Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add saffron-health/libretto --skill implement-specgit clone --depth 1 https://github.com/saffron-health/librettoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/saffron-health/libretto/implement-spec)<a href="https://agentmods.dev/skills/saffron-health/libretto/implement-spec"><img src="https://agentmods.dev/badge/skills/saffron-health/libretto/implement-spec/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/saffron-health/libretto/implement-spec"><img src="https://agentmods.dev/badge/skills/saffron-health/libretto/implement-spec.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00024 | $0.00646 |
| Opus 5.5 | $0.00010 | $0.00258 |
| Sonnet 5.5 | $0.00005 | $0.00129 |
| Haiku 4.5 | $0.00002 | $0.00065 |
Grade A, and why
implement-spec scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- implement-spec — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Implement the specified phase of the given spec file.
Ultrathink. Follow these steps:
1. Read and understand the spec
Read the entire spec file. Understand the problem overview, solution overview, goals, and non-goals. Pay close attention to the phase you've been asked to implement.
2. Read all important files
Read every file listed in the "Important files/docs/websites for implementation" section of the spec. Also read any external documentation links. Do not start writing code until you thoroughly understand the existing codebase and how your changes fit in.
3. Implement the phase
Work through every task item in the phase, including all success criteria (tests, typechecks, lint checks). A phase is not complete until every task item is done, including running any verification steps.
Run pnpm run typecheck, pnpm test, and pnpm run lint after implementation to catch issues.
4. Verify goals
Check the spec's Goals section. If the phase you just implemented should complete any of those goals, explicitly verify them through integration tests or manual testing of the Electron app using Playwright (see AGENTS.md for Playwright instructions). Do not consider the phase done until achieved goals are verified end-to-end.
5. Mark tasks complete
Mark all completed task items in the spec as done (- [x]) before presenting to the user.
6. Do not commit
When you're done, do not stage or commit your changes. Present the completed work to the user for manual review. The user may request changes.
7. Handle user feedback
If the user asks for changes, implement them. Iterate until the user is satisfied.
8. Update the spec before committing
Once the user approves and asks you to commit:
- Update the spec to reflect what was actually implemented. If the implementation deviated from what was originally specced (e.g. the user asked for a different approach), overwrite the phase content in the spec to match what was done. The spec should always reflect the current state of the codebase, not the original plan.
- Check downstream phases. If your spec changes affect later phases, ask the user whether you should update those phases too.
- Then commit both the implementation and the updated spec together.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 57 lines · 24 tokens per session scan A 612522977410
implement-spec is a skill published in the GitHub repository saffron-health/libretto (906 stars, last pushed 2mo ago), licensed MIT. It adds 24 tokens to every session and 646 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
robotgo-flow
Use when building YAML-driven Windows desktop RPA in Go — robotgo-flow run/record/capture/serve CLI, image template matching under a window then full-screen fallback, $input. variable injection, onerror abort/skip/retry, human-like mouse and typing. Also for templates that never match, "Unsupported class file" / MinGW…
others-skills
Use when needing Go language development, desktop RPA automation, self-hosted email marketing, Java Spring Cloud scaffolding, SSL/TLS certificate automation, Docker Compose multi-container orchestration, FFmpeg audio/video transcoding or HLS slicing, or building a bilingual children's Phaser/Vue game collection. Index…
qirabot
Drive any GUI with AI vision on raw screenshots — no DOM, no CSS/XPath selectors — via the Qirabot Python SDK or the qirabot CLI. Hand it a whole goal to complete autonomously, or make single natural-language actions: click, type, extract, and verify on web browsers, Android, iOS, desktop apps, and games. Use this…
robotgo
Use when automating desktop GUI in Go — robotgo.Move/Click/KeyTap, CaptureImg vs CaptureScreen, bitmap.Find template matching, gohook global hotkeys, gcv OpenCV matching, clipboard and window control. RobotGo v1.3.7: cross-platform Go desktop automation for macOS/Windows/Linux. Also for black screenshots or silently…
fetch-weather-report
Fetch the current weather forecast for a specified location and return a structured summary.
uipath-core
Build UiPath Studio projects, REFramework scaffolds, XAML workflows, and VB/C# expressions via 104 deterministic Python generators (plus plugin generators). ALWAYS use this skill — never hand-write .xaml files. TRIGGER when the user mentions UiPath, REFramework, XAML, RPA, Orchestrator, UiPath Studio, dispatcher…