Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tessaryai/plugins/connectnpx skills add tessaryai/plugins --skill connectgit clone --depth 1 https://github.com/tessaryai/pluginsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00097 | $0.04140 |
| Opus 5 | $0.00048 | $0.02070 |
| Sonnet 5 | $0.00019 | $0.00828 |
| Haiku 4.5 | $0.00010 | $0.00414 |
Grade B, and why
connect scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
`~/.config/tessary-evals/credentials.json` (chmod 600) and prints `Linked to <org>/<project>`. How it starts
The opening of the file, as written. The whole thing — 272 lines — stays where its author put it; the contents beside it link to each section on GitHub.
connect — link this repo to evals.tessary.ai and load its tools
This is the front door to the Tessary evals platform for a coding agent. It does four things and then gets out of the way:
-
Link this repo to a project (a one-time device-code handshake in the browser).
-
Detect whether this repo already emits OpenTelemetry and, if so, wire its OTLP export to the project (point it at
POST /v1/traceswith the link token). OTLP is the only supported ingestion path. This is the "detect the setup in the project and wire it to tessary" step. -
Register the platform's authenticated MCP server into Claude Code (privately, per-repo) so you — the coding agent — get native tools. Every one of them reads; there is no write, nothing that spends, and nothing that starts an agent run. Roughly:
get_project(what this token is bound to, plus whether anything is arriving at all),list_cases/get_case(what is wrong right now — andget_casecarries the root-cause report inline once one has finished),list_findings/get_finding(classifier drift),list_call_sites/list_failure_modes/list_quality_dimensions(the imported taxonomy),list_traces/get_trace,list_spans/get_span,list_sessions/get_session(find the traffic, then read it — theget_*half is where the raw conversation text lives),describe_datasetplusquery_count/query_timeseries/query_facets/query_search(aggregates over tool calls, classifier events and usage rollups), andlist_graders/get_graderwhere the org holds the graders capability.Do not treat that as a fixed list — read
tools/listand report what it actually returns. That instruction is the durable part of this step; the paragraph above it is a hint about shape and it will drift again. Every tool declares a capability the org must hold to be offered it, so the real catalogue is per-token and shorter for most projects; a tool the org does not hold reads as an unknown tool, not a permission error. Naming tools from memory is how this skill spent two releases telling the agent to call a tool that had become a no-op while never mentioningget_span/get_trace— and then, one release later, still named five triage and RCA tools the platform had deleted. Twice now the prose was wrong andtools/listwas right.If the user asks for something no offered tool answers, say so — do not reach for a name you remember. Concretely: starting a triage run and editing a grader are not tools, by design. Those are platform UI actions; your part is to read the result afterwards (a finished report arrives inline on
get_case). -
Report what's in the project so the user knows what they can do next.
After this, the user assesses call sites by talking to you — you call the platform tools
directly. No local synthesis pipeline, no Python per read. The .tessary/ bundle itself is
authored and maintained by the platform's observer: once tagged traffic is flowing and the
repo is connected on the platform (Settings → Git integration), the observer reads the code on the org's
schedule and proposes the bundle — call sites, failure modes, grader definitions — as a draft
PR the user reviews and merges. There is no local bootstrap step anymore.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 272 lines · 97 tokens per session scan B 6c7d9bffdcce
connect is a skill published in the GitHub repository tessaryai/plugins (3 stars, last pushed 15d ago), licensed MIT. It adds 97 tokens to every session and 4,140 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
archon
Autonomous multi-session campaign agent. Decomposes large work into phases, delegates to sub-agents, reviews output, and maintains campaign state across context windows. Use for work that spans multiple sessions and needs persistent state, quality judgment, and strategic decomposition.
create-app
End-to-end app creation from a single description. Five tiers: blank project, guided, templated, fully generated, or feature addition to existing codebase. Routes through PRD, architecture, and Archon campaign with verification at every step.
map
Structural codebase index generator. Builds a compact JSON map of files, exports, imports, dependency graph, and roles. Queryable by keyword. Injected into fleet agents as context slices to reduce token usage on code navigation.
marshal
Meta-orchestrator that takes any direction — broad, specific, or vague — and autonomously chains skills and context into actionable work. Gathers context from codebase, docs, and memory. Only asks the user when it genuinely cannot proceed. Single-session orchestrator.
stop-that-shit
Keep coding agents focused on requested and necessary work. Use for bounded changes, review-only tasks, scope creep, speculative hardening, unnecessary hashing or dependencies, repeated audit loops, or when the user invokes Stop That Shit.
do
Unified router that auto-routes user intent to the right direct action, skill, orchestrator, or explicit Operation Control plan. Classifies input by scope, complexity, persistence needs, and parallelism, then dispatches to the cheapest path that can handle it: direct command, skill, marshal, archon, or fleet. Single…