Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/senavictors/bootstrap-agent-architecture-plugin/bootstrap-completenpx skills add Senavictors/bootstrap-agent-architecture-plugin --skill bootstrap-completegit clone --depth 1 https://github.com/Senavictors/bootstrap-agent-architecture-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/senavictors/bootstrap-agent-architecture-plugin/bootstrap-complete)<a href="https://agentmods.dev/skills/senavictors/bootstrap-agent-architecture-plugin/bootstrap-complete"><img src="https://agentmods.dev/badge/skills/senavictors/bootstrap-agent-architecture-plugin/bootstrap-complete.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00099 | $0.00954 |
| Opus 5 | $0.00049 | $0.00477 |
| Sonnet 5 | $0.00020 | $0.00191 |
| Haiku 4.5 | $0.00010 | $0.00095 |
Grade A, and why
bootstrap-complete scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 35 lines — stays where its author put it; the contents beside it link to each section on GitHub.
bootstrap-complete — checagem de DoD e conclusão da task
O princípio desta skill: o estado da task é comunicado pela pasta em que o arquivo está (regra do v1). Mover para completed/ sem evidência real quebra essa garantia para qualquer sessão futura que confiar nela — por isso esta skill nunca move o arquivo sem checar antes.
Procedimento
-
Identifique a task. Se o usuário não especificou qual, e há mais de uma em
active/, pergunte. -
Checagem de DoD — três verificações, nesta ordem:
-
Código. A seção "Registro de execução → Alterações realizadas" da task está preenchida, e o
git diff/histórico de commits recente confirma que existe trabalho de código correspondente (não é só uma descrição sem alteração real por trás)? -
Documentação (docs viva). Duas checagens:
- Se a task tem
related_adrspreenchido no frontmatter, ou se o trabalho mudou algo arquiteturalmente relevante, isso está de fato registrado? - Se a task tocou módulo, endpoint, schema de dados ou integração, o documento correspondente em
docs/(modules/,api/,data/,integrations/,architecture/ou uma extensão declarada) foi atualizado? Atualizar inclui manter o frontmatter: carimbarultima-revisaocom a task/data, e virarestado: planejado → realquando a task implementou o que estava só especificado. Se o doc ainda não existe (arquivos por módulo/endpoint nascem sob demanda), crie-o agora a partir do template da subpasta. Se a task revelou que um docrealestá errado e a correção não cabe nesta task, marqueestado: divergentee registre a divergência — nunca deixe o doc fingindo estar certo.
Se a task genuinamente não precisa de documentação nova (ex.: correção pontual sem impacto arquitetural), aceite isso — mas só se a task disser explicitamente por que não se aplica, não por omissão silenciosa.
- Se a task tem
-
Testes. A seção "Validação" ou "Estratégia de testes" tem comandos e resultado reais registrados — não só as caixas marcadas sem evidência ao lado?
-
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 35 lines · 99 tokens per session scan A 0722e693e820
bootstrap-complete is a skill published in the GitHub repository Senavictors/bootstrap-agent-architecture-plugin (3 stars, last pushed 4d ago), licensed MIT. It adds 99 tokens to every session and 954 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
peekaboo
Provides runtime observation and interaction for native macOS interfaces through accessibility state and screenshots. Use when the task depends on visible or interactive state in a running SwiftUI/AppKit app: what is rendered, focused, selected, enabled, reachable through menus/windows/dialogs, or experienced across a…
seam-probe
This skill should be used when testing or debugging an embedded-runtime boundary exposed through a dynamically loaded C-ABI library or Unix-domain socket, including requests to inspect exports, exercise FFI callbacks, send framed messages, reproduce seam crashes or hangs, fuzz a boundary, or correlate probe output…
improving-tests
Improve test design, speed, and coverage with behavior-focused tests, useful seams, characterization tests, TDD, and test refactoring. Use when improving tests, optimizing slow suites, adding coverage, refactoring brittle tests, removing test waste, or working test-first. NOT for fixing production bugs (use…
reviewing-code
Use when reviewing changed code, PRs, diffs, or specific files. Finds evidence-backed defects in security, correctness, tests, reliability, performance, maintainability, and docs. Supports quick, standard, deep, team, and external-review modes. NOT for repo-wide architecture review, general codebase exploration…
reviewing-instructions
Use when asked to lint, audit, review, or score AI-facing instruction files such as SKILL.md, AGENT.md, AGENTS.md, CLAUDE.md, platform body.md files, prompt files, rules, policies, and agent-facing references. NOT for plugin manifests, application code review, harness configuration review, ordinary docs, tests, or…
electron-playwright-validator
This skill should be used when a user asks to launch, inspect, automate, test, validate, or debug an Electron desktop UI through Playwright/CDP, including blank renderers, runtime import failures, accessibility snapshots, layout defects, click-through flows, or post-change checks. Not for native macOS or mobile apps…