Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/toverux/cantrips/implementnpx skills add toverux/cantrips --skill implementgit clone --depth 1 https://github.com/toverux/cantripsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00021 | $0.00546 |
| Opus 5 | $0.00010 | $0.00273 |
| Sonnet 5 | $0.00004 | $0.00109 |
| Haiku 4.5 | $0.00002 | $0.00055 |
Grade A, and why
implement scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Implement the work in the spec or the ticket the user names.
Fetch it in full first — the fetch-spec or fetch-ticket verb — and for a ticket, fetch its parent spec too.
The loop config translates the storage verbs: it is docs/agents/cantrips-loop.md, and when that doc is absent the plugin defaults (defaults.md) govern.
Where the spec agreed a test seam, drive /tdd at that seam — the seams are already approved, so test at them without re-asking.
Where no seam was agreed, implement directly: state explicit verification criteria up front (what observable result proves it works), then verify against them before calling the work done.
Run typechecking regularly, single test files regularly, and the full test suite once at the end.
When working from a ticket, tick its acceptance criteria as each one is verified. When every criterion is verified, resolve the ticket — the resolve-ticket verb from the same loop config, the ticked criteria standing as evidence. Resolve on the criteria without second-guessing: a wrong resolve is one human reopen away. The spec itself stays as published — no skill ever closes a spec; closing the feature is the human's act through the backend's native machinery.
Done when every criterion is verified, the ticket (if any) is resolved, and the full suite passes → close with a flow pointer (read flow-pointers.md for the format) naming the review tail, all in this session with the working diff as context: /simplify (user-invoked) for an optional quality pass, then /review-gate [--fix | --loop] (user-invoked) — suggest low for a trivial or mechanical diff, high for a large, cross-cutting, or risky one, medium otherwise, pairing --fix with a medium or high suggestion to apply the findings once, or --loop with any level to converge the gate to green — then /commit (user-invoked).
If context runs low anywhere in that chain, recommend /handoff (user-invoked) and resume in a fresh session instead of pushing on degraded.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 26 lines · 21 tokens per session scan A 672cda95f6d7
implement is a skill published in the GitHub repository toverux/cantrips (2 stars, last pushed 2d ago), licensed MIT. It adds 21 tokens to every session and 546 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
map-tdd
TDD MAP workflow: write tests from the spec FIRST, then implement, so tests validate intent not implementation. Use when correctness is critical (auth, payments, data integrity). Do NOT use without a spec; use map-efficient instead.
tdd-workflow
Use when implementing any feature or bugfix, before writing implementation code - write the test first, watch it fail, write minimal code to pass; ensures tests actually verify behavior by requiring failure first. Enforces RED-GREEN-REFACTOR cycle with iron-law compliance.
test-driven-development
Use when implementing any feature or bugfix, before writing implementation code. Enforces red-green-refactor cycle with strict rules.
feature
TDD-first feature development — crystallise API as a demo test, drive implementation to pass it, run quality stack and progressive review loop. TRIGGER when: user asks to build new functionality, add a capability, or implement a feature in a Python project; phrases: "add X", "implement Y", "build Z feature", "create a…
fix
Reproduce-first bug resolution — capture bug in failing regression test, apply minimal fix, run quality stack and review loop. TRIGGER when: user reports a bug, regression, or unexpected behaviour in Python code with a traceback, failing test, or issue number; phrases: "fix this bug", "repair X", "broken since Y"…
agent-orchestration-improve-agent-v2
Agent Performance Optimization Workflow workflow skill. Use this skill when the user needs Systematic improvement of existing agents through performance analysis, prompt engineering, and continuous iteration and the operator should preserve the upstream workflow, copied support files, and provenance before merging or…