Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tonydzi/second-brain-starter-kit --skill applygit clone --depth 1 https://github.com/tonydzi/second-brain-starter-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tonydzi/second-brain-starter-kit/apply)<a href="https://agentmods.dev/skills/tonydzi/second-brain-starter-kit/apply"><img src="https://agentmods.dev/badge/skills/tonydzi/second-brain-starter-kit/apply/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tonydzi/second-brain-starter-kit/apply"><img src="https://agentmods.dev/badge/skills/tonydzi/second-brain-starter-kit/apply.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.31914 |
| Opus 5.5 | $0.00026 | $0.12766 |
| Sonnet 5.5 | $0.00013 | $0.06383 |
| Haiku 4.5 | $0.00007 | $0.03191 |
Grade A, and why
apply scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **no-form ≠ приговор**: сперва curl embed-двери (`job_app?for=<slug>&token=<gh_jid>` — 200+first_name = форма ЕСТЬ, добавить хост в GH_EMBED_SLUGS: так ожили coinbase.com/brex.com); redirect на `error=true` = труп → cl Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
**Windows-грабля subprocess:** `subprocess.run(capture_output, timeout)` виснет НАВЕЧНО, если по таймауту убитый ребёнок оставил geckodriver/firefox с унаследованным пайпом → только `Popen` + `communicate(timeout)` + `ta How it starts
The opening of the file, as written. The whole thing — 871 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/apply — податчик вакансий Трубы А
Обкатано 01.09.2026 на пачке №1: 17 подач за сессию, 0 blocked, 0 CAPTCHA.
Источники (читать ПЕРЕД первой подачей, оба)
- Плейбук (данные кандидата + выученные ответы + стопы):
$OBSIDIAN_VAULT\04-Projects\Pipe-A-Batches\apply-playbook.md— ЕДИНЫЙ источник; email/телефон/ответы НЕ брать из старых брифов. - Пачка (URL + кластер CV + cover letters): файл
batch-*.mdтам же, либо строки из Sheets registry. Пачку СОБИРАЕТ отбор, руками список не составляем:python [путь владельца] -n 20(приказ Антона 01.09 «по 20 в день»). Он держит три потолка — лимит вендора считается из фактических applied-дат в jobs.db, ≤2 строк на компанию, ≤6 на кластер — и НЕ берёт строкиats='tg': их url ведёт на пост в чате, а не на форму. Ежедневная рутина =pipe-a-apply-daily(08:30).
Трекинг: Sheets «Pipe-A Funnel» id 1nbVAXkQZxnWIBwOAEXs4hKN5XCtXDgYepoaMFPWOmIw, вкладка registry (status=col O, applied=col P). ⚠️ ashby-ключи в registry ОБРЕЗАНЫ до 30 символов — upsert по полному ключу создаёт ДУБЛЬ; поэтому маркируем по НОМЕРУ СТРОКИ через хелпер (ниже), не upsert_row.
Конвейер на одну строку пачки
- Открыть URL (Chrome-MCP: подача от лица Антона = бан-чувствительное, рельса хаба).
- Заполнить поля ТОЛЬКО
find→computerclick+type. ⛔form_inputи JS-сеттеры на Ashby сбрасываются React-ре-рендером (проверено ×2: поля пустеют, резюме отвязывается). - CV:
file_uploadпо ref; PDF из$OBSIDIAN_VAULT\04-Projects\Pipe-A-Batches\sent-*\по колонкеcvреестра (FDE / Security / BD-EIR). - Cover letter: дословно из пачки + вариация из примечаний; в textarea — только клавиатурный type.
- Спорный вопрос → ответ из «Выученных ответов» плейбука; нет ответа и нет безопасного дефолта →
blocked-question, текст вопроса в список спотыканий, дальше. - Перед Submit — JS-сверка всех полей (
javascript_tool: имя/email/файл/письмо реально в полях, §3.6). Скриншоты Chrome-MCP бывают белым полотном — верить JS, не глазам. - Submit → дождаться «Success/Thank you». Скрытая валидация (Anthropic: «(Optional)… required») → дозаполнить, ресабмит.
- Отметить строку:
python3 ~/.claude/skills/apply/mark_row.py mark <url> applied <ISO-дата>(на Windows-хабе:python %USERPROFILE%\.claude\skills\apply\mark_row.py mark <url> applied <ISO-дата>) (перед пачкой один раз… build-cache; после этого 0 чтений на отметку — квота Sheets 60 чтений/мин, полный read = 1500+ строк). - Вакансия закрыта/404 → status
closed, идти дальше.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- mark_row.py 4.0 KB runs code
- rowmap.json 1738 KB
- tools/_test_ats_lib.py 6.8 KB runs code
- tools/_test_mark_row.py 5.5 KB runs code
- tools/_test_outcome_detector.py 5.0 KB runs code
- tools/_test_select_wave.py 16 KB runs code
- tools/answers-canon.md 11 KB
- tools/apply_generic.py 4.6 KB runs code
- tools/archaeology.js 6.2 KB runs code
- tools/ats_lib.py 12 KB runs code
- tools/company_caps.json 4.2 KB
- tools/gh_lib.py 6.6 KB runs code
- tools/lever_lib.py 9.3 KB runs code
- tools/mark_wave35.py 2.5 KB runs code
- tools/recover_gated.py 7.2 KB runs code
- tools/recover_results.json 2 B
- tools/restore_applied.py 3.3 KB runs code
- tools/select_wave.py 18 KB runs code
- tools/w10_applied_urls.json 727 B
- tools/w11_applied_urls.json 1.0 KB
- tools/w12_applied_urls.json 1.2 KB
- tools/w13_applied_urls.json 1.1 KB
- tools/w14_applied_urls.json 1.2 KB
- tools/w15_applied_urls.json 658 B
- tools/w21_applied_urls.json 1.1 KB
- tools/w22_applied_urls.json 595 B
- tools/w24_applied_urls.json 1.0 KB
- tools/w25_applied_urls.json 1.0 KB
- tools/w26_applied_urls.json 757 B
- tools/w27_applied_urls.json 959 B
- tools/w28_applied_urls.json 948 B
- tools/w29_applied_urls.json 885 B
- tools/w30_applied_urls.json 892 B
- tools/w31_applied_urls.json 591 B
- tools/w32_applied_urls.json 359 B
- tools/w33_applied_urls.json 1.2 KB
- tools/w34_applied_urls.json 514 B
- tools/w35_applied_urls.json 2 B
- tools/w9_applied_urls.json 1020 B
- tools/wave_ashby.js 13 KB runs code
- tools/wave_greenhouse.js 11 KB runs code
- tools/wave_lever.js 12 KB runs code
- tools/wave_workable.js 10 KB runs code
- tools/wk18_lib.py 14 KB runs code
- tools/zbook/applied_set.json 4.7 KB
- tools/zbook/batch_evening.json 12 KB
- tools/zbook/batch_runner.py 4.6 KB runs code
- tools/zbook/batch_w7.json 6.8 KB
- tools/zbook/batch_w9_go.json 52 KB
- tools/zbook/build_fix.py 1.9 KB runs code
- tools/zbook/build_gates.py 3.0 KB runs code
- tools/zbook/build_wave.py 3.9 KB runs code
- tools/zbook/copy_tools.py 3.2 KB runs code
- tools/zbook/entry_batch_evening.json 5.9 KB
- tools/zbook/evening_dialin.cmd 205 B runs code
- tools/zbook/fix_bytes.py 1.1 KB runs code
- tools/zbook/form_census.py 6.0 KB runs code
- tools/zbook/log_batch_evening.txt 2.9 KB
- tools/zbook/mail_body.py 1.5 KB runs code
- tools/zbook/mail_for.py 1.5 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago Changed af6791b4faa9
- 25d ago First seen · 871 lines · 66 tokens per session scan A 29d522863d1d
apply is a skill published in the GitHub repository tonydzi/second-brain-starter-kit (9 stars, last pushed today), licensed MIT. It adds 66 tokens to every session and 31,914 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-24.
Other skills, from other repositories
defuddle
Plan and, with explicit network consent, use an optional external Defuddle cleaner to extract article-like HTTPS pages as Markdown. Use for defuddle, clean this URL, strip page clutter, readable Markdown from a web page, or preparing a web source for later wiki ingestion.
superbrain-distill
Internal SuperBrain skill — run by the detached capture child to distill a session-event delta into routed Obsidian notes. Not for direct user invocation.
email-sorting
Customize and use a human-reviewed email sorting system for Gmail, Google Workspace, Outlook, Microsoft 365 or another connected mailbox. Use for first-time setup, folder or label recommendations from a read-only email sample, inbox triage, and applying approved sorting batches. Not for sending, replying to or…
facebook-personal-browser
Read your own signed-in personal Facebook inside Agent Chrome, strictly read-only. Open and read a specific post and its comments (fb-read), look inside a group you belong to, or check your own notifications or posts. Use when asked to "open this Facebook post", "read the comments on", "check my Facebook…
last30days-plus
The last30days research skill with your own subscriptions added as extra research lanes, driven inside Agent Chrome. Grok (Private Chat) for X/Twitter, Perplexity Deep research (Incognito) for the web and news, and Meta's Muse for Facebook groups and Instagram (experimental). Runs the upstream last30days skill…
muse-browser
EXPERIMENTAL. Research Facebook and Instagram (trends, Reels, creators, and conversations in Facebook groups you belong to) by asking Meta's own AI agent Muse (muse.ai) inside Agent Chrome, in a fresh side chat with a read-only instruction. Muse searches Facebook, Instagram and Threads posts your account can see and…