Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add serradura/okf --skill okf-progit clone --depth 1 https://github.com/serradura/okfWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/serradura/okf/okf-pro)<a href="https://agentmods.dev/skills/serradura/okf/okf-pro"><img src="https://agentmods.dev/badge/skills/serradura/okf/okf-pro/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/serradura/okf/okf-pro"><img src="https://agentmods.dev/badge/skills/serradura/okf/okf-pro.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 99 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 99 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.03006 |
| Opus 5 | $0.00028 | $0.01503 |
| Sonnet 5 | $0.00011 | $0.00601 |
| Haiku 4.5 | $0.00006 | $0.00301 |
Grade A, and why
okf-pro scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Operating the bundle
Everything here is relative to .okf/, the bundle root — reference/
below is .okf/reference/ on disk, and a link written
/reference/thing.md inside a concept resolves there.
What to load
This file is the whole of the three rules and the routing question, and it is the part every session needs. Two things come before opening any guide: the CLI already answers most questions about state, and the line shapes are below.
Ask the CLI before you read a file
State is computed, not read. Every row below is one call answering what
several cats answer, and the first row costs nothing at all — it is
already in front of you.
| to answer | run | not |
|---|---|---|
| what is on the board / what is in flight | (already in the session banner) | cat board.md |
| the board after you changed it | okf pro state |
re-reading the file |
| one row per board line, with dates and links | okf pro board |
counting headings by eye |
| what awaits the owner's read | okf pro unverified |
grepping frontmatter |
| the day's snapshot line | okf pro snapshot |
computing it by hand |
| every invariant at once | okf pro audit |
— |
And five writes have exactly one correct form, so they are verbs rather than shapes to reconstruct. Each is additive and targeted: it appends a line or edits the line you named, refuses if the change it computed is not the change it declared, and never rewrites a file.
| to do | run |
|---|---|
| capture something into the Inbox | okf pro capture "the words you heard" |
| move a line to In flight (refuses over the cap) | okf pro promote <selector> |
| move one back to Backlog | okf pro demote <selector> |
| open today's journal day and index it | okf pro journal open |
| the three mechanical closing moves | okf pro close <project> |
A <selector> is a /projects/<slug> link, a bare slug, or a substring
only one line carries — never a position. Two lines matching is a
refusal, not a coin toss.
Add --json to state, board, snapshot, unverified or
friction when you want to compute on the answer rather than read it;
okf pro state --full adds the corpus-derived parts behind one parse.
audit and records answer with their exit code and take no flags.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 234 lines · 56 tokens per session scan A 9dcf84ac5bce
okf-pro is a skill published in the GitHub repository serradura/okf (155 stars, last pushed 2d ago), licensed Apache-2.0. It adds 56 tokens to every session and 3,006 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
okf
Author, maintain, and consume Open Knowledge Format (OKF) knowledge bundles — portable markdown + YAML frontmatter that both humans and agents read. Use when capturing project knowledge (services, APIs, schemas, metrics, runbooks, decisions) into an OKF bundle, when updating one after code or docs change, or when a…
project-sync
On-demand AI-powered sync of a project's repo state into the brain vault. Reads live git/GitHub/Jira data, updates the project status doc, and makes targeted edits to relevant brain docs where content is clearly stale. Triggered by "/project-sync [name]", "sync [project]", "what's the current state of [project]".
kb-ingest
Ingest a source into the knowledge bundle. Use when the user wants to capture, ingest, file, process, or "add this" — a note, transcript, email, PDF, image, web page, or any raw source — into a knowledge/ bundle, or drops content for processing. Reads the source once, extracts its signal, and integrates it across the…
kb-query
Answer from the knowledge bundle. Use when the user asks what they/the project know about something, wants to look something up, explore connections, or compare things that live in a knowledge/ bundle — and when any task would be informed by an existing bundle, consult it here before answering from scratch. Navigates…
kb
Portable OKF knowledge bundle for coding-agent memory and LLM wikis. Use when the user wants to start a wiki, ingest a source, document a repository, query project knowledge with citations, lint for drift, or visualize connections; whenever a repo has a knowledge/ bundle that should inform the task; and when another…
wiki-fold
Roll up the wiki's journal.md entries into structured fold pages — like 2^k log compaction. Reads the last 2, 4, 8, 16... entries and writes a fold page that summarizes them by extractive summarization (no invention), with backlinks to children. Idempotent at the structural level — re-running with the same window…