connect

A skill that connects a repository to the Tessary evaluation platform, which checks how coding-agent call sites behave in production. It can also connect telemetry and register read-only platform tools in Claude Code.

In plain words
What is it for?
Use it when connecting a repo to Tessary, configuring OpenTelemetry trace export, or inspecting evaluation cases and agent behavior.
Why use it?
It removes the manual setup needed to link a repository, send supported trace data, and inspect cases, findings, traces, and failure reports.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/tessaryai/plugins/connect
Any agent
npx skills add tessaryai/plugins --skill connect
Clone the repo
git clone --depth 1 https://github.com/tessaryai/plugins

Made for: Claude Code, Codex.

Per session 97 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,140 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00097 $0.04140
Opus 5 $0.00048 $0.02070
Sonnet 5 $0.00019 $0.00828
Haiku 4.5 $0.00010 $0.00414

Measured 2d ago against content hash 6c7d9bffdcce, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

connect scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

`~/.config/tessary-evals/credentials.json` (chmod 600) and prints `Linked to <org>/<project>`.
plugins/evals/skills/connect/SKILL.md · 272 lines

How it starts

The opening of the file, as written. The whole thing — 272 lines — stays where its author put it; the contents beside it link to each section on GitHub.

This is the front door to the Tessary evals platform for a coding agent. It does four things and then gets out of the way:

  1. Link this repo to a project (a one-time device-code handshake in the browser).

  2. Detect whether this repo already emits OpenTelemetry and, if so, wire its OTLP export to the project (point it at POST /v1/traces with the link token). OTLP is the only supported ingestion path. This is the "detect the setup in the project and wire it to tessary" step.

  3. Register the platform's authenticated MCP server into Claude Code (privately, per-repo) so you — the coding agent — get native tools. Every one of them reads; there is no write, nothing that spends, and nothing that starts an agent run. Roughly: get_project (what this token is bound to, plus whether anything is arriving at all), list_cases / get_case (what is wrong right now — and get_case carries the root-cause report inline once one has finished), list_findings / get_finding (classifier drift), list_call_sites / list_failure_modes / list_quality_dimensions (the imported taxonomy), list_traces / get_trace, list_spans / get_span, list_sessions / get_session (find the traffic, then read it — the get_* half is where the raw conversation text lives), describe_dataset plus query_count / query_timeseries / query_facets / query_search (aggregates over tool calls, classifier events and usage rollups), and list_graders / get_grader where the org holds the graders capability.

    Do not treat that as a fixed list — read tools/list and report what it actually returns. That instruction is the durable part of this step; the paragraph above it is a hint about shape and it will drift again. Every tool declares a capability the org must hold to be offered it, so the real catalogue is per-token and shorter for most projects; a tool the org does not hold reads as an unknown tool, not a permission error. Naming tools from memory is how this skill spent two releases telling the agent to call a tool that had become a no-op while never mentioning get_span / get_trace — and then, one release later, still named five triage and RCA tools the platform had deleted. Twice now the prose was wrong and tools/list was right.

    If the user asks for something no offered tool answers, say so — do not reach for a name you remember. Concretely: starting a triage run and editing a grader are not tools, by design. Those are platform UI actions; your part is to read the result afterwards (a finished report arrives inline on get_case).

  4. Report what's in the project so the user knows what they can do next.

After this, the user assesses call sites by talking to you — you call the platform tools directly. No local synthesis pipeline, no Python per read. The .tessary/ bundle itself is authored and maintained by the platform's observer: once tagged traffic is flowing and the repo is connected on the platform (Settings → Git integration), the observer reads the code on the org's schedule and proposes the bundle — call sites, failure modes, grader definitions — as a draft PR the user reviews and merges. There is no local bootstrap step anymore.

Read the full file on GitHub · 272 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 272 lines · 97 tokens per session scan B 6c7d9bffdcce

Subscribe to this mod's changes

connect is a skill published in the GitHub repository tessaryai/plugins (3 stars, last pushed 15d ago), licensed MIT. It adds 97 tokens to every session and 4,140 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

archon

Autonomous multi-session campaign agent. Decomposes large work into phases, delegates to sub-agents, reviews output, and maintains campaign state across context windows. Use for work that spans multiple sessions and needs persistent state, quality judgment, and strategic decomposition.

SethGammon/Citadel · 54 tokens

create-app

End-to-end app creation from a single description. Five tiers: blank project, guided, templated, fully generated, or feature addition to existing codebase. Routes through PRD, architecture, and Archon campaign with verification at every step.

SethGammon/Citadel · 52 tokens

map

Structural codebase index generator. Builds a compact JSON map of files, exports, imports, dependency graph, and roles. Queryable by keyword. Injected into fleet agents as context slices to reduce token usage on code navigation.

SethGammon/Citadel · 47 tokens

marshal

Meta-orchestrator that takes any direction — broad, specific, or vague — and autonomously chains skills and context into actionable work. Gathers context from codebase, docs, and memory. Only asks the user when it genuinely cannot proceed. Single-session orchestrator.

SethGammon/Citadel · 56 tokens

stop-that-shit

Keep coding agents focused on requested and necessary work. Use for bounded changes, review-only tasks, scope creep, speculative hardening, unnecessary hashing or dependencies, repeated audit loops, or when the user invokes Stop That Shit.

lennney/stop-that-shit · 50 tokens

do

Unified router that auto-routes user intent to the right direct action, skill, orchestrator, or explicit Operation Control plan. Classifies input by scope, complexity, persistence needs, and parallelism, then dispatches to the cheapest path that can handle it: direct command, skill, marshal, archon, or fleet. Single…

SethGammon/Citadel · 74 tokens