Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add vincentkoc/dotskills --skill operations-worktreegit clone --depth 1 https://github.com/vincentkoc/dotskillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/vincentkoc/dotskills/operations-worktree)<a href="https://agentmods.dev/skills/vincentkoc/dotskills/operations-worktree"><img src="https://agentmods.dev/badge/skills/vincentkoc/dotskills/operations-worktree/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/vincentkoc/dotskills/operations-worktree"><img src="https://agentmods.dev/badge/skills/vincentkoc/dotskills/operations-worktree.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.03292 |
| Opus 5.5 | $0.00011 | $0.01317 |
| Sonnet 5.5 | $0.00005 | $0.00658 |
| Haiku 4.5 | $0.00003 | $0.00329 |
Grade A, and why
operations-worktree scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 26d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 263 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Operations Worktree
Purpose
Create and manage worktrees safely and consistently across projects while avoiding stale branch bases.
When to use
- You need a new task branch in a new worktree.
- You are juggling many concurrent worktrees.
- You need to avoid branching from stale local
mainor localHEAD.
Workflow
- Identify the producer: shell GWT, a repository-native wrapper, or an application
that owns sessions or sandbox projections. Resolve the repository identity,
canonical owning checkout, Git common directory, and existing worktree registrations.
A
.gitentry does not make an application-owned workspace a personal GWT task; preserve its native allocation, relocation and retention lifecycle. Preserve dirty owner state. Read the repository's worktree and dependency rules. - Inspect existing worktrees before creating another checkout. Reuse an existing task-owned worktree only when its identity, branch, and ownership match. Do not adopt another session's checkout.
- Use a healthy owning checkout accepted by the installed wrapper. An unsafe, shallow, or promisor source is not permission to create an ad hoc clone. Do not bypass worktree creation with raw Git, copied repositories, or temporary clones. A refusal stops creation, not diagnosis. Repair that same verified owner within existing task authorization, then let the wrapper recheck it. Report the concrete blocker if no qualified owner is available.
- Use
gwt helpfor discovery andgwt rootto resolve the configured managed root. Keep new worktrees under that root or a repository-native managed root. Do not place new checkouts in arbitrary sibling or temporary directories. For server placement policy, use the existing account-specificDOTFILES_WORKTREES_ROOTsetting; preserve unrelated workstation defaults. Check the host policy, actual account homes, physical path, mount and permissions separately:gwt rootreports a value, not an access boundary. Changing this setting neither relocates existing work nor controls application allocators. Use the native owner to update registrations and persisted references; do not substitute shell GWT for an application's workspace lifecycle. - Verify the download policy before any fetch. Task-required additive fetch or unshallow is not GC, repacking, pruning, or owner consolidation. Recheck current state; do not repeat completed repair or ask again for an already authorized step. Respect contention, suppress automatic maintenance/pruning, and preserve local branches, HEAD/index, patches, and registrations. Distinguish a verified current remote base from a cached local ref. Cached refs do not prove the latest head. When freshness cannot be verified, report that gap rather than silently substituting a stale base.
- Before creation, choose the repository-prescribed, documented closeout route supported on this host.
- Use
gwt new <branch> <start-point> --finish-managedwhen required, requested, or supported by a qualified closeout route. An advertised flag alone does not qualify that route. The start-point is optional. Keep the runtimeCODEX_THREAD_ID. Outside Codex, set a stable task-specificGWT_OWNER_IDbefore creation. - Where repository policy permits, use ordinary
gwt new <branch> <start-point>from the verified owner and configured root. Preserve its normal ownership, recovery, and non-force removal guards. - Repository-native wrappers use their documented creation and closeout commands. Finish enrollment is optional and creation-only. It records ownership and does not authorize removal. It is not a prerequisite for development, maintainer work, or ordinary authorized cleanup; keep repository-native lifecycles independent. Never unenroll, recreate, relocate, or adopt an existing managed tree to bypass its record. Stop creation if the wrapper is unavailable or still refuses the repaired owner. Do not substitute an unrestricted raw-Git creation route.
- Use
- Verify the returned path, managed root, registration, owner, branch, and HEAD.
For personal finish, confirm enrollment with
gwt finish-statusbefore starting work. - Verify dependency reuse under Dependency Ownership.
- Read
references/task-artifacts.mdbefore work that retains evidence, publishes expensive artifacts, or needs a resumable phase/blocker receipt. - For OpenClaw, use its current
AGENTS.mdand native review/release lifecycle helpers. Do not override their exact-head or evidence rules here. - Finish with the explicit Closeout result.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 26d ago Changed · +54 lines 3636f38d7d13
- 1mo ago Changed · +11 lines 5f3074f91071
- 1mo ago Changed · +11 lines 836746ee78e6
- 1mo ago Changed · +138 lines · -2 tokens per session 12ed85f9f645
- 1mo ago Changed · +10 lines 6c2d0ce20ccb
- 1mo ago First seen · 39 lines · 29 tokens per session scan A 919bb7f3657f
operations-worktree is a skill published in the GitHub repository vincentkoc/dotskills (111 stars, last pushed yesterday), licensed MIT. It adds 27 tokens to every session and 3,292 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
github-repo-management
Clone, create, fork, configure, and manage GitHub repositories. Manage remotes, secrets, releases, and workflows. Works with gh CLI or falls back to git + GitHub REST API via curl.
github-auth
Set up GitHub authentication for the agent using git (universally available) or the gh CLI. Covers HTTPS tokens, SSH keys, credential helpers, and gh auth — with a detection flow to pick the right method automatically.
linear-cli
Use when the user wants to list, view, start, create, or update Linear issues from the terminal via schpet/linear-cli, including setup, auth, repo config, and safe read/write boundaries.
update-recovery
Use when an update leaves out owner customizations or they need restoring or merging.
github-code-review
Review code changes by analyzing git diffs, leaving inline comments on PRs, and performing thorough pre-push review. Works with gh CLI or falls back to git + GitHub REST API via curl.
github
GitHub operations via gh CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available)…