Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add VKirill/claude-lane-stack --skill copy-researchgit clone --depth 1 https://github.com/VKirill/claude-lane-stackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/vkirill/claude-lane-stack/copy-research)<a href="https://agentmods.dev/skills/vkirill/claude-lane-stack/copy-research"><img src="https://agentmods.dev/badge/skills/vkirill/claude-lane-stack/copy-research/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/vkirill/claude-lane-stack/copy-research"><img src="https://agentmods.dev/badge/skills/vkirill/claude-lane-stack/copy-research.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 11 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 45 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.00962 |
| Opus 5.5 | $0.00034 | $0.00385 |
| Sonnet 5.5 | $0.00017 | $0.00192 |
| Haiku 4.5 | $0.00008 | $0.00096 |
Grade A, and why
copy-research scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Copy research
Write notes to .agents/copy/research/inbox/YYYY-MM-DD-<slug>.md. Then you fill audience/page files and mv the note to used/. Research ≠ buyer quote. Never one web.md.
First load references/helpers.md (who runs the CLI). Then references/search-playbook.md for query rules.
Do not npx skills add unless the human has the key and asked. Twitter/OAuth skills: never.
Who runs what
| Need | Runner |
|---|---|
| Одна страница | You: WebFetch |
| Короткий поиск с цитатами / URL | skill tavily → /search |
| Отчёт: рынок / ЦА / ландшафт | skill tavily /research or Firecrawl (key) |
| Открытый веб, несколько URL | Codex gpt-5.6-luna + fast (terra if thin) |
| X / Twitter, живой сленг | grok CLI |
| Пачка вариантов / дешёвый черновик | OpenCode deepseek-v4-flash |
| 2–3 сильных угла | OpenCode deepseek-v4-pro |
| Второй проход с репо | cursor-agent cursor-grok-4.6-medium-fast |
| Уже в репо | Agent(Explore) |
| Неясно, с чего начать | Agent(general-purpose) first, then CLI |
Recipes: references/helpers.md. Helper writes inbox only. You lift.
Tavily
Load skill tavily. Key: $TAVILY_API_KEY (see the skill for the Env Catalog and terminal fallback). Search = /search. Cited report = /research (ask duration).
Firecrawl deep-research (report-scale)
Official skill: https://www.skills.sh/firecrawl/firecrawl-workflows/firecrawl-deep-research
Source: firecrawl/firecrawl-workflows · skill firecrawl-deep-research. Needs FIRECRAWL_API_KEY.
Use only when the human wants a cited report (landscape, how the category talks, multi-angle + sources). Not for one URL, top-N, or «найди 3 заголовка».
- If
FIRECRAWL_API_KEYis unset → stop. Tell the human to export it. Do not invent sources. - If the skill is not installed:
npx skills add https://github.com/firecrawl/firecrawl-workflows --skill firecrawl-deep-research
- Ask one question if duration is unknown: «Сколько крутить ресёрч?» (их онбординг).
- Load skill
firecrawl-deep-research. Output also copy toresearch/inbox/YYYY-MM-DD-<slug>.md. - Lift language into
audience.md. Do not treat report sentences as buyer quotes. Thenmvthe note toused/.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago Changed c0c5cec49d97
- 1mo ago First seen · 74 lines · 84 tokens per session scan A ee01b259920f
copy-research is a skill published in the GitHub repository VKirill/claude-lane-stack (122 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 962 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
build-teaql-app
Build or change a TeaQL application in Java, Rust, Go, Swift, Python, C#/.NET, or TypeScript, including Kotlin/JVM applications that consume Java-generated libraries. Mandatory order: first draft and save a complete KSML model, then verify the client and evaluate that saved model, repair it through repeated evaluation…
eval-agents
Audit custom subagent definitions for Claude Code (.claude/agents/.md) and Codex (.codex/agents/.toml): loadability against the native schema, description overlap, model tier, tool scope, and headless-safe instructions. Use when onboarding to a project with agents, after adding or importing agents, or when the parent…
self-assessment
Interactive skill assessment with personalized learning path generation.
land-and-deploy
Merge PR, wait for CI, verify deploy, run canary. The complete landing pipeline.
source-command-methodology-advisor
Analyzes your codebase and asks 3 targeted questions to recommend the right AI-assisted development methodology stack.
git-ai-archaeology
Analyze AI config evolution in a git repo. Use when mapping AI adoption history, finding when configs were first introduced, charting commit velocity by month, or identifying maturity phases in a project's AI tooling.