Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add scaccogatto/okf-skills --skill okfgit clone --depth 1 https://github.com/scaccogatto/okf-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/scaccogatto/okf-skills/okf)<a href="https://agentmods.dev/skills/scaccogatto/okf-skills/okf"><img src="https://agentmods.dev/badge/skills/scaccogatto/okf-skills/okf/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/scaccogatto/okf-skills/okf"><img src="https://agentmods.dev/badge/skills/scaccogatto/okf-skills/okf.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.01999 |
| Opus 5 | $0.00063 | $0.01000 |
| Sonnet 5 | $0.00025 | $0.00400 |
| Haiku 4.5 | $0.00013 | $0.00200 |
Grade A, and why
okf scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Open Knowledge Format (OKF) skill
OKF represents knowledge as a directory of markdown files with YAML frontmatter. It is minimal by design: no schema registry, no runtime, no SDK. Your job is to produce, maintain, and consume OKF bundles conformant with the spec, not your memory of it.
Always read the canonical spec before non-trivial work: reference/SPEC.md. It is the verbatim OKF v0.2 specification and the source of truth for every rule below.
The one hard rule
A bundle is conformant (§11) iff: every non-reserved .md file has a parseable
YAML frontmatter block, and every such block has a non-empty type field.
Everything else is soft guidance. Consumers MUST tolerate missing optional
fields, unknown types, and broken links — never reject a bundle over them.
Conventions to apply
- One concept = one file. The file path (minus
.md) is the concept ID. - Frontmatter:
typeis required. Addtitle,description,tagswhen they aid consumption; addresource(a canonical URI) only for concepts bound to a real asset — omit it for abstract concepts. - Body: prefer structural markdown (headings, tables, lists, fenced code).
Conventional headings:
# Schema,# Examples,# Computation. - Cross-links: standard markdown links; prefer absolute bundle-relative
form (
/services/auth-api.md). A link asserts a relationship; its kind lives in the surrounding prose, not the link. - Reserved files:
index.md(directory listing, no frontmatter, except the bundle-root index, which may carryokf_versionand this plugin'supkeep: enforcedopt-in flag) andlog.md(ISO-dated change history, newest first). Never use these names for concepts.
The v0.2 families (all optional, all worth filling)
- Trust (§5.2):
generated: { by, at }— who produced the current content and when.verified: [{ by, at }]— who confirmed it since (a bare mapping is one entry). Writebyin the actor convention (§7):<producer>/<version>for an agent,human:<id>for a person,process:<id>for an automated job. Usehuman:whenever a person authored or signed off — consumers key trust tiers off that prefix. - Lifecycle (§5.4–5.5):
status: draft|stable|deprecated(absent means stable) andstale_after: YYYY-MM-DD, an absolute date, not a TTL. - Provenance (§5.1):
sources: [{ id, resource, title, author, usage_count, last_modified }]plus ausage_window: { from, to }sibling ofsourcesframing everyusage_count(an entry may carry its own to override it); ausage_countwithout a window warns.resourceis required per entry and may be a URL, a bundle path, or a scope descriptor. Attribute a specific claim with a markdown footnote whose label is the source'sid:…sharded daily.[^ga4-schema]plus a[^ga4-schema]: …definition. The label is the join key, it must match asources[].id. - Attestation (§10): a sanctioned computation is its own concept,
type: Attested Computation, carryingruntime(required),parameters,executor,attester, and the computation itself under# Computation(or acomputation:path). Concepts that need the value link to it. Never inline a number's SQL into the concept that narrates it.
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +4 lines 89bd969c90f2
- 10d ago First seen · 148 lines · 127 tokens per session scan A f3bf590ef2d8
okf is a skill published in the GitHub repository scaccogatto/okf-skills (380 stars, last pushed 5d ago), licensed MIT. It adds 127 tokens to every session and 1,999 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
remember
Capture a durable learning into the personal Trove. Use when the user says remember this, note this, save to trove, add to my trove, or when a session surfaces a decision, gotcha, convention/preference, or external reference worth keeping. Writes one atomic entry file and updates INDEX.md.
init
Initialize a personal Trove, a local file-based knowledge index for Claude Code. Use when the user says start/set up/create my trove, or when they want to remember things but no trove exists yet. Scaffolds the trove directory, INDEX.md and entries/ folder at user scope (/.claude/trove, follows you everywhere) or…
index
Index the repository into Trove memory layers (symbols, modules, subsystems, architecture). Use when the user asks to index the repo, build the trove index, refresh symbols, or re-index after large changes.
query
Progressive retrieval from the Trove index. Use when the user asks what Trove knows about a subsystem, where code lives, or wants context assembled before editing. Runs architecture -> subsystem -> module -> symbol retrieval with a context budget.
recall
Search and recall from the personal Trove. Use when the user asks what do I know about X, did we decide something, what's in my trove, or any question that past learnings might answer. Reads INDEX.md, opens the relevant entry files, and answers grounded in them with citations.
okf-pro
Operating rules for the .okf/ knowledge bundle — filing new concepts, the board, the journal, the daily snapshot, closing work, source attribution, and the generated/verified attestation policy. Use before reading from or writing anything into .okf/.