Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wardawgmalvicious/agent-config --skill landgit clone --depth 1 https://github.com/wardawgmalvicious/agent-configWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wardawgmalvicious/agent-config/land)<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/land"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/land/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/land"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/land.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00178 | $0.07049 |
| Opus 5.5 | $0.00071 | $0.02820 |
| Sonnet 5.5 | $0.00036 | $0.01410 |
| Haiku 4.5 | $0.00018 | $0.00705 |
Grade B, and why
land scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads MCP configurationmediumAgent snooping
mcp.json carries server URLs and auth tokens; reading it lets a mod discover and abuse other integrations.
`github-mcp` is project scope (`.mcp.json`), bound to one token, and How it starts
The opening of the file, as written. The whole thing — 509 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Landing a branch
Take a branch that is already committed and get it merged. commit
ends by reporting its hashes with an explicit note that nothing was
pushed; this starts exactly there.
Two things here are irreversible or outward-facing — opening the PR and
writing to main — so the procedure gates each one. A third, deleting the
branch from origin, is outward-facing and deliberately not gated;
step 9 and references/branch-deletion.md
say why, and why that reasoning does not generalise.
1. Preflight
git fetch origin # origin/main current before anything reads it; no origin at all: references/new-repository.md, before step 2
git status --short # see below — clean, or knowingly left
git branch --show-current # must not be main
git log --oneline origin/main..HEAD
git rev-parse origin/main # <base>, kept like step 7's <sha>: after the merge, nothing else says where main stood
git log --merges --oneline origin/main | wc -l # the history's merges so far, for step 6
git worktree list # separate trees — not who shares this one
git branch -vv # where HEAD is, and each branch's tip
git rev-parse --path-format=absolute --git-dir --git-common-dir # two paths: a linked worktree
A dirty tree is not automatically unfinished work. commit ends on
a clean tree or on remaining lines it names as intentionally left, so
a leftover is a question rather than a stop: ask whether it belongs in
this branch. Uncommitted work does not travel into the PR either way —
what matters is that nothing which should have been committed is
sitting unstaged. Anything you cannot account for, stop and ask.
Nothing to land means there is nothing to do — say so rather than opening an empty PR.
Where the repo's instructions land this branch without a push, follow
them instead, unless a push or a PR was asked for: step 3 publishes
every unpushed commit beneath the branch. agent-config's
.claude/rules/handoff-briefs.md lands a brief's worktree that way.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed 258da64ab4b9
- 12d ago Changed 8a3db39a7cd3
- 18d ago Changed 754c79a59d05
- 19d ago Changed 8758e7cc7fd7
- 27d ago Changed · +4 lines 0c507f1a0947
- 28d ago Changed · -4 lines 5e7d697a5515
- 1mo ago Changed · +1 lines 3515ea2cd09a
- 1mo ago Changed · +113 lines · +9 tokens per session 78a0503800bf
- 1mo ago Changed · -105 lines 319f74b06386
- 1mo ago First seen · 500 lines · 169 tokens per session scan B 588757f5542d
land is a skill published in the GitHub repository wardawgmalvicious/agent-config (1 stars, last pushed 11d ago), licensed MIT. It adds 178 tokens to every session and 7,049 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads mcp configuration). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
aws-ci-cd-release-engineer
Review AWS CI/CD and release safety across CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab, artifact provenance, deployment gates, approvals, tests, progressive delivery, rollback, change correlation, and incident-prevention recommendations. Use when AWS releases or pipelines can affect production…
github-release-management
Comprehensive GitHub release orchestration with AI swarm coordination for automated versioning, testing, deployment, and rollback management.
agent-github-modes
Agent skill for github-modes - invoke with $agent-github-modes.
xberg-release
Xberg release on top of the shared release-workflow: task version:sync to bindings and chart, CI/Publish/Benchmarks readiness. Use before a release.
releasepr
Adopt, configure, run, or troubleshoot compozy/releasepr in a consuming repository, including Actions, beta/stable/legacy plans, notes, dry-runs, and publication. Excludes pr-release internals and general versioning advice.
gitlab-devops
GitLab DevOps operations — issues, merge requests, CI/CD pipelines, repository browsing, labels, milestones, releases, and wiki management. Use when querying GitLab project status, monitoring pipeline executions, browsing repository files, creating issues for network findings, opening merge requests for config…