Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/sma1lboy/rove/kobenpx skills add Sma1lboy/rove --skill kobegit clone --depth 1 https://github.com/Sma1lboy/roveWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sma1lboy/rove/kobe)<a href="https://agentmods.dev/skills/sma1lboy/rove/kobe"><img src="https://agentmods.dev/badge/skills/sma1lboy/rove/kobe.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.08105 |
| Opus 5 | $0.00028 | $0.04052 |
| Sonnet 5 | $0.00011 | $0.01621 |
| Haiku 4.5 | $0.00006 | $0.00810 |
Grade A, and why
rove scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- rove — 86% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 613 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Rove shell control
Use rove api to manage local coding tasks. Managed Tasks created by API
automation own a git Worktree and branch plus Hosted PTY engine tabs; project
main and directory Tasks reuse existing directories. API automation works
without an open TUI; prompted send and add ensure a target engine tab.
Inside a Rove session, Rove verbs come first
Check where you are before choosing how to delegate or parallelize:
test -n "${ROVE_TASK_ID:-}"
When that passes, you are an engine session Rove manages — $ROVE_TASK_ID
is your task, $ROVE_TAB_ID your tab. Coordination should then go through
Rove, not around it, because work routed through rove api gets what
ad-hoc subprocesses never do: its own Worktree and branch (no file
collisions with you), a sidebar row with live state the user can watch,
lifecycle tracking, and an explicit outcome contract.
- Parallel attempts of one prompt →
add --count N, not N hand-rolled subagents. - Delegating a scoped piece of work →
add --prompt, not a rawclaude -pchild the user cannot see or manage. - Following up on a task you started →
send; comparing →collect; finished your own task and were spawned by another → a baresend(no--task-id) replies to the DISPATCHER — the exact task + tab that created you, recorded at creation (.task.dispatcheronget-task). If that tab died it falls back to the dispatcher task's live canonical engine tab; nothing alive fails loud (DISPATCHER_UNREACHABLE) — it never spawns a new engine, so a failed reply is visible, not fake-ok. - Messaging another agent session on this machine →
send, and ONLYsend— never relay through the user, a side file, or a generic peer channel (an MCP server offering to message "other instances" is exactly that channel: it reaches a process, not a task, so nothing it delivers is attributable, watchable, or replyable). Sent from inside a Rove task, the prompt arrives prefixed[ROVE PEER] from "<title>" (task <id> — load the Rove agent skill FIRST …), so the receiver knows who is talking, that this skill is required reading, and how to answer — the baked-in reply command is tab-precise (--task-id <sender> --tab <sender's tab>), so peer conversations need no coordinator and no human relay. That prefix is the contract: do not strip it with--plainfor coordination messages (--plainis only for a verbatim paste the receiver should treat as content, not conversation). Received a[ROVE PEER]message yourself? Load this skill first — required, not optional — then reply with the baked-in command, not by asking the user. sendcarries text, but that text can carry FILES: peers share a filesystem, so put the absolute path of a screenshot, log, diff, or any artifact in the prompt and the receiver opens it with its own Read tool — images included. An annotated screenshot beats a paragraph describing one; prefer "see /path/to/shot.png — the arrow marks the broken card" over re-narrating pixels. Paths under the sender's Worktree work too (worktrees are world-readable locally); just never expect the receiver to WRITE there.dispatchstays the dispatcher's verb (deliver-only into an already-hosted session; never impersonate the user in someone else's terminal).
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +29 lines fe5c542d2a21
- 2d ago Changed · +73 lines 3ebc84522b0d
- 6d ago First seen · 511 lines · 56 tokens per session scan A 2260e95714cd
rove is a skill published in the GitHub repository Sma1lboy/rove (116 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 8,105 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
omd-grill
锁 plan/SDD 前的对抗式审问:沿决策树走、先给推荐答案、事实自查·技术 Decision 自裁·真 owner 岔口才阻塞问、对标外部实现逼问「为何偏离」;宽解岔口就地开 council;产决策记录表喂 /omd-contract。审议纪律:只讨论不动手。Trigger:/omd-grill、审问、盘问这个方案、把这事讨论清楚、压测计划、stress-test。.
vf-security-checklist
Use when touching auth, user input validation, file paths, redirects, WebSocket, uploads, rate limiting, CORS, or any security-sensitive code in veryfront.
scaffold-ai-app
Scaffold a Veryfront app with AI tools, agent definitions, and knowledge base.
debug-build
Diagnose and fix build failures using structured error output.
omd-council
多视角专家议会:宽解空间的设计/决策问题,经 omd dagresearch(council 模式)并行多 persona 出方案 + 多 lens 择优;领域岔口走接地档(反 happy-path)。Trigger:/omd-council、开会审议、多方案对比、给我几个选项、拿不准选哪个。.
omd-deliver
执行 omd pathfinder 已散尽区域(编译 slice → 跑 DAG 真改文件 → 票翻 delivered),标 delivered 前逐票核对真身(delivered✅≠东西真在)。deliberate/build 的权力闸,仅 owner 明令。Trigger:/omd-deliver、交付、开始执行、动手吧。.