Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add X-School-Academy/skill-pilot --skill codewaregit clone --depth 1 https://github.com/X-School-Academy/skill-pilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/x-school-academy/skill-pilot/codeware)<a href="https://agentmods.dev/skills/x-school-academy/skill-pilot/codeware"><img src="https://agentmods.dev/badge/skills/x-school-academy/skill-pilot/codeware/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/x-school-academy/skill-pilot/codeware"><img src="https://agentmods.dev/badge/skills/x-school-academy/skill-pilot/codeware.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.00737 |
| Opus 5.5 | $0.00028 | $0.00295 |
| Sonnet 5.5 | $0.00014 | $0.00147 |
| Haiku 4.5 | $0.00007 | $0.00074 |
Grade A, and why
codeware scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AI Builder - Codeware
Handle Skill Pilot codeware maintenance and feature development workflows.
When to Use This Skill
- The user wants to update, restore, repair, or contribute Skill Pilot codeware
- The user wants to configure remotes, forks, contribution branches, or a private workspace repo
- The user wants to create, refine, plan, implement, review, test, merge, freeze, update, or fix a feature under
core/development/
Your Roles in This Skill
- Project Manager: Identify the requested operation, keep scope clear, and coordinate approvals
- Backend Developer: Implement code changes, resolve conflicts, and repair issues
- DevOps Engineer: Manage branches, remotes, fetch, merge, reset, push, and workspace repo setup
- Release Engineer: Apply pending upgrade notices and maintain version state
- QA Engineer: Verify changes with targeted tests and integration checks
- Technical Writer: Keep requirements, plans, reports, and workflow outputs clear
- Security Engineer: Warn about remote website prompt-injection risk before browser automation
Role Communication
As an expert in your assigned roles, you must announce your actions before performing them using the following format:
As a {Role, and Role-XYZ if have more roles}, I will {action description}
This communication pattern ensures transparency and allows for human-in-the-loop oversight at key decision points.
Instructions
Follow these steps in order.
Step 1: Identify the operation
Map the user request to one operation family:
- Codeware maintenance:
update,restore,add remote,contribute, orcreate private workspace repo - Feature lifecycle:
create,refine,initial,plan,implement,review,test,merge,freeze,update feature, orfix issues
Step 2: Load the correct reference
- For codeware
updateorrestore, usereferences/git-workflows.md - For
add remoteorcontribute, usereferences/github-contribution.md - For
create private workspace repo, usereferences/private-workspace-setup.md - For feature lifecycle work, use
references/feature-lifecycle.md - If running inside an
agent-workflow, also loadreferences/feature-lifecycle-agent-workflow.md
What ships with it
17 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/agents-template.md 1.1 KB
- references/feature-lifecycle-agent-workflow.md 981 B
- references/feature-lifecycle-create.md 631 B
- references/feature-lifecycle-fix-issues.md 548 B
- references/feature-lifecycle-freeze.md 6.1 KB
- references/feature-lifecycle-implement.md 945 B
- references/feature-lifecycle-initial.md 1.1 KB
- references/feature-lifecycle-merge.md 1.5 KB
- references/feature-lifecycle-plan.md 938 B
- references/feature-lifecycle-refine.md 524 B
- references/feature-lifecycle-review.md 494 B
- references/feature-lifecycle-test.md 916 B
- references/feature-lifecycle-update.md 547 B
- references/feature-lifecycle.md 3.4 KB
- references/git-workflows.md 5.5 KB
- references/github-contribution.md 2.8 KB
- references/private-workspace-setup.md 3.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 16d ago First seen · 74 lines · 71 tokens per session scan A 76d7919f29ab
codeware is a skill published in the GitHub repository X-School-Academy/skill-pilot (20 stars, last pushed 4mo ago), licensed MIT. It adds 71 tokens to every session and 737 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-02.
Other skills, from other repositories
batch
Research and plan a large-scale change, then execute it in parallel across 5–30 isolated worktree agents that each open a PR.
team-release
Orchestrate the release team — release-manager, qa-lead, devops-engineer, producer — to execute a release from candidate to deployment.
operating-github-cli
Default GitHub skill for the action agent. Use githubcli for any GitHub request — create/list/view/close issues and PRs, assign, labels, repos, releases, checks, github.com/owner/repo URLs, or gh api. Prefer over shellrun/!gh. Run these with githubcli in the current agent turn.
github
Drive GitHub via the official gh CLI — repos, issues, pull requests, releases, gists, Actions runs, and raw REST through gh api. Use when the user asks to inspect or manage GitHub.
testdino-releases
Use when the user wants to browse, inspect, create, or update releases/milestones in a TestDino project. Covers listreleases, getrelease, createrelease, and updaterelease. Accepts counter-style IDs like MS-12.
create-milestone
Create a GitHub milestone for an upcoming release. Suggests the next version based on the latest release, gathers all merged PRs and closed issues since that release, presents a draft with two tables (Issues and PRs) for user approval, then creates the milestone and assigns all approved items.