Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add smorky850612/Aurakit --skill auragit clone --depth 1 https://github.com/smorky850612/AurakitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/smorky850612/aurakit/aura)<a href="https://agentmods.dev/skills/smorky850612/aurakit/aura"><img src="https://agentmods.dev/badge/skills/smorky850612/aurakit/aura/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/smorky850612/aurakit/aura"><img src="https://agentmods.dev/badge/skills/smorky850612/aurakit/aura.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.08781 |
| Opus 5 | $0.00049 | $0.04390 |
| Sonnet 5 | $0.00020 | $0.01756 |
| Haiku 4.5 | $0.00010 | $0.00878 |
Grade A, and why
aura scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 558 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AuraKit v6 — /aura
DNA — AuraKit Identity (8 Principles)
AuraKit은 이 8가지 원칙을 모든 모드, 모든 턴, 모든 출력에서 반드시 지킨다. 위반하는 응답은 AuraKit이 아니다.
| # | Code | Principle | How |
|---|---|---|---|
| 1 | FAST | 어떤 스킬보다 빠르게. 멍때리지 않는다. | 세션캐시, ConfigHash, QUICK모드, Progressive Load, Cache-First Architecture |
| 2 | FLASHY | 가장 화려한 CLI. 하단바까지 정보를 넣는다. | StatusLine, Next Actions, 토큰 리포트, 파이프라인 표시 |
| 3 | SECURE | 보안은 실제 최고등급. | 6층 보안, 30훅, SEC-01~15, bash-guard, security-scan |
| 4 | THRIFTY | Opus를 써도 토큰 절약 최대. | Tiered Model, Fail-Only, Progressive Load, 세션캐시, CACHE-RULE-01~07 auto-enforcement |
| 5 | IMMORTAL | 컨텍스트가 날아가도 죽지 않는다. | 65% 컴팩트 방어, 스냅샷, PostCompact 복원, 세션 재개 |
| 6 | EVOLVING | 쓸수록 똑똑해진다. 멈추지 않는다. | Instinct 학습, 글로벌 패턴 공유, instinct:evolve |
| 7 | UNIVERSAL | 어디서든, 누구든, 어떤 언어든. | 8언어, 46모드, 16 전문 에이전트, 크로스하네스 5플랫폼, 비개발자 QUICK모드 |
| 8 | TOP-TIER | 스킬 중 탑티어. 비교 대상 없음. | 위 7개의 총합 |
언어 규칙: 사용자 메시지 언어 자동 감지 → 동일 언어로 응답. 한국어→한국어, 日本語→日本語, 中文→中文, English→English, Español→Español, Français→Français, Deutsch→Deutsch, Italiano→Italiano.
Quick Start / 빠른 시작
📦 Install / 설치:
bash install.sh— activates L3 (bash-guard.js) · L5 (security-scan.sh) · L4 (Worktree agent isolation). Without this, only L1/L2 (agent roles + tool blocklist) are active.🔄 Update / 업데이트 (기존 사용자):
npx @smorky85/aurakit@latest— 최신 버전으로 스킬·훅·보안 규칙 일괄 갱신..aura/프로젝트 데이터는 유지됨.
# Recommended after install.sh (hooks replace per-action dialogs)
claude --dangerously-skip-permissions
/aura build: login with JWT # BUILD (English)
/aura 로그인 기능 만들어줘 # BUILD (Korean · auto-detect)
/aura fix: TypeError in auth.ts # FIX
/aura 코드 정리해줘 # CLEAN
/aura Vercel 배포 설정해줘 # DEPLOY
/aura 코드 리뷰해줘 # REVIEW
/aura! 버튼 색상 변경 # QUICK mode (protocol-minimal)
⚠️
--dangerously-skip-permissionsskips per-tool confirmation dialogs. AuraKit's hooks enforce security instead. If you haven't runinstall.sh, omit this flag — Claude will ask for confirmation on each action.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- resources/agent-security.md 4.2 KB
- resources/agent-spawning.md 5.9 KB
- resources/agent-team.md 5.7 KB
- resources/archive-pipeline.md 3.5 KB
- resources/autopus-agent-teams.md 6.8 KB
- resources/autopus-ax-annotation.md 6.1 KB
- resources/autopus-executor-profiles.md 9.9 KB
- resources/autopus-experiment-loop.md 5.9 KB
- resources/autopus-lore-commit.md 6.0 KB
- resources/autopus-pipeline-v2.md 8.5 KB
- resources/autopus-spec-system.md 4.8 KB
- resources/autopus-validator-gates.md 7.0 KB
- resources/autopus-worktree-isolation.md 4.6 KB
- resources/baas-pipeline.md 3.8 KB
- resources/batch-pipeline.md 4.9 KB
- resources/brainstorming.md 4.7 KB
- resources/branch-finishing.md 4.7 KB
- resources/build-pipeline.md 12 KB
- resources/build-resolvers-cpp.md 10.0 KB
- resources/build-resolvers-go.md 1.2 KB
- resources/build-resolvers-java.md 9.1 KB
- resources/build-resolvers-kotlin.md 8.7 KB
- resources/build-resolvers-python.md 9.0 KB
- resources/build-resolvers-rust.md 1.2 KB
- resources/build-resolvers-swift.md 12 KB
- resources/build-resolvers.md 1.6 KB
- resources/business-skills.md 7.0 KB
- resources/cache-engineering.md 6.6 KB
- resources/clean-pipeline.md 6.5 KB
- resources/common-protocol.md 7.4 KB
- resources/config-schema.md 3.0 KB
- resources/cross-harness.md 17 KB
- resources/deploy-enterprise.md 9.0 KB
- resources/deploy-pipeline.md 6.9 KB
- resources/design-pipeline.md 3.2 KB
- resources/desktop-pipeline.md 3.5 KB
- resources/discovery-protocol.md 3.3 KB
- resources/e2e-pipeline.md 7.7 KB
- resources/explain-pipeline.md 972 B
- resources/fix-pipeline.md 5.6 KB
- resources/framework-patterns.md 8.3 KB
- resources/gap-check.md 3.4 KB
- resources/install-guide.md 3.4 KB
- resources/instinct-system.md 6.8 KB
- resources/iterate-pipeline.md 2.5 KB
- resources/language-reviewers.md 19 KB
- resources/loop-pipeline.md 3.5 KB
- resources/mcp-configs.md 4.7 KB
- resources/migrate-pipeline.md 1.5 KB
- resources/mobile-pipeline.md 3.5 KB
- resources/mode-reference.md 6.1 KB
- resources/model-routing.md 9.1 KB
- resources/orchestration-patterns.md 5.9 KB
- resources/payment-lemonsqueezy.md 5.6 KB
- resources/payment-pipeline.md 11 KB
- resources/payment-polar.md 3.6 KB
- resources/payment-steppay.md 4.8 KB
- resources/payment-stripe.md 6.7 KB
- resources/payment-toss.md 7.2 KB
- resources/pipeline-guide.md 6.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 558 lines · 99 tokens per session scan A 52e1429de7fc
aura is a skill published in the GitHub repository smorky850612/Aurakit (41 stars, last pushed 4mo ago), licensed MIT. It adds 99 tokens to every session and 8,781 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
go-testing
Trigger: Go tests, go test coverage, Bubbletea teatest, golden files. Apply focused Go testing patterns.
iterative-development
TDD iteration loops using Claude Code Stop hooks - runs tests after each response, feeds failures back automatically.
mnemos
Task-scoped memory lifecycle — typed MnemoGraph prevents lossy context compaction by treating facts/decisions/code-refs/handoffs as distinct node types with per-type eviction policies.
python
Python development with ruff, mypy, pytest - TDD and type safety.
memstack-business-gdpr
Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…
memstack-deployment-domain-ssl
Use this skill when the user says 'setup domain', 'configure DNS', 'SSL certificate', 'domain-ssl', 'custom domain', 'HTTPS setup', or needs to configure DNS records, SSL certificates, and custom domains for any hosting provider. Do NOT use for full deployment workflows.