Borrowing it
Nothing to install: this file belongs to tangosdev/sm64ds-decomp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/tangosdev/sm64ds-decomp/main/.claude/skills/decomp-tu-slicing/SKILL.mdgit clone --depth 1 https://github.com/tangosdev/sm64ds-decompWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tangosdev/sm64ds-decomp/decomp-tu-slicing)<a href="https://agentmods.dev/skills/tangosdev/sm64ds-decomp/decomp-tu-slicing"><img src="https://agentmods.dev/badge/skills/tangosdev/sm64ds-decomp/decomp-tu-slicing.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.03345 |
| Opus 5 | $0.00060 | $0.01673 |
| Sonnet 5 | $0.00024 | $0.00669 |
| Haiku 4.5 | $0.00012 | $0.00334 |
Grade A, and why
decomp-tu-slicing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 202 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Translation-unit slicing
The linker erased the original .cpp boundaries; tools/tu_map.py reads them back
out. Full derivation and limits: notes/tu-boundaries.md. To execute a merge and
verify it, use decomp-tu-build — this skill is about reading the map, not acting
on it.
0. Regenerate the map, in this order
python tools/rtti_extract.py # -> build/rtti.json
python tools/rtti_vtables.py # -> build/rtti_vtables.json
python tools/tu_map.py # -> build/tu_map.json
build/ is gitignored, so a fresh worktree has none of this.
Nothing enforces that order, and skipping it fails silently. vtable_labels()
returns {} when build/rtti_vtables.json is absent, and tu_map.py then writes a
complete, self-consistent, wrong map and exits 0. Measured on main from an
empty build/:
| full chain | rtti_vtables.json absent |
|
|---|---|---|
| whole-ROM TUs | 532 | 516 |
| boundaries | {low: 68, medium: 110, high: 280} |
{low: 72, medium: 124, high: 246} |
| TUs with a class | 400/532 | 370/516 |
| under-segmented | ov007, main, ov075, ov084 | ov007, main, ov005, ov084 |
| ov080 | 5 TUs, 4 classed | 6 TUs, 4 classed |
--check |
all gates PASS, exit 0 | all gates PASS, exit 0 |
The known-answer gate asserts ov080's classed TU count, which is 4 either way, so it
passes for the wrong reason. The under-segmented list is itself a casualty, so you
cannot use it to detect the problem either. The one visible tell is the negative-control
table, which collapses to blind 1 / blind-classed 0. There is no exit code to lean on:
check the prerequisites yourself.
--blind is not an opt-out — it is the negative control, dropping the mangled-name
signal to score what RTTI alone recovers. The whole flag set is --module, --verbose,
--check, --blind, --split-swallowers [K], --out; nothing suppresses the RTTI
labels while keeping the names. tubuild.py regenerates the map only when it is
entirely absent — a stale-but-present map is reported as a note and used as-is.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 63f46ff0e488
- 6d ago First seen · 202 lines · 120 tokens per session scan A f115273c76ff
decomp-tu-slicing is a skill published in the GitHub repository tangosdev/sm64ds-decomp (146 stars, last pushed today), licensed MIT. It adds 120 tokens to every session and 3,345 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
buffer-overflow-stack
Identify, exploit, and write custom payloads for classic Stack-Based Buffer Overflows in 32-bit and 64-bit applications. Use this skill when conducting exploit development, reverse engineering custom network protocols, or preparing for advanced certifications (OSCP, OSEP). Covers fuzzing, controlling EIP/RIP…
analyzing-java-jar-malware
Analyzes Java/JAR malware (such as Adwind/jRAT-class cross-platform RATs) by inventorying the archive, reading the manifest entry point, detecting obfuscators and string encryption, and flagging suspicious runtime, reflection, and networking class usage. Activates for requests to analyze a malicious JAR, inspect Java…
gdb
Debug and trace C/C++/Rust programs with the GNU Debugger (GDB) without blocking the agent. Use when you need to set tracepoints, inspect variables, or monitor a running process while staying responsive to the user.
zoom-meeting-sdk-unreal
Zoom Meeting SDK for Unreal Engine wrapper integrations. Use when building Unreal projects that embed Zoom meetings with C++ and Blueprint wrappers, including wrapper-to-SDK mapping concerns.
doca-argp
Use this skill for hands-on DOCA Arg Parser CLI work on a shipped sample or new DOCA-using app — adding / removing / renaming flags; wiring docaargpinit → register params → docaargpstart → docaargpdestroy in order; picking a parameter type from the full public enum (DOCAARGPTYPESTRING, INT, BOOLEAN, DEVICE, DEVICEREP…
ax-cpp-gen
Use when writing C++ code with axllm for AxGen programs, forward calls, indexed multi-sampling, result pickers, streaming, tools, assertions, traces, usage, and output parsing.