Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add shimo4228/claude-harness --skill rules-distillgit clone --depth 1 https://github.com/shimo4228/claude-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shimo4228/claude-harness/rules-distill)<a href="https://agentmods.dev/skills/shimo4228/claude-harness/rules-distill"><img src="https://agentmods.dev/badge/skills/shimo4228/claude-harness/rules-distill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shimo4228/claude-harness/rules-distill"><img src="https://agentmods.dev/badge/skills/shimo4228/claude-harness/rules-distill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.01962 |
| Opus 5.5 | $0.00007 | $0.00785 |
| Sonnet 5.5 | $0.00004 | $0.00392 |
| Haiku 4.5 | $0.00002 | $0.00196 |
Grade A, and why
rules-distill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 156 lines — stays where its author put it; the contents beside it link to each section on GitHub.
rules-distill — promote environment-specific facts to rules
Scan installed skills, find principles that belong in the always-loaded rules layer, and distill them into rules — appending to, revising, or creating rule files. The skill produces candidates and verdicts; it never edits rules without your approval.
Roots. <harness> below is the harness this audit covers: ~/.claude by default, or a repository's .claude/ when skill harness-stocktake runs in project mode (its Roots section maps the paths, names the evidence that is n/a there, and says which convention checks apply). The ledger <ledger> belongs to that harness: ${CLAUDE_SKILL_DIR}/results.json when this skill's directory is inside <harness> (the harness carries its own copy of the skill), else <harness>/stocktake/rules-distill.json (an installed plugin, or project mode). Either way it is committed with the harness's other changes on the apply branch.
When to Use
- Periodic rules maintenance (monthly, or after installing new skills)
- After a
skill-stocktakereveals patterns that should be rules - When rules feel incomplete relative to the skills in use
Phase 1 — Inventory (Glob, exhaustive)
Enumerate with Glob (no script):
- Skills:
<harness>/skills/*/SKILL.md - Rules: read every
<harness>/rules/**/*.mdin full — the corpus is small, so no grep pre-filter is needed
Glob targets only skill definition files, so dependency markdown under
.venv/.pytest_cacheis excluded structurally.
Present the counts (skills scanned, rule files, headings) before analysis.
Phase 2 — Cross-read & Verdict (inline, holistic)
Read every skill body and every rule into one context and analyze them together — extraction and matching are a single pass. Seeing all skills at once is what makes the recurrence count exact and the "not already in rules" test reliable.
A principle is a candidate only if ALL of these hold:
- Environment-specific — a fact, a wiring, or a trap particular to this machine, harness, or set of accounts. A general engineering principle is not a candidate no matter how many skills repeat it.
- Substrate does not already do it — if the current model handles it natively, a written rule does not add behaviour; it freezes an older default and competes with the newer one.
- Not a procedure — steps and workflows belong in a skill. Residency is for facts and wiring, which have to be true before any particular task starts.
- Actionable behavior change — expressible as "do X" / "don't do Y", not "X is important"
- Clear violation risk — what goes wrong if ignored, in one sentence
- Not already in rules — check the full rules text, including the same idea in different words
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago Changed · +6 lines cfe31013578f
- 1mo ago Changed · +2 lines 8841ce4cd6dd
- 1mo ago Changed · -105 tokens per session 9129b3751c9e
- 1mo ago Changed 51d8512e7eb9
- 1mo ago Changed 6ca54a8145ec
- 1mo ago Changed · -4 lines e72757296caf
- 2mo ago Changed · -31 lines 97feb01a3079
- 2mo ago First seen · 183 lines · 123 tokens per session scan A fc4499cefa94
rules-distill is a skill published in the GitHub repository shimo4228/claude-harness (4 stars, last pushed 5d ago), licensed MIT. It adds 18 tokens to every session and 1,962 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
rules-distill compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| rules-distillshimo4228/claude-harness | Skill | 4 | 5d ago | MIT | A | 18 | Claude Code |
| memory-bankfockus/skill-memory-bank | Skill | 33 | 26d ago | MIT | A | 110 | Claude Code |
| write-terva-loreterva-sh/terva | Skill | 5 | 9d ago | MIT | A | 66 | Claude Code, Codex |
| onboardRockielab/rockie-claude | Skill | 23 | 1mo ago | Apache-2.0 | A | 117 | Claude Code |
| scheduled-notesRockielab/rockie-claude | Skill | 23 | 1mo ago | Apache-2.0 | A | 63 | Claude Code |
| handoffterva-sh/terva | Skill | 5 | 9d ago | MIT | A | 56 | Claude Code, Codex |
| retrospectiveterva-sh/terva | Skill | 5 | 9d ago | MIT | A | 76 | Claude Code, Codex |