Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/rjmurillo/ai-agentsnpx agentmods add skills/rjmurillo/ai-agents/syncWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rjmurillo/ai-agents/sync)<a href="https://agentmods.dev/skills/rjmurillo/ai-agents/sync"><img src="https://agentmods.dev/badge/skills/rjmurillo/ai-agents/sync/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rjmurillo/ai-agents/sync"><img src="https://agentmods.dev/badge/skills/rjmurillo/ai-agents/sync.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00096 | $0.01732 |
| Opus 5.5 | $0.00038 | $0.00693 |
| Sonnet 5.5 | $0.00019 | $0.00346 |
| Haiku 4.5 | $0.00010 | $0.00173 |
Grade C, and why
sync scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
- **Intentional forward reference**: the spec names a planned path that does not exist yet. Mark the line with a trailing `<!-- sync-drift-ignore -->` so the detector skips it. How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sync
Migrated from the sync command under ADR-064, which makes skills the single user-invocable surface. The command file is gone, so its path is named here in plain text rather than as a citation to something a reader could open.
The forward path (/spec -> /plan -> /build) turns intent into code. There is no clean reverse path. When you hand-edit code (refactor, hotfix, taste change), the spec drifts silently and the staleness surfaces only at /review time, late and often misattributed as "the spec was wrong" instead of "the spec needs updating". /sync closes that loop: it finds the drift while you still remember why you made the change.
What this slice does
This command detects Spec->Code drift and reports it. It does NOT auto-rewrite specs. Detection runs; patch proposal is a follow-up (see Step 3).
Triggers
| Phrase | Action |
|---|---|
/sync |
Scan all spec tiers for stale code references |
/sync .project-toolkit/specs/design |
Scan one spec tier |
detect spec drift |
Run the detector and report drift |
Arguments
Sync: $ARGUMENTS
If $ARGUMENTS names a spec tier, scan that tier only by passing it to
--target. Otherwise scan all three tiers.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago Changed · +7 lines b7c50c82e824
- 24d ago Changed 1f919b20ab59
- 1mo ago Changed · +3 lines c0310007c86c
- 1mo ago First seen · 120 lines · 96 tokens per session scan C 5722f46b354a
sync is a skill published in the GitHub repository rjmurillo/ai-agents (48 stars, last pushed today), licensed MIT. It adds 96 tokens to every session and 1,732 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
install-gemini-code-review-action
Installs, configures, or upgrades Dazbo's PR code review & issue triage GitHub Action (gemini-review-action) in a target repository. Use when the user wants to set up, configure, or update automated AI code reviews, issue triaging, or Gemini model workflows for their GitHub repository.
review-deep
Review change vs spec, plan, code quality heuristics, and repo rules; append remediation phase if needed.
review-remote
Review open PR/MR and publish findings.
apply-review-feedback
Classify and apply accepted PR/MR review feedback.
azure-devops-automation
CI/CD pipelines, infrastructure as code, and deployment automation for Azure workloads.
architecture-audit
Comprehensive project consistency review across code, documentation, diagrams, and configuration.