second-brain-os: Skill for Claude Code

.agents/skills/migrate-work/SKILL.md

migrate-work is a skill for Claude Code, Codex from the-sid-dani/second-brain-os. It costs 144 tokens per session (10,321 once invoked), scanned B, original, MIT.

A tool for bringing existing work into a PARA workspace, a system that organizes information into Projects, Areas, Resources, and Archives. It learns about projects from local Claude Cowork sessions rather than scanning folders blindly.

In plain words
What is it for?
Use it to identify projects from past sessions, choose which ones to import, and create approved project or resource entries with copied files and memory notes.
Why use it?
It helps find work spread across different folders while protecting the original files. Discovery is read-only until you approve what should be added.

Skill for Claude CodeCodex

Written for Claude Code and Codex: allowed-tools in frontmatter, but also reads $CODEX_HOME. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

This is the-sid-dani/second-brain-os's own configuration. It tells Claude Code and Codex how to work on second-brain-os itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything second-brain-os configures →

Reuse

Borrowing it

Nothing to install: this file belongs to the-sid-dani/second-brain-os. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/the-sid-dani/second-brain-os/main/.agents/skills/migrate-work/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/the-sid-dani/second-brain-os

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for migrate-work

README.md
[![agentmods](https://agentmods.dev/badge/skills/the-sid-dani/second-brain-os/migrate-work/github.svg)](https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work)
Your own site
<a href="https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work"><img src="https://agentmods.dev/badge/skills/the-sid-dani/second-brain-os/migrate-work/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for migrate-work

Your own site · 80×15
<a href="https://agentmods.dev/skills/the-sid-dani/second-brain-os/migrate-work"><img src="https://agentmods.dev/badge/skills/the-sid-dani/second-brain-os/migrate-work.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 144 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 10,321 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00144 $0.10321
Opus 5.5 $0.00058 $0.04128
Sonnet 5.5 $0.00029 $0.02064
Haiku 4.5 $0.00014 $0.01032

Measured 7d ago against content hash c2dc8fa898e4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

migrate-work scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/collect-memories.py, scripts/enumerate-sessions.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

If many candidates showed "evidence mostly purged" from Claude Code or the Code tab, mention once that Claude Code keeps transcripts for `cleanupPeriodDays` (default 30) and that the user can raise it in `~/.claude/setti
.agents/skills/migrate-work/SKILL.md · 299 lines

How it starts

The opening of the file, as written. The whole thing — 299 lines — stays where its author put it; the contents beside it link to each section on GitHub.

migrate-work

Pulls your existing work into your PARA workspace. The signal is your past Claude and Codex sessions stored locally on your Mac, not a blind scan of your folders. It reads what you've actually been working on across Cowork, the Claude Desktop Code tab, the Claude Code CLI and Codex. It shows you the distinct projects it found that don't already have a home. For the ones you pick, it scaffolds clean PARA entries with a CLAUDE.md + memory.md, copying any real work files in (never moving them). It also brings over what Claude and Codex already remember about you (your global instructions, Claude Code's auto-memory, Codex's memories): facts about you go to USER.md, how you want the assistant to work goes to SOUL.md, and project notes go to that project's memory.md. You see every line before anything is written.

Why sessions, not a folder scan: your work could live anywhere; your sessions are the reliable record of what you actually do. Each session carries a title, a working directory, dates, and (while it still exists) a transcript. That's enough to recognize a project and seed its memory.

Hard invariants (DO NOT VIOLATE)

  • M1 — COPY, NEVER MOVE. Originals are never moved, renamed, or deleted. Bring work in with cp/rsync; the user's source folders stay exactly where they are. A move that loses someone's only copy of real work is unrecoverable.
  • M2 — DISCOVERY IS PURE READ. Phase 1 (enumerate sessions, read transcripts, scout-summarize) touches nothing on disk. No write happens before the approval gate. Every probe verb is read-only. Session stores and memory stores are never modified, and neither is cleanupPeriodDays or any other setting.
  • M3 — ONE APPROVAL GATE. Exactly one human stop: the barrier between discovery and writes. Nothing is scaffolded or copied until the user explicitly selects items. Low-confidence/flagged items are never auto-applied.
  • M4 — NO FABRICATION. Every discovered "project," summary, and seeded memory line traces to real session content. Never invent a project, a purpose, or a decision the transcript doesn't show. If a session is ambiguous, flag it for the user — don't guess. Recency-derived metadata (suggested_status, date range) is allowed ONLY as a LABELED inference confirmed at the approval gate. A session whose transcript is purged has only its title, folder and dates: say so, seed no decisions from it, and never reconstruct content from the title. Imported memory lines are written as they stand in the source file (only list markers, YAML quoting and Codex's internal file pointers removed): never reworded, merged, summarized or completed.
  • M5 — CODE PLACEMENT. Runnable code stays in its existing standalone repository or, after the user identifies an owning Area, may be copied into <workspace.areas>/<area>/apps/<app>/ (ignored by the outer repo). NEVER copy runnable code into tracked Projects, Resources, or Inbox paths (a COD project's ignored app/ is the only Projects exception, and only with approval).
  • M6 — NEVER AUTO-COMMIT. Writes create new files in the workspace; stop at the diff and surface a manual commit command. Never git add/git commit.
  • M7 — TRANSCRIPT HYGIENE. Scouts read only the user's prompts and the assistant's prose. They never read tool_result blocks, attachments or hook output, since that's where file contents, env dumps and tokens land. Seeded memory paraphrases in a few words; it never quotes a transcript verbatim and never carries a credential, key, URL token or personal identifier. Assistant prose can contain these too (cloud IDs, account IDs, people's names and emails echoed back from a tool), so scouts scrub them from everything they return, not just from tool output. Memory lines are the user's own notes and are imported as written, with two exceptions: a line that looks like a credential is never written and never echoed, only reported by file and line; and a line carrying another person's contact details (email, phone) is shown at the gate marked as such, never preselected.

Read the full file on GitHub · 299 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago Changed · +151 lines · +14 tokens per session scan A → B c2dc8fa898e4
  2. 1mo ago First seen · 148 lines · 130 tokens per session scan A 18ed90327961

Subscribe to this mod's changes

migrate-work is a skill published in the GitHub repository the-sid-dani/second-brain-os (3 stars, last pushed 7d ago), licensed MIT. It adds 144 tokens to every session and 10,321 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

retro-lost

Run a retrospective for an abandoned agent session (untouched for over 24 hours, never closed with a retro): rebuild context cold from the transcript, list what was built, sort Keep/Drop/Try and file the durable parts. Use from a nightly routine or on demand. Triggers: /retro-lost, retro for an abandoned session.

tonydzi/second-brain-starter-kit · 74 tokens

call-prep

A pre-call briefing workflow that first identifies the correct calendar booking and its contact details, then gathers information about that person. It avoids guessing between people who share a name.

tonydzi/second-brain-starter-kit · 101 tokens

agenda

Show the operator's day: today's calendar plus what needs them personally (leads due, people awaiting a reply, deadlines), pulled from Calendar and Telegram and ranked. Read-only: sends and commits nothing. Triggers: "/agenda", "what's on today", "my agenda".

tonydzi/second-brain-starter-kit · 59 tokens

pm

When you want to manage projects across your businesses using a kanban + Eisenhower methodology. One kanban per business (whatever portfolio of businesses, projects, or initiatives you run). Tool-agnostic — connects via API/MCP to whatever PM tool each business uses (Notion, GitHub Projects, Plane, Linear, Obsidian…

coreyhaines31/makerskills · 206 tokens

routine-craft

Write a routine that runs well with nobody watching: no duplicates, a self-contained prompt, a fitting schedule, stop rules, a quiet "nothing new" reply, and a known place for results to land.

androoAGI/starnet · 0 tokens

folyamatos-ellenorzes

Ellenorizd: 1) Naptar - van-e meeting 1 oran belul? 2) Email - jott-e surgos level az elmult oraban? 3) Kanban - van-e mai hataridovel kartya? Ha BARMIT talalsz ami fontos, szolj a beallitott csatornan tomoren. Ha minden csendes, ne irj semmit.

Szotasz/marveen · 14 tokens