agentmods.dev

agoragentic-buzz-signed-workspace-evidence

agoragentic-buzz-signed-workspace-evidence is a skill for Cursor from rhein1/agoragentic-integrations. It costs 54 tokens per session (662 once invoked), scanned A, original, MIT.

A local tool that turns exported Block Buzz or Nostr workspace events into limited evidence. Nostr is a protocol for signed, relay-based messages, while Block Buzz is the workspace that produced these events.

In plain words
What is it for?
It is for checking event IDs and signatures, preparing release or incident history, retaining hash-based evidence, and supporting transaction-assurance reviews.
Why use it?
It helps distinguish signed event history from stronger claims such as payment, delivery, persistence, or financial authority, which cannot be assumed from channel membership or a relay accepting an event.

Skill for Cursor

Written for Cursor: shipped in a Cursor plugin.

Part of the agoragentic plugin — 19 skills, 1 MCP server shipped together

not rated 41repo 17d ago A scan SkillSpector: pass 54 tokens original MIT

Good fit It is for checking event IDs and signatures, preparing release or incident history, retaining hash-based evidence, and supporting transaction-assurance reviews.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence
View source ↗ rhein1/agoragentic-integrations agoragentic.com
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add rhein1/agoragentic-integrations --skill buzz-signed-workspace-evidence
Clone the repo
git clone --depth 1 https://github.com/rhein1/agoragentic-integrations

Made for: Cursor.

Or install agoragentic, the plugin that ships this one along with the rest of its 19 skills, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agoragentic-buzz-signed-workspace-evidence

README.md
[![agentmods](https://agentmods.dev/badge/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence/github.svg)](https://agentmods.dev/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence)
Your own site
<a href="https://agentmods.dev/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence"><img src="https://agentmods.dev/badge/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agoragentic-buzz-signed-workspace-evidence

Your own site · 80×15
<a href="https://agentmods.dev/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence"><img src="https://agentmods.dev/badge/skills/rhein1/agoragentic-integrations/buzz-signed-workspace-evidence.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 54 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 662 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00054 $0.00662
Opus 5.5 $0.00022 $0.00265
Sonnet 5.5 $0.00011 $0.00132
Haiku 4.5 $0.00005 $0.00066

Measured 2mo ago against content hash deab1c3faa57, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agoragentic-buzz-signed-workspace-evidence scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

The scan reads SKILL.md. This mod also ships 3 executable files (buzz-event-evidence.mjs, cli.mjs, test.mjs), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

examples/buzz-signed-workspace-evidence/SKILL.md · 54 lines

What it actually says

Buzz Signed Workspace Evidence

Run locally:

cd examples/buzz-signed-workspace-evidence
node cli.mjs <events.json> --out buzz-evidence.json

Rules:

  1. Verify each canonical NIP-01 event ID with strict lower-case wire fields; reject coercion, an ID/content mismatch, or an out-of-range kind.
  2. Accept signature, principal, and persistence claims only as typed external attestation references bound to the exact event ID, pubkey, and signature hash; persistence claims must also bind the exact source relay hash.
  3. Treat every caller-supplied attestation reference as unverified until a separate trusted resolver authenticates the artifact and verifier identity; never accept a naked verification, persistence, or principal boolean.
  4. Do not infer a principal or owner from a pubkey alone.
  5. Buzz channel membership and workspace scopes are not economic mandates.
  6. A relay-accepted event is not payment, delivery, outcome, or reconciliation proof. Require separate relay-audit persistence evidence when persistence matters.
  7. Keep event content and source metadata hash-only by default. Hashes can remain correlatable for low-entropy values, so use bounded content only when the principal permits it and protect private exports separately.
  8. Treat bounded mode as raw workspace content with best-effort known-pattern redaction, never as complete secret scanning or a public-safe export. Require explicit content authority, private handling, and publication review even when no redaction fires.
  9. Do not post a receipt reference to Buzz without explicit principal publication authority and a signing key outside this adapter.
  10. This source pin is review provenance only; it is not live relay, CLI, ACP, signature-verifier, private-channel, or audit-export compatibility evidence.
  11. This skill grants no spend, wallet, deployment, publication, memory-write, or trust authority.

Report:

event count and types
exact upstream and NIP-01 source pin
canonical ID integrity
event-bound but unverified signature-attestation-reference state
event-bound but unverified principal-attestation-reference state
event-bound but unverified relay-audit-reference state
content policy and redactions
hash-only source references
event root and full security-envelope bundle root
bundle verification result and externally trusted expected root, when available
raw-content, redaction-assurance, and publication-review state
Transaction Assurance blockers
caller-claimed Transaction Assurance states and state_claims_verified: false
next safe action
authority granted: false
Files

What ships with it

10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 54 lines · 54 tokens per session scan A deab1c3faa57

Subscribe to this mod's changes

agoragentic-buzz-signed-workspace-evidence is a skill published in the GitHub repository rhein1/agoragentic-integrations (41 stars, last pushed 17d ago), licensed MIT. It adds 54 tokens to every session and 662 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Memory and contextSecurityai-agentsautogenmcpmodel-context-protocolusdcx402
Related

agoragentic-buzz-signed-workspace-evidence compared with skills from other repositories

agoragentic-buzz-signed-workspace-evidence next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
agoragentic-buzz-signed-workspace-evidencerhein1/agoragentic-integrationsSkill4117d agoMITA54Cursor
agent402MikeyPetrillo/Agent402Skill51yesterdayAGPL-3.0A177Cursor
compact-nowmtarcure/claude-vibe-squadSkill22910d agoMITA82Claude Code
lc-curate-contextcyberchitta/llm-context.pySkill30820d agoApache-2.0A90Claude Code, Codex
cortex-navigate-knowledgecdeust/CortexSkill76todayMITA95Claude Code
cortex-profilecdeust/CortexSkill76todayMITA98Claude Code
cortex-remember-globalcdeust/CortexSkill76todayMITA99Claude Code