Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add reganomika/HighWater --skill refresh-context-rulesgit clone --depth 1 https://github.com/reganomika/HighWaterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/reganomika/highwater/refresh-context-rules)<a href="https://agentmods.dev/skills/reganomika/highwater/refresh-context-rules"><img src="https://agentmods.dev/badge/skills/reganomika/highwater/refresh-context-rules.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.00727 |
| Opus 5 | $0.00029 | $0.00364 |
| Sonnet 5 | $0.00012 | $0.00145 |
| Haiku 4.5 | $0.00006 | $0.00073 |
Grade B, and why
refresh-context-rules scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
4. The `env` block of `~/.claude/settings.json`, if it sets any `CONTEXT_CHECK_*` key there, overrides the config file. What it actually says
Read right now, in full:
~/.claude/CLAUDE.mdCLAUDE.mdat the root of the current project, if it exists
Whatever they currently say applies for the rest of this session in place of what was in the system prompt at session start: the same rules, just re-read fresh, since these files can change after a session has already loaded and the system prompt doesn't hot-reload.
Apply this from now until the end of the session.
Don't try to judge whether anything changed compared to how you'd been behaving before: that's unreliable self-assessment, you have no accurate record of your own old system prompt to honestly compare against, and on a large accumulated context that guess easily comes out confident and wrong. Instead, always, regardless of any belief about what changed, produce a concrete checkable artifact right now, not a claim: the current, ACTUALLY ACTIVE context-check.sh thresholds in one line, window plus soft and hard marks as both percentage and raw token count (e.g. window=200000, warn=55% (110000), hard=88% (176000)).
Compute these from every layer that can override the shipped defaults (55/88/15, window 200000), in the order the script itself applies them:
- The script's own defaults,
hooks/context-check.sh, theWARN_PCT/HARD_PCT/STEP_PCTfallback values (55/88/15). - If
CONTEXT_CHECK_WINDOWis set nowhere (neither config file nor env, see below), the window is auto-detected from the session's model in the transcript:1000000forclaude-sonnet-5orclaude-fable-5(they always run at 1M, on any plan),200000for anything else (Opus and others vary by plan, not detectable from the transcript). ~/.claude/hooks/context-check.conf, if it exists, overrides the script/auto-detected defaults.- The
envblock of~/.claude/settings.json, if it sets anyCONTEXT_CHECK_*key there, overrides the config file. ~/.claude/hooks/context-check.observed.json, if it exists, can pull the hard mark earlier still: read itsobserved_pre_tokensand reportobserved_pre_tokens - 20000as the effective hard mark whenever that's lower than what steps 1-4 computed. Say so explicitly when this is the binding number, it's easy to mistake for the configured percentage otherwise.
Note explicitly if CONTEXT_CHECK_DISABLE_WARN or CONTEXT_CHECK_DISABLE_HARD is set anywhere in that chain, since a disabled tier makes its own threshold moot. You cannot see an env var exported only in a shell profile (not in settings.json), since that's invisible to a file read; say so if you can't fully verify the chain instead of reporting a number you didn't actually confirm.
The user looks at what you produced and sees for themselves whether it matches what they expect right now, instead of trusting your claim.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 26 lines · 58 tokens per session scan B 1511578a0ce2
refresh-context-rules is a skill published in the GitHub repository reganomika/HighWater (2 stars, last pushed 1mo ago), licensed MIT. It adds 58 tokens to every session and 727 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
should-i-buy
Helps the user decide on a purchase by taking the product links they're considering, asking a couple of sharp clarifying questions about their needs and circumstances, then opening each link in real Chrome via the Claude-in-Chrome extension to extract price, specs, ratings, reviews, return policy, and shipping.…
emotional-recap
Reviews the user's past Claude Code conversations from a wellbeing perspective — sentiment, tone, emotional arc, recurring patterns — and generates a supportive, science-grounded report in both Markdown and HTML. Default lookback is 48 hours across all projects. Uses recognised emotion frameworks (Plutchik, Ekman…
remarkable-memory
Turns handwritten reMarkable notes into a queryable semantic memory. Syncs pages from a reMarkable tablet (via the reMarkable MCP server, rmapi, or a USB/SSH bridge), renders each page to an image and reads the handwriting with Claude vision — no OCR key — then extracts each page into confidence-scored, human-editable…
skill-creator
Create new Claude Code skills interactively, following all conventions from SKILLSGUIDE.md and the learning/configurability/feedback patterns proven in the best existing skills.
ui-test
Runs UI tests described in plain English by driving real Chrome via the Claude-in-Chrome extension. Covers end-to-end flows (clicks, forms, assertions), visual checks (screenshot + optional baseline diff), accessibility (axe-core), performance (Web Vitals + light Lighthouse-style metrics), and an interactive --debug…
shop-research
Researches products across Amazon, Google Shopping, and relevant specialty sites using the Claude-in-Chrome browser extension. Finds candidates matching user-specified criteria (gift, gadget, gear, home goods, etc.), captures screenshots and key data per candidate, then generates a modern 2026 HTML report with…