSED.
  5. Only qa writes to DEFECTS.md (except orchestrator for status updates). Only adversary writes to ADVERSARIAL_REVIEW.md. Only security writes to SECURITY_FINDINGS.md.

Example: A failing unit test goes to armada/ledgers/my-feature/DEFECTS.md as DEF-003. An injection vector goes to armada/ledgers/my-feature/SECURITY_FINDINGS.md as SEC-001.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 19 lines · 0 tokens per session scan A 99e8f1790129

Subscribe to this mod's changes

armada-ledger is a skill published in the GitHub repository rafmacalaba/armada (92 stars, last pushed 7d ago), licensed MIT. It adds 52 tokens to every session and 368 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

aoe

Use when launching, monitoring, or controlling AI coding agents (Claude Code, Codex, OpenCode, etc.) in tmux via Agent of Empires (aoe). Covers creating sessions, capturing agent output, running parallel worktree agents, and organizing work into groups and profiles. Prefer aoe over raw tmux for agent management.

agent-of-empires/agent-of-empires · 71 tokens

aoe

Manage AI coding agent sessions via Agent of Empires (aoe).

agent-of-empires/agent-of-empires · 17 tokens

app-builder-v2

App Builder - Application Building Orchestrator workflow skill. Use this skill when the user needs Main application building orchestrator. Creates full-stack applications from natural language requests. Determines project type, selects tech stack, coordinates agents and the operator should preserve the upstream…

diegosouzapw/awesome-omni-skills · 69 tokens

debate

Structured adversarial analysis protocol. Quick single-agent modes (challenge, panel, pre-mortem, red team) plus a decision-review protocol where one agent proposes, one critiques, the proposer revises, and a binding/advisory judge panel decides ADOPT/REVISE/REJECT/ESCALATE.

EZotoff/ez-omo-config · 67 tokens

reader-report

Reader-first writing for any deliverable a human reads to understand a result: HTML reports, MD design docs, debate-result summaries, survey dashboards, executive briefs, handoff notes, panel-review syntheses. Writes for a reader who has NOT read the preceding material. NOT for: bug reports, incident reports, status…

EZotoff/ez-omo-config · 80 tokens

update-to-latest

Safety-critical operational pipeline for analyzing and executing OpenCode/OMO updates with explicit approval, patch preservation, rollback capability, and evidence-state discipline.

EZotoff/ez-omo-config · 33 tokens