Borrowing it
Nothing to install: this file belongs to suisya-systems/claude-org-ja. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/suisya-systems/claude-org-ja/main/.claude/skills/org-attach/SKILL.mdgit clone --depth 1 https://github.com/suisya-systems/claude-org-jaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-attach)<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-attach"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-attach/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-attach"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-attach.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 60 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 62 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00313 | $0.05845 |
| Opus 5 | $0.00156 | $0.02923 |
| Sonnet 5 | $0.00063 | $0.01169 |
| Haiku 4.5 | $0.00031 | $0.00585 |
Grade A, and why
org-attach scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 281 lines — stays where its author put it; the contents beside it link to each section on GitHub.
org-attach: 組織ペインへの tmux attach コマンドを生成（read-only）
組織の生きているペイン（secretary / dispatcher / worker）へ人間が自分のターミナルから
tmux で直接 attach するための attach コマンド文字列を生成して表示する スキル。
このスキルは 何も attach しない・どのペインも変更しない。論理ペイン一覧（broker）と
tmux 側の pane_id↔session マッピングを pane_id（%N）で join し、各ペインへの attach コマンドを
role + name(task_id) ラベル付きで印字するだけ。コピーした人間がコマンドを自分の端末に貼って入る。
輸送層 両系（frame C / 二フレーム） — このスキルは broker(tmux) フレーム専用: このスキルは tmux backend（socket
claude-org-broker）上の detached tmux session への attach を 前提とする。broker フレーム: 各 broker ペインはclaude-org-broker-{pid}-{seq}という独立した detached tmux session（1 ペイン = 1 session）として存在し、tmux attach -t <session>で入れる ― 本スキルの attach モデルが意味を持つ主フレームはこちら。renga フレーム（opt-in,ORG_TRANSPORT=renga）は概念が異なる: renga のペインは所属タブ内のタイルであって、独立した detached session ではない。「detached session へ attach し直す」概念がそのまま写像せず、ペイン単位のtmux attach -t <session>は存在しない。よってORG_TRANSPORT=rengaでは本スキルの broker/tmux attach 形は適用外で、org のペインが並ぶタブを表示して直接見る。org が全ペインを同一タブへ置くのは org 側の配置規則であり、規範の正本は契約docs/contracts/backend-interface-contract.md§4.2 の SINGLE-TAB MUST（本スキルはこれを再掲せず参照する）。したがってその org のタブを表示している 間は 1 画面で全ペインが見えるが、別のタブを表示している間は org のペインは視界に入らない。そのときは org のタブへ切り替えるか、renga の org サイドバー（全タブ横断でタブとペインを一覧する cross-tab パネル。 rengasrc/app/org_sidebar.rs:1-3）から該当ペインを選ぶ。 この適用外は transport が renga の場合に限る: 外側フレームが renga でもORG_TRANSPORTが broker の 構成では detached tmux session が実在するので本スキルは適用される（その場合に必要なのは attach 打鍵のCtrl+B衝突回避で、手順はdocs/operations/dispatcher-view.md「外側フレームが renga の 場合」）。本スキルはORG_TRANSPORT=rengaのときだけ「broker(tmux) 専用ツールです」と明示して停止する （下記 Step 0）。（既定の二フレーム注記（Refs #604）: org-attach は本質的に broker/tmux ツールなので header を broker 主軸で書く。輸送層全体の既定は二つのフレームで指す対象が異なる ― 運用既定は renga （broker 実走 dogfood が Epic #6 Issue G まで未活性）だが、コード既定は
tools/transport.py: DEFAULT_TRANSPORTが runtime 0.1.28 (Epic #586) でrenga→brokerにフリップ済み。broker tool を 使う手保守スキルのうち.claude/skills/org-attention-stop/SKILL.mdは header を 「既定broker/ opt-inrenga」のコード既定フレームで書く ― 本スキルはこの broker 主軸の先例に倣う。 （.claude/skills/org-attention-start/SKILL.mdは逆に「既定renga」 の運用既定フレームで書かれており、両者は指す対象が異なるだけで矛盾しない。）総説は rootCLAUDE.md「輸送層（transport）両系」節、契約面はdocs/contracts/backend-interface-contract.mdSurface 8。）
権限フレーム:
list_panesは broker の ops-tier ツール（secretary / dispatcher のみ付与、 worker には付与されない）。したがって org-attach は 窓口（Secretary）/ ディスパッチャー面のスキルで、 人間は窓口セッションから実行する。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 281 lines · 313 tokens per session scan A bdc3145eebae
org-attach is a skill published in the GitHub repository suisya-systems/claude-org-ja (5 stars, last pushed 2d ago), licensed MIT. It adds 313 tokens to every session and 5,845 once invoked, about $0.0016 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
takt
A workflow engine that runs a task through a sequence of steps defined in a YAML file, using separate coding agents for the work.
takt
A workflow engine for coordinating multiple coding agents. It reads a YAML workflow, a text configuration format, and moves agents through its defined steps and rules.
company-product-context
Compiles comprehensive company product context from PDF documents, web research, and industry knowledge.
skill-creator
Generates Anthropic Skills with complete workflow including GitHub PR creation and local download verification.
codebase-context-extractor
This skill provides a comprehensive context extraction system for large codebases. It intelligently analyzes code structure, dependencies, and relationships to extract relevant context for understanding, debugging, or modifying code.
Research Synthesis Workflow
A step-by-step guide to synthesizing research from multiple sources into a coherent summary.