Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/richfrem/agent-plugins-skillsnpx agentmods add skills/richfrem/agent-plugins-skills/plugin-removerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/richfrem/agent-plugins-skills/plugin-remover)<a href="https://agentmods.dev/skills/richfrem/agent-plugins-skills/plugin-remover"><img src="https://agentmods.dev/badge/skills/richfrem/agent-plugins-skills/plugin-remover/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/richfrem/agent-plugins-skills/plugin-remover"><img src="https://agentmods.dev/badge/skills/richfrem/agent-plugins-skills/plugin-remover.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.00568 |
| Opus 5.5 | $0.00008 | $0.00227 |
| Sonnet 5.5 | $0.00004 | $0.00114 |
| Haiku 4.5 | $0.00002 | $0.00057 |
Grade A, and why
plugin-remover scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plugin Remover (plugin-remover)
Safely uninstalls plugins from agent environments and synchronizes tracking registries.
Contents
Critical Constraints
- Scope Boundary: Dedicated to uninstalling plugins. For installing or refreshing plugins, use
plugin-installerorplugin-syncer. - Dual Manifest Scrubbing: Reads both legacy
artifactslists and ownership manifests to ensure complete removal of enabled and disabled assets. - Destructive Action Safety: Never remove untracked project files outside
.agents/and registered environment symlinks. - Confirmation Prompts: Prompt for confirmation before wholesale deletion unless
--yesis explicitly specified.
Quick start
# Interactive removal menu
python3 plugins/plugin-manager/scripts/plugin_remove.py
# Remove a specific plugin non-interactively
python3 plugins/plugin-manager/scripts/plugin_remove.py --plugins <plugin-name> --yes
# Remove all tracked plugins and clean orphaned artifacts
python3 plugins/plugin-manager/scripts/plugin_remove.py --all --yes
Workflow
- Phase 1: Target Identification: Select targeted plugin(s) interactively or pass
--plugins <name>arguments. - Phase 2: Inventory Resolution: Consult
.agents/ownership/<plugin>.jsonand.agents/plugin-sources.jsonto map all deployed artifacts. - Phase 3: Artifact & Symlink Pruning: Delete target environment symlinks (
.claude/,.gemini/) and purge files in.agents/. - Phase 4: Registry Reconciliation: Remove plugin entries from
plugin-sources.jsonand delete the ownership manifest.
Verification
# Verify no broken symlinks remain
python3 plugins/dev-utils/scripts/symlink_manager.py audit
# Audit skill compliance
python3 plugins/agent-scaffolders/scripts/audit_skill.py plugins/plugin-manager/skills/plugin-remover --mode source
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago Changed · +20 lines fddf9214b3ca
- 29d ago First seen · 39 lines · 21 tokens per session scan A b4042f522f0a
plugin-remover is a skill published in the GitHub repository richfrem/agent-plugins-skills (7 stars, last pushed yesterday), licensed MIT. It adds 21 tokens to every session and 568 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-17.
Other skills, from other repositories
autoprompt
Run explicitly requested Autoprompt v2 work through the private controller. Ordinary coding and review requests do not activate this skill.
autoprompt
Run explicitly requested Autoprompt v2 work through the private controller. Ordinary coding and review requests do not activate this skill.
ap-route-analyst
Inspect only enough read-only project information to recommend a route and list the facts behind that recommendation.
ap-roadmap-author
Write one dependency-ordered roadmap with owners, integration points, success items, and real checks.
ap-depth-prober
Report the compatibility redirect to ap-worker; this retired role cannot perform new work.
ap-fresh-verifier
Report the compatibility redirect to ap-independent-checker; this retired role cannot perform new work.