Borrowing it
Nothing to install: this file belongs to the-sid-dani/second-brain-os. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/the-sid-dani/second-brain-os/main/.agents/skills/migrate-work/SKILL.mdgit clone --depth 1 https://github.com/the-sid-dani/second-brain-osWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work)<a href="https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work"><img src="https://agentmods.dev/badge/skills/the-sid-dani/second-brain-os/migrate-work/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work"><img src="https://agentmods.dev/badge/skills/the-sid-dani/second-brain-os/migrate-work.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00144 | $0.10321 |
| Opus 5.5 | $0.00058 | $0.04128 |
| Sonnet 5.5 | $0.00029 | $0.02064 |
| Haiku 4.5 | $0.00014 | $0.01032 |
Grade B, and why
migrate-work scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
If many candidates showed "evidence mostly purged" from Claude Code or the Code tab, mention once that Claude Code keeps transcripts for `cleanupPeriodDays` (default 30) and that the user can raise it in `~/.claude/setti How it starts
The opening of the file, as written. The whole thing — 299 lines — stays where its author put it; the contents beside it link to each section on GitHub.
migrate-work
Pulls your existing work into your PARA workspace. The signal is your past Claude and Codex sessions stored locally on your Mac, not a blind scan of your folders. It reads what you've actually been working on across Cowork, the Claude Desktop Code tab, the Claude Code CLI and Codex. It shows you the distinct projects it found that don't already have a home. For the ones you pick, it scaffolds clean PARA entries with a CLAUDE.md + memory.md, copying any real work files in (never moving them). It also brings over what Claude and Codex already remember about you (your global instructions, Claude Code's auto-memory, Codex's memories): facts about you go to USER.md, how you want the assistant to work goes to SOUL.md, and project notes go to that project's memory.md. You see every line before anything is written.
Why sessions, not a folder scan: your work could live anywhere; your sessions are the reliable record of what you actually do. Each session carries a title, a working directory, dates, and (while it still exists) a transcript. That's enough to recognize a project and seed its memory.
Hard invariants (DO NOT VIOLATE)
- M1 — COPY, NEVER MOVE. Originals are never moved, renamed, or deleted. Bring work in with
cp/rsync; the user's source folders stay exactly where they are. A move that loses someone's only copy of real work is unrecoverable. - M2 — DISCOVERY IS PURE READ. Phase 1 (enumerate sessions, read transcripts, scout-summarize) touches nothing on disk. No write happens before the approval gate. Every probe verb is read-only. Session stores and memory stores are never modified, and neither is
cleanupPeriodDaysor any other setting. - M3 — ONE APPROVAL GATE. Exactly one human stop: the barrier between discovery and writes. Nothing is scaffolded or copied until the user explicitly selects items. Low-confidence/flagged items are never auto-applied.
- M4 — NO FABRICATION. Every discovered "project," summary, and seeded memory line traces to real session content. Never invent a project, a purpose, or a decision the transcript doesn't show. If a session is ambiguous, flag it for the user — don't guess. Recency-derived metadata (
suggested_status, date range) is allowed ONLY as a LABELED inference confirmed at the approval gate. A session whose transcript is purged has only its title, folder and dates: say so, seed no decisions from it, and never reconstruct content from the title. Imported memory lines are written as they stand in the source file (only list markers, YAML quoting and Codex's internal file pointers removed): never reworded, merged, summarized or completed. - M5 — CODE PLACEMENT. Runnable code stays in its existing standalone repository or, after the user identifies an owning Area, may be copied into
<workspace.areas>/<area>/apps/<app>/(ignored by the outer repo). NEVER copy runnable code into tracked Projects, Resources, or Inbox paths (a COD project's ignoredapp/is the only Projects exception, and only with approval). - M6 — NEVER AUTO-COMMIT. Writes create new files in the workspace; stop at the diff and surface a manual commit command. Never
git add/git commit. - M7 — TRANSCRIPT HYGIENE. Scouts read only the user's prompts and the assistant's prose. They never read
tool_resultblocks, attachments or hook output, since that's where file contents, env dumps and tokens land. Seeded memory paraphrases in a few words; it never quotes a transcript verbatim and never carries a credential, key, URL token or personal identifier. Assistant prose can contain these too (cloud IDs, account IDs, people's names and emails echoed back from a tool), so scouts scrub them from everything they return, not just from tool output. Memory lines are the user's own notes and are imported as written, with two exceptions: a line that looks like a credential is never written and never echoed, only reported by file and line; and a line carrying another person's contact details (email, phone) is shown at the gate marked as such, never preselected.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +151 lines · +14 tokens per session scan A → B c2dc8fa898e4
- 1mo ago First seen · 148 lines · 130 tokens per session scan A 18ed90327961
migrate-work is a skill published in the GitHub repository the-sid-dani/second-brain-os (3 stars, last pushed 7d ago), licensed MIT. It adds 144 tokens to every session and 10,321 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
retro-lost
Run a retrospective for an abandoned agent session (untouched for over 24 hours, never closed with a retro): rebuild context cold from the transcript, list what was built, sort Keep/Drop/Try and file the durable parts. Use from a nightly routine or on demand. Triggers: /retro-lost, retro for an abandoned session.
call-prep
A pre-call briefing workflow that first identifies the correct calendar booking and its contact details, then gathers information about that person. It avoids guessing between people who share a name.
agenda
Show the operator's day: today's calendar plus what needs them personally (leads due, people awaiting a reply, deadlines), pulled from Calendar and Telegram and ranked. Read-only: sends and commits nothing. Triggers: "/agenda", "what's on today", "my agenda".
pm
When you want to manage projects across your businesses using a kanban + Eisenhower methodology. One kanban per business (whatever portfolio of businesses, projects, or initiatives you run). Tool-agnostic — connects via API/MCP to whatever PM tool each business uses (Notion, GitHub Projects, Plane, Linear, Obsidian…
routine-craft
Write a routine that runs well with nobody watching: no duplicates, a self-contained prompt, a fitting schedule, stop rules, a quiet "nothing new" reply, and a known place for results to land.
folyamatos-ellenorzes
Ellenorizd: 1) Naptar - van-e meeting 1 oran belul? 2) Email - jott-e surgos level az elmult oraban? 3) Kanban - van-e mai hataridovel kartya? Ha BARMIT talalsz ami fontos, szolj a beallitott csatornan tomoren. Ha minden csendes, ne irj semmit.