skill-governance-and-automation

skill-governance-and-automation is a skill for Claude Code, Codex from topprismdata/cultivating-ml-agent. It costs 137 tokens per session (1,262 once invoked), scanned A, original, MIT.

A process for checking and maintaining a growing library of coding-agent skills. It looks for unclear triggers, outdated evidence, broken references, overlap, and contradictions.

In plain words
What is it for?
Use it to review skill repositories, find stale links, check activation guidance, and create standardized summaries.
Why use it?
It reduces quality drift and makes a large skill collection easier to audit, search, and use consistently.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to review skill repositories, find stale links, check activation guidance, and create standardized summaries.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add topprismdata/cultivating-ml-agent --skill skill-governance-and-automation
Clone the repo
git clone --depth 1 https://github.com/topprismdata/cultivating-ml-agent

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skill-governance-and-automation

README.md
[![agentmods](https://agentmods.dev/badge/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation/github.svg)](https://agentmods.dev/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation)
Your own site
<a href="https://agentmods.dev/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation"><img src="https://agentmods.dev/badge/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for skill-governance-and-automation

Your own site · 80×15
<a href="https://agentmods.dev/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation"><img src="https://agentmods.dev/badge/skills/topprismdata/cultivating-ml-agent/skill-governance-and-automation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 137 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,262 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00137 $0.01262
Opus 5 $0.00068 $0.00631
Sonnet 5 $0.00027 $0.00252
Haiku 4.5 $0.00014 $0.00126

Measured 8d ago against content hash fda7de782036, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

skill-governance-and-automation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/examples/skill-governance-and-automation/SKILL.md · 150 lines

How it starts

The opening of the file, as written. The whole thing — 150 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill Governance and Automation

Problem

As a skill repository grows (30+ skills), quality drifts:

  • Descriptions become vague (poor activation triggers)
  • Evidence sections go stale (cites old competition results)
  • Cross-references break ([[links]] to renamed/deleted skills)
  • Skills overlap or contradict each other
  • No standard summary for quick inventory

The 6-Dimension Skill Audit

For each skill, check:

Dimension 1: Activation Trigger Quality

□ Description starts with "Use when: (1)..." (specific triggers)
□ At least 2 concrete trigger conditions
□ At least 1 "Do NOT use for" exclusion
□ Trigger conditions are testable (not subjective)

BAD: "Tips for Kaggle competitions"
GOOD: "Use when: (1) OOF improved but LB didn't, (2) gap > 1%"

Dimension 2: Evidence Currency

□ Evidence section cites real numbers (not "usually helps")
□ At least 1 competition/experiment as source
□ Evidence date < 6 months old (or marked as "classic, still valid")
□ If competition-specific: competition still active or lesson still applies

STALE: "Validated on S6E4 (2026-05)" → check if still true
CURRENT: "Validated on 20+ competitions through 2026-07"

Dimension 3: Solution Actionability

□ Solution has concrete steps (not just principles)
□ Code examples or commands provided where relevant
□ Decision trees or flowcharts for complex decisions
□ Anti-patterns section (what NOT to do + why)

VAGUE: "Be careful with ensembles"
ACTIONABLE: "If model correlation > 0.97, remove the weaker model"

Dimension 4: Cross-Reference Integrity

□ All [[skill-name]] links point to existing skills
□ No circular dependencies (A → B → A)
□ Related skills are actually related (not just same domain)
□ No two skills cover the same scope without differentiation

Dimension 5: Scope Boundaries

□ Clear scope: what this skill covers
□ Clear exclusions: what this skill does NOT cover
□ No overlap with another skill > 30%
□ If overlap exists: one is the "primary", other links to it

Read the full file on GitHub · 150 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 150 lines · 137 tokens per session scan A fda7de782036

Subscribe to this mod's changes

skill-governance-and-automation is a skill published in the GitHub repository topprismdata/cultivating-ml-agent (5 stars, last pushed 15d ago), licensed MIT. It adds 137 tokens to every session and 1,262 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

manage-task-checkpoints

Inspect and recover snapshots owned by a COSH managed Task. Use when the user asks the outer COSH Agent to list Task snapshots, preview or diff an exact recovery point, switch a Task workspace, or recover a workspace-only failure and retry once. Do not use for standalone ws-ckpt workspaces.

alibaba/anolisa · 67 tokens

github-ops

GitHub CLI for issues, PRs, code search, CI logs, releases, and API queries. Requires gh CLI and auth.

fuyuxiang/echo-agent · 31 tokens

task-forest

Maintains a repo-local task forest or task DAG for the current workspace. Use when the user asks to initialize or update a task forest, close a session, summarize evolving project work, align a request with a global goal, track progress/history/deviations/todos, save or apply a task proposal, or export the…

dongshuyan/compass-skills · 90 tokens

team

Invite humans into a workspace, propose collaborators for a project, and inspect the current human team. Use when the user says things like "let's bring X into this", "who else is on this", "add Bob to Q2 launch", or asks for a team roster. NEVER mints invites silently — the human must press a button.

Prismer-AI/PrismerCloud · 71 tokens

gsd-complete-milestone

Archive completed milestone and prepare for next version.

SpillwaveSolutions/agent-brain · 16 tokens

flow

Personal task and agent-session manager. CLI binary is flow (assumed on PATH) and stores metadata in /.flow/flow.db (SQLite). Use this skill when the user asks about their work, tasks, or projects in any natural phrasing — including but not limited to: "what's left", "what's remaining", "what's pending", "what do I…

Facets-cloud/flow · 316 tokens