comet-github

A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.

In plain words
What is it for?
Use it when reviewing a pull request, checking whether an issue is a bug, diagnosing failed CI, turning an idea into an issue, or fixing an issue.
Why use it?
It keeps evidence gathering, diagnosis, recommendations, and write actions separate, reducing the risk of changing GitHub based on stale or incomplete information.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/rpamis/comet/comet-github
Any agent
npx skills add rpamis/comet --skill comet-github
Clone the repo
git clone --depth 1 https://github.com/rpamis/comet

Made for: Claude Code, Codex.

Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 480 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00072 $0.00480
Opus 5 $0.00036 $0.00240
Sonnet 5 $0.00014 $0.00096
Haiku 4.5 $0.00007 $0.00048

Measured 2d ago against content hash 606d9dfa3da9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

comet-github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

assets/skills-maintainer/comet-github/SKILL.md · 32 lines

What it actually says

Comet GitHub

将本 Skill 作为 Comet GitHub 工作的明确入口。路由前先读取共享维护者契约

按意图路由

  • “审阅 PR / 看这个 PR” → comet-github-pr-review
  • “看下这个 Issue 是否成立 / 是不是 Bug” → comet-github-issue-triage
  • “把这个本地想法提成 Issue” → comet-github-idea-to-issue
  • “CI 有报错 / 哪个 job 失败了” → comet-github-ci-triage
  • “按照这个 Issue 修复” → comet-github-issue-fix

如果请求同时包含审阅和修复,先完成只读诊断,再说明建议交接到哪个流程。不得从分析阶段无声地跨入代码修改或 GitHub 写操作。

共享路由规则

  1. 确认仓库、Issue/PR 编号或 URL、当前本地分支以及用户要求的操作级别。
  2. 在依赖复制来的评论、旧 CI 结果或记忆中的 SHA 前,先刷新 GitHub 实时状态。
  3. 将证据、诊断、建议动作和已完成动作分开报告。
  4. 明确报告不确定性:已确认、可能成立、证据不足、已阻塞或未验证。
  5. 默认只读。评论、改标签、关闭 Issue、创建 Issue、提交、推送或创建 PR 都需要明确授权。

交接输出

返回简短的路由决定、选中的 Skill、支持该路由的证据以及下一步安全动作。保留用户指定的范围,不要把生成的草稿当作已经发布到 GitHub 的变更。

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 32 lines · 72 tokens per session scan A 606d9dfa3da9

Subscribe to this mod's changes

comet-github is a skill published in the GitHub repository rpamis/comet (2,871 stars, last pushed 2d ago), licensed MIT. It adds 72 tokens to every session and 480 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

agent-spec-tool-first

CRITICAL: Use for agent-spec CLI tool workflow. Triggers on: agent-spec, contract, lifecycle, guard, verify, explain, stamp, checkpoint, plan, requirements, work-units, knowledge requirements, KLL, docs vs knowledge, spec verification, task contract, spec quality, lint spec, run log, "how to verify", "how to use…

ZhangHanDong/agent-spec · 165 tokens

agent-spec-authoring

CRITICAL: Use for writing and editing agent-spec .spec/.spec.md files. Triggers on: write spec, create spec, edit spec, new spec, spec authoring, task contract, .spec file, .spec.md file, BDD scenario, acceptance criteria, completion criteria, test selector, boundary, constraint, intent, decision, out of scope, "how…

ZhangHanDong/agent-spec · 172 tokens

agent-spec-estimate

CRITICAL: Use for estimating work effort from agent-spec Task Contracts. Triggers on: estimate, estimation, how long, work effort, round count, time estimate, scope, sizing, cost, budget, planning, sprint, capacity, "how many rounds", "how long will this take", "estimate this spec", 估算, 工作量, 多久, 时间估算, 预估, 工时, 规模…

ZhangHanDong/agent-spec · 116 tokens

agent-spec-intent-compiler

Use when converting PRD or issue prose into KLL requirements, running the intent compiler plan, or reverse-interviewing a human to resolve requirement ambiguity before task spec generation.

ZhangHanDong/agent-spec · 42 tokens

agent-spec-wiki

Use when initializing, checking, enriching, or reviewing agent-spec code live wiki pages, sourcefiles trace, or Rust architecture inventory.

ZhangHanDong/agent-spec · 31 tokens

create-request

Create, update, or scan per-task request tickets for progress tracking. These are date-prefixed non-lifecycle docs under requests/, NOT feature-level requirements (use /req-analyze for those). Use when: tracking task progress, updating completion status, scanning incomplete requests, checking request status dashboard.…

sd0xdev/sd0x-harness · 112 tokens