hindsight: Skill for Claude Code

.claude/skills/triage/SKILL.md

triage is a skill for Claude Code from vectorize-io/hindsight. It costs 79 tokens per session (1,515 once invoked), scanned A, original, MIT.

A process for investigating a GitHub issue or reported problem before making the full fix. It checks whether the problem is real, reproduces it where possible, and uses code history and related reports to understand it.

In plain words
What is it for?
Use it to reproduce bugs, inspect commits and pull requests, find related issues, build a proof of concept, and explain the expected behavior and proposed fix.
Why use it?
It prevents developers from fixing behavior that is intentional or misdiagnosing the cause. A small proof-of-concept fix gives the user evidence before the full change is made.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: reads .claude/ paths; names the AskUserQuestion tool.

This is vectorize-io/hindsight's own configuration. It tells Claude Code how to work on hindsight itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything hindsight configures →

About the project

vectorize-io/hindsight is an agent memory system that stores experiences and helps AI agents learn over time instead of only recalling conversation history. It is used by developers adding long-term memory to agents, including coding agents. Catalogue add-ons connect agents to Hindsight and its memory workflows.

vectorize-io/hindsight · 55,527 stars · on GitHub · hindsight.vectorize.io

Reuse

Borrowing it

Nothing to install: this file belongs to vectorize-io/hindsight. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/vectorize-io/hindsight/main/.claude/skills/triage/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/vectorize-io/hindsight

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for triage

README.md
[![agentmods](https://agentmods.dev/badge/skills/vectorize-io/hindsight/triage/github.svg)](https://agentmods.dev/skills/vectorize-io/hindsight/triage)
Your own site
<a href="https://agentmods.dev/skills/vectorize-io/hindsight/triage"><img src="https://agentmods.dev/badge/skills/vectorize-io/hindsight/triage/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for triage

Your own site · 80×15
<a href="https://agentmods.dev/skills/vectorize-io/hindsight/triage"><img src="https://agentmods.dev/badge/skills/vectorize-io/hindsight/triage.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 79 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,515 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00079 $0.01515
Opus 5.5 $0.00032 $0.00606
Sonnet 5.5 $0.00016 $0.00303
Haiku 4.5 $0.00008 $0.00152

Measured 9d ago against content hash c550f93f83ff, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

triage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/triage/SKILL.md · 103 lines

How it starts

The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Triage

Input: a GitHub issue (number or URL) or a problem described in words. Goal: the user knows whether the problem is real, what it does, and what a fix would change — backed by a working POC — and decides before you do the full fix.

Don't do the full fix in this skill. It ends at step 5, with the user's answer.

1. Is it real, and is it a bug?

Read the issue fully (gh issue view <N> --comments): what the reporter saw, what they expected, version, config. Then check both sides:

  • Reproduce it. Find the smallest way to make it happen: a test, a script, an API call. If you can't reproduce it, say so and say what you tried.
  • Check whether it's by design. The code shows what happens, not why. Look for the decision:
    • git log -S '<key string>' --oneline / git log -L / git blame on the lines involved, then read those commits.
    • The PRs behind them: gh pr list --state all --search "<keywords>", gh pr view <N> --comments.
    • Related or duplicate issues: gh issue list --state all --search "<keywords>".
    • Hindsight memory, if the plugin is installed (the hindsight_* tools are available): search the knowledge pages and, when you need the why, run a reflect. Treat what it says as a past record — check it against the code.

2. If it makes no sense, stop here

If it's not real, already fixed, a duplicate, by design, a local setup problem, or not worth changing: tell the user plainly why, with the evidence (commit, PR, issue, line of code). Propose closing it with a short, kind comment, written out ready to post, e.g.:

This is by design: (see #). <What to do instead, if anything.> Closing — feel free to reopen if I missed something.

Ask before posting or closing — never do it on your own.

3. Explore the code

Before writing anything, find what is already there:

  • Every caller of the code involved, and every path that can hit the same problem — fix it where they all route through, not only on the path the issue names.
  • Similar code that already solves the same kind of problem, and helpers, types and patterns you can reuse. Read .claude/skills/code-review/SKILL.md so the POC already follows the repo's rules.
  • The tests that cover this area, and how they assert.

Read the full file on GitHub · 103 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 103 lines · 79 tokens per session scan A c550f93f83ff

Subscribe to this mod's changes

triage is a skill published in the GitHub repository vectorize-io/hindsight (55,527 stars, last pushed today), licensed MIT. It adds 79 tokens to every session and 1,515 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-20.

Related

Other skills, from other repositories

python-code-quality

Code quality checks, linting, formatting, and type checking commands for the Agent Framework Python codebase. Use this when running checks, fixing lint errors, or troubleshooting CI failures.

microsoft/agent-framework · 40 tokens

potpie-debug-memory

Use while debugging or troubleshooting failures, flaky tests, incidents, production alerts, CI failures, local dev setup issues, repeated bugs, prior fixes, failed attempts, and verification history.

potpie-ai/potpie · 41 tokens

md-audit

Read-only code quality audit — scan the current working directory for common issues (bugs, dead code, security hotspots, missing error handling) and return a prioritised findings report. No files are edited. Use when asked to "audit the code", "quick audit", "find issues", "code scan", or "what's wrong with this…

chaitanyagiri/munder-difflin · 85 tokens

rubber-duck

Adversarial "rubber duck" review that turns explaining-out-loud into a hallucination check. The main session is the PRESENTER (it did the work — a design doc, investigation, or analysis — and holds the real reasoning) and reconstructs the topic to a LISTENER — a spawned subagent pinned to a DIFFERENT-vendor model that…

kirodotdev/KiroCrew · 161 tokens

persistent-notes

Save notes locally to /mnt/workspace/notes.json file. Use when user wants to "save a note" or "remember something".

awslabs/agentcore-samples · 32 tokens

ios-simulator

Verify and debug native, React Native, Expo, or Flutter apps on an iOS Simulator with agent-device. Use when an agent needs to launch an app, inspect its live UI, tap, type, scroll, validate a code change, collect failure evidence, or reproduce a workflow on an iPhone or iPad Simulator.

callstack/agent-device · 69 tokens