Borrowing it
Nothing to install: this file belongs to suisya-systems/claude-org-ja. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/suisya-systems/claude-org-ja/main/.claude/skills/org-curate/SKILL.mdgit clone --depth 1 https://github.com/suisya-systems/claude-org-jaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-curate)<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-curate"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-curate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-curate"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-curate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 150 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 255 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00104 | $0.07837 |
| Opus 5 | $0.00052 | $0.03918 |
| Sonnet 5 | $0.00021 | $0.01567 |
| Haiku 4.5 | $0.00010 | $0.00784 |
Grade A, and why
org-curate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 302 lines — stays where its author put it; the contents beside it link to each section on GitHub.
org-curate: 知見整理
knowledge/raw/ に蓄積された生の学びを読み、分類・統合して knowledge/curated/ に書き出す。
輸送層(transport)両系 — 既定
broker/ opt-inrenga: 本ファイル(および各スキル)の peer message・pane 操作はmcp__org-broker__*で書いてあり、ORG_TRANSPORT無設定=既定brokerではそのまま従えばよい。ORG_TRANSPORT=renga(opt-in、切戻し可)では MCP サーバー名がrenga-peersになり、完全修飾名がmcp__org-broker__*→mcp__renga-peers__*に機械置換される(引数形・セマンティクスは同一なので操作の論理は変わらない)。輸送依存で手順が変わる差は次の 3 点:
- 受信モデル(既定 = push 一次 =
claude/channel/ pull フォールバック): 既定 broker は push 一次に設計されている(runtime push-first 0.1.24+、設計 SoT は transport-labdocs/design/broker-native-roles.md§9): 各ペイン同居の channel sidecar(server:org-broker-channel)が broker キューを ~1 秒間隔で claim→push し、notifications/claude/channelで本文を idle セッションへ注入する(「受けたら即応答」契機が生まれる)。ワーカー ack(to_id="worker-{task_id}")・retro gate ack(to_id="dispatcher")・ディスパッチャー handover 経路のsend_message/check_messages/send_keys/inspect_paneは同じツール名(mcp__org-broker__*)で動く。pull はフォールバック層: sidecar 不在 / unhealthy(heartbeat timeout でdelivery_mode=PULL)/ channel 非対応ペイン(codex pull-peer)/ claude.ai login 不在時は、各役割が自身の cadence で能動的にcheck_messagesする(役割別 cadence: worker=ターン境界 / 完了後 bounded/loop・dispatcher=/loop 3m・secretary=ターン冒頭。「ナッジを見たらcheck_messages」prose は撤回せずこの fallback cadence として読む)。ORG_TRANSPORT=renga(opt-in)では、ワーカー報告・ディスパッチャー応答が<channel source="renga-peers" …>として in-band で push される(renga の in-band push と broker push 一次は同じ即応契機)。契約面は Surface 8 + push-primary amendment で push 一次が ratified 済み(2026-06-15、S3。pull は fallback として retain・renga 不変)。- spawn 儀式(既定 = folder-trust 承認 + dev-channel sidecar 承認の 2 段): 子ペイン起動時、既定 broker は
--mcp-config <broker>を注入し Claude Code の folder-trust プロンプトをsend_keys(enter=true)で機械承認するのに加えて、push 一次のため channel sidecar を--dangerously-load-development-channels server:org-broker-channelで load し dev-channel 承認プロンプト(spawn-flow 3-3b)をsend_keys(enter=true)で機械承認する(folder-trust + dev-channel の 2 段承認。詳細は.dispatcher/references/spawn-flow.md3-2 / 3-3b、設計は broker-native-roles.md §9.5)。ORG_TRANSPORT=renga(opt-in)では--dangerously-load-development-channels server:renga-peersを注入し「Load development channel?」を Enter 承認する 1 段。注: attention watcher は transport 非依存の CLI ペインであり、folder-trust / dev-channel いずれの 2 段承認の対象外(spawn 儀式の反転に巻き込まない)。- エラー分岐(既定 = broker 拡張コード込み): 既定 broker は shared codes(
pane_not_found/last_pane/invalid-params、Surface 6)に加え broker 固有[token_invalid]/[session_invalid]/[tool_not_authorized]/[no_backend](= adapter_unavailable)/[nudge_failed]/[peer_not_found]/[name_taken]/[unknown_tool]を返しうる(未知コードは default-branch で escalate)。ORG_TRANSPORT=renga時は broker 固有コードは発生せず shared codes + renga 固有コードのみ。契約面の正本は
docs/contracts/backend-interface-contract.mdSurface 8(broker auth & delivery、ratified 2026-06-14)+ 末尾「Ratified amendment (2026-06-15): push-primary delivery」(S3。broker push 一次が既定の契約、pull は structural fallback として retain)、設計 SoT は transport-labdocs/design/broker-native-roles.md§9(push 一次)/docs/design/ja-migration-plan.md§5・§8。opt-inrengaは削除せず常時有効な fallback として維持する(切戻しの安全装置)。broker 実走(dogfood)は Epic #6 Issue G スコープであり、本ファイルの既定運用経路ではない(既定の二フレーム注記(Refs #604): ここでの「既定broker」はコード既定フレーム —tools/transport.py: DEFAULT_TRANSPORTが runtime 0.1.28 (Epic #586) でbrokerにフリップ済みで、ja 生成器・transport.resolve()はこのコードフレームで render するため生成面はこう表示する。別に運用既定フレームがあり、broker 実走 dogfood が Epic #6 Issue G まで未活性のため運用上の既定経路はrenga。両フレームは指す対象(コード定数 vs 運用経路)が異なり矛盾しない。総説は rootCLAUDE.md「輸送層(transport)両系」節。)
起動モデル(オンデマンド化): 本スキルは 1 回の起動で 1 サイクルだけ実行する(/loop 禁止)。
閾値判定は外部スクリプト tools/check_curate_threshold.py に
一本化されており、本スキル内部には「raw 5 件未満なら即終了」のようなゲートは存在しない。
起動理由 reasons[] を受け取り、該当するステップだけを実行する。
パス解決(重要): 本スキル中の knowledge/... / tools/... 表記はリポジトリルート相対の
論理パスである。オンデマンド起動された curator ペインの CWD は .curator/ なので、Bash で
実行する際は ../knowledge/... / ../tools/...(または cd .. && pwd で得た絶対パス)に
読み替えること(.curator/CLAUDE.md の「パス」節と同じ規約。allowed-tools には両形が
許可済み)。リポジトリルートで手動実行する場合はそのまま使う。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 302 lines · 104 tokens per session scan A fa777ddb97ac
org-curate is a skill published in the GitHub repository suisya-systems/claude-org-ja (5 stars, last pushed 4d ago), licensed MIT. It adds 104 tokens to every session and 7,837 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
alephnet-node-operator
A complete social/economic network for AI agents. Provides semantic computing, distributed memory, social networking, coherence verification, autonomous learning, and token economics through an agent-centric API.
agent-lessons-learned-capture
Capture durable lessons from debugging, user corrections, missing capabilities, and repeated workflow friction so future sessions avoid the same mistakes. Use this skill when a non-obvious failure is diagnosed, the user corrects or updates the agent, a workaround or project conv…
agent-memory-continuity-infrastructure
Agent continuity and cognitive health infrastructure. Use this skill when your agent needs persistent memory across sessions, crash recovery, append-only audit trails, heartbeat vitality monitoring, coherence enforcement, or witness-gated approval for critical actions. Also use…
adaptive-coding-style-memory
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
add-persistent-memory-to-agents
Add persistent memory to any agent so it can remember prior work, maintain context across sessions, and continue long-running workflows.
agent-provenance-graph-memory
The Agent Provenance Graph for AI agents — the only memory layer where agents can prove what they knew, trace why they knew it, and coordinate without an LLM in the loop. Timestamped facts. Auditable decisions. Deterministic trust. Ask 'what blocks deploy?' → exact typed answer.…