Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tutur3u/platform --skill tuturuuu-rollout-recoverygit clone --depth 1 https://github.com/tutur3u/platformWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tutur3u/platform/tuturuuu-rollout-recovery)<a href="https://agentmods.dev/skills/tutur3u/platform/tuturuuu-rollout-recovery"><img src="https://agentmods.dev/badge/skills/tutur3u/platform/tuturuuu-rollout-recovery/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tutur3u/platform/tuturuuu-rollout-recovery"><img src="https://agentmods.dev/badge/skills/tutur3u/platform/tuturuuu-rollout-recovery.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.00464 |
| Opus 5.5 | $0.00012 | $0.00186 |
| Sonnet 5.5 | $0.00006 | $0.00093 |
| Haiku 4.5 | $0.00003 | $0.00046 |
Grade A, and why
tuturuuu-rollout-recovery scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Tuturuuu Rollout Recovery
Use this skill for a production rollout incident or recovery assessment. Ordinary
PR merging remains with $tuturuuu-pr-merge-sync; release badge changes remain
with $tuturuuu-web-release. This skill grants no deployment or data-write authority.
Establish the live deployment graph before selecting a fix. apps/web serves the
live API; apps/backend is an undeployed migration target. A passing Rust test or
a satellite build does not establish current production API behavior.
Read recovery evidence for alias/source audits, API diagnosis, safe staging, rollback compatibility, and bounded CI retries. Read the existing critical rollout runbook when inspecting or using the production staging gate; use its actual workflow and probe implementation rather than copying a second deployment recipe here.
- Keep canonical aliases, immutable staged URLs, Git refs, and deployment markers separate. Preserve the user's rollback until an authorized compatible candidate passes the applicable gates; an alias audit is read-only.
- Confirm per-app build identity and ordinary API responses before attributing a broken page to missing UI. Record missing evidence as a gap, not success.
- Preserve authentication, MFA, verified IP blocks, and baseline limits. Optional download protection must not become a dependency of ordinary GET/HEAD reads.
- Inspect the authorized promotion range, exact-source CI, migration prerequisites, and active E2E fixture ownership before publishing or promoting a repair. Do not use local builds, manual database pushes, or cancellation races.
- Report the candidate, canonical alias identities, dependency compatibility, exact gates, bounded runtime evidence, and remaining business verification. Use a dedicated authorized QA account; do not disclose credentials or customer records.
For integration and delivery, return to $tuturuuu-pr-merge-sync. For a paused
handoff, preserve the worktree and resource ownership in
tmp/agent-coordination/; stop active watchers unless continued watching is requested.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 39 lines · 30 tokens per session scan A 1e14d22779bd
tuturuuu-rollout-recovery is a skill published in the GitHub repository tutur3u/platform (55 stars, last pushed yesterday), licensed Apache-2.0. It adds 30 tokens to every session and 464 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-04.
Other skills, from other repositories
adapter-aws-lambda
Deploy tRPC on AWS Lambda with awsLambdaRequestHandler() from @trpc/server/adapters/aws-lambda for API Gateway v1 (REST, APIGatewayProxyEvent) and v2 (HTTP, APIGatewayProxyEventV2), and Lambda Function URLs. Enable response streaming with awsLambdaStreamingRequestHandler() wrapped in awslambda.streamifyResponse().…
adapter-fetch
Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The endpoint option…
magic-ui
Use this skill when users want to add, customize, or troubleshoot Magic UI components in React/Next.js projects. It covers component selection, shadcn registry installation (@magicui/), integration patterns, and practical quality checks for accessibility and maintainability.
frontend-engineer
!cat skills/shared/protocols/ux-protocol.md 2>/dev/null || true !cat skills/shared/protocols/input-validation.md 2>/dev/null || true !cat skills/shared/protocols/tool-efficiency.md 2>/dev/null || true !cat .production-grade.yaml 2>/dev/null || echo "No config — using defaults" !cat .forgewright/codebase-context.md…
nextjs-pages-router
Set up tRPC in Next.js Pages Router with createNextApiHandler, createTRPCNext, withTRPC HOC, SSR via ssr option and ssrPrepass, SSG via createServerSideHelpers with getStaticProps, and server-side helpers for getServerSideProps prefetching.
react-query-setup
Set up @trpc/tanstack-react-query with createTRPCContext(), TRPCProvider, useTRPC() hook, queryOptions/mutationOptions factories, query invalidation via queryClient.invalidateQueries with queryFilter, and type inference with inferInput/inferOutput.