Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add sonichi/sutando --skill collaboration-intelligencegit clone --depth 1 https://github.com/sonichi/sutandoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sonichi/sutando/collaboration-intelligence)<a href="https://agentmods.dev/skills/sonichi/sutando/collaboration-intelligence"><img src="https://agentmods.dev/badge/skills/sonichi/sutando/collaboration-intelligence/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sonichi/sutando/collaboration-intelligence"><img src="https://agentmods.dev/badge/skills/sonichi/sutando/collaboration-intelligence.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 175 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
- medium Excessive Agency · line 94 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00208 | $0.10414 |
| Opus 5.5 | $0.00083 | $0.04166 |
| Sonnet 5.5 | $0.00042 | $0.02083 |
| Haiku 4.5 | $0.00021 | $0.01041 |
Grade A, and why
collaboration-intelligence scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 521 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Collaboration Intelligence
Build a living, evidence-backed collaboration map. Treat it as a coordination aid, not an authority or surveillance profile.
First run
A freshly installed map is empty, and the Operating contract below does not bootstrap it. Step 1 there says to load the quick-lookup index first — on a new install there is no index, so an agent queries nothing, reports a miss, learns nothing, and stays empty. It never errors. An unbootstrapped map and a working one are indistinguishable from outside, which is the failure mode this skill exists to fight, turned on itself.
So run this once, before relying on the contract.
0. Decide whether this pass may bootstrap at all — before seeding and before sweeping.
The test is per-pass, not per-agent: does this pass have a serving channel_id?
- with one → do not bootstrap. Not the sweep, and not the seeding either: soliciting or recording cross-provider identity links is itself collection, and doing it while serving an ordinary room task persists sensitive cross-room associations before any privacy check. Report and stop.
- without one (a maintenance pass, owner-tier, serving no channel) → proceed to step 1.
Do not shortcut this by source type. "Cron passes carry no channel_id" is host-specific and was measured false: one host had 153 cron tasks with zero channel_id, another had 3 of 3 carrying one. Read the pass you are in.
And do not read the gate as clearance. Measured: gate(serving_channel_id=None, …) returns ALLOWED, because the blacklist lookup misses and an empty blacklist permits — it fails open. That is an absence of jurisdiction, not a permission; the judgement stays yours.
1. Seed the owner-stated identity map before sweeping. The sweep enriches it; it never substitutes for it.
This ordering is measured, not stylistic. On a 7,810-file corpus the sweep produced immediately usable room knowledge — traffic ranking plus honest coverage flags — and, for identities, a schema-shaped pile: the top participant by traffic and the owner themselves both came back as bare unknown ids, because Discord headers carry no display name. Any heuristic of the form "high traffic ⇒ important human" would have misclassified the owner and a peer bot with identical confidence.
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · -2 lines 7787fa6024a2
- 1mo ago Changed · +19 lines cdfd2ec909f7
- 1mo ago Changed b9676ebcefe9
- 1mo ago First seen · 504 lines · 208 tokens per session scan A aa109d2dbbed
collaboration-intelligence is a skill published in the GitHub repository sonichi/sutando (399 stars, last pushed today), licensed MIT. It adds 208 tokens to every session and 10,414 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
vellum-memory-v2-migration
Perform a one-time migration from memory v1, to memory v2, which was introduced in 0.8.0.
vellum-memory-v3-migration
One-time migration of an existing memory-v2 concept corpus into the memory-v3 section-grain "wiki" — topical articles with a stand-alone lead and queryable sections — with loss-proof staging, assistant-reviewed authoring, and a retrieval-eval gate before cutover.
daily-briefing
Proactive daily briefing that fires on a recurring schedule, pulls recent memory and workspace context, composes a structured summary (action items, progress, radar, next steps), and delivers it to all active channels. Enable with a time like "set up my daily briefing at 9am". Disable, reschedule, or check status at…
openclaw-lite
On first message, check if /.loci/lite/tasks/active.md exists.
loci
Use a shared local Loci brain for personal memory, tasks, notes and project context.
memory-corpus-ingest
Ingest a large dataset into memory as a skimmed map. Cold-store the raw files under a workspace imports directory, census them into a slice plan, skim each slice into compact map pages that point back at the raw files, ingest the map with the memory ingest CLI, and author a drill-in retrieval skill so the corpus stays…