Borrowing it
Nothing to install: this file belongs to ric03uec/clawrium. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ric03uec/clawrium/main/.claude/skills/itx-bug-update/SKILL.mdgit clone --depth 1 https://github.com/ric03uec/clawriumWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ric03uec/clawrium/itx-bug-update)<a href="https://agentmods.dev/skills/ric03uec/clawrium/itx-bug-update"><img src="https://agentmods.dev/badge/skills/ric03uec/clawrium/itx-bug-update/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ric03uec/clawrium/itx-bug-update"><img src="https://agentmods.dev/badge/skills/ric03uec/clawrium/itx-bug-update.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.00369 |
| Opus 5.5 | $0.00006 | $0.00148 |
| Sonnet 5.5 | $0.00003 | $0.00074 |
| Haiku 4.5 | $0.00001 | $0.00037 |
Grade A, and why
itx-bug-update scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Bug Update
Add a comment to an existing GitHub bug issue.
Instructions
-
Parse Arguments: Extract issue number and comment text from arguments
- First argument: issue number (required)
- Remaining text: comment content (required)
-
Validate Issue: Verify the issue exists and has
buglabelgh issue view <number> --json number,title,labels -
Add Comment: Post the comment with prompt log
gh issue comment <number> --body "<comment with prompt log>" -
Comment Format:
<comment text> --- <details> <summary>Prompt Log</summary> **Stage**: bug-update **Skill**: /itx-bug-update **Timestamp**: <ISO timestamp> **Model**: <model> ```prompt <original user prompt that triggered this update> -
Return: Confirmation with issue URL
Examples
/itx-bug-update 42 Added debug logging, the error occurs in registry.py line 156
Notes
- Warn if the issue doesn't have a
buglabel (may be wrong issue type) - Include relevant technical details from the conversation
Prompt Logging
REQUIRED: Append prompt log to .itx/<N>/00_PLAN.md.
See AGENTS.md for format specification.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -1 lines 892b23cb7ad6
- 2mo ago First seen · 67 lines · 14 tokens per session scan A abfe50196067
itx-bug-update is a skill published in the GitHub repository ric03uec/clawrium (67 stars, last pushed 13d ago), licensed Apache-2.0. It adds 14 tokens to every session and 369 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
python
Use when the task is Python itself, in any framework or none: PEP 695 generics, mypy --strict typing, dataclass/Protocol/TypedDict/Enum choices, asyncio.TaskGroup, stdlib idioms, src/ layout + pyproject.toml with uv, ruff+mypy+pytest gate. NOT a FastAPI/ASGI service (that is fastapi), NOT a deep pytest suite (that is…
rdc-cli
Use this skill when working with RenderDoc capture files (.rdc), analyzing GPU frames, tracing shaders, inspecting draw calls, or running CI assertions against GPU captures. Trigger phrases: "open capture", "rdc file", ".rdc", "renderdoc", "shader debug", "pixel trace", "draw calls", "GPU frame", "assert pixel"…
impact
Use when asked what a change could break or affect, "is this safe to commit/push/merge?", "what does this break?", or before committing a multi-file change — the callers outside the diff, the tests guarding them, and the contracts the change crosses.
metagit-workspace-grep
Search on-disk file contents across managed workspace repos via ripgrep (or Python fallback). Use when hunting code strings, configs, or Terraform/Docker patterns — not for manifest metadata.
metagit-upstream-scan
Use when a coding agent encounters likely upstream blockers and must find related workspace repositories, files, and probable root causes.
metagit-upstream-triage
Triage cross-repository blockers by ranking likely upstream repositories and files with metagit search and hinting tools. Use when local fixes appear incomplete.