Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xiqin/loom --skill loom-index-updategit clone --depth 1 https://github.com/xiqin/loomWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xiqin/loom/loom-index-update)<a href="https://agentmods.dev/skills/xiqin/loom/loom-index-update"><img src="https://agentmods.dev/badge/skills/xiqin/loom/loom-index-update/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xiqin/loom/loom-index-update"><img src="https://agentmods.dev/badge/skills/xiqin/loom/loom-index-update.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.01256 |
| Opus 5 | $0.00020 | $0.00628 |
| Sonnet 5 | $0.00008 | $0.00251 |
| Haiku 4.5 | $0.00004 | $0.00126 |
Grade A, and why
loom-index-update scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
图后端与记忆同步 Skill
触发条件
- 功能测试和 completion verification 通过后自动触发。
- 用户手动要求同步图后端、更新记忆或更新文档。
前置条件
- 代码变更已完成。
loom-verification-before-completion已通过,或用户明确要求只同步图后端/记忆。
执行流程
Step 1:检测变更范围
- 运行
git diff --name-only HEAD确认变更文件。 - 按
references/update-checklist.md判断是否需要同步图后端或结构化记忆。
Step 2:同步图后端
先读取 .loom/graph.config.json 确认当前图后端;配置不存在时默认 codegraph(向后兼容)。
loom index # 同步当前图后端;后端不可用时跳过
loom index --check # 检查图后端状态;后端不可用时跳过
图后端可用时,AI 通过 loom 暴露的固定 MCP 工具按需查询(不直接调用后端专属工具名):
loom_graph_status— 查询后端能力、新鲜度和可用性loom_graph_query— 统一图查询入口(capability:explore / definition / references / impact 等)loom_graph_sync— 同步或检查索引
当后端是 codegraph 时,
loom_graph_*内部委派给codegraph_explore等 MCP 工具;AI 不需要也不应该直接引用codegraph_*工具名。
图后端不可用(后端为 none、marker 不存在或 freshness=unavailable)时,在报告中注明“图后端不可用,图索引同步跳过”,不中断流水线。
降级规则:
- 后端不支持
impact时,用references、explore或源码搜索降级,并报告“影响范围可能不完整”。 - 后端
freshness不是fresh时,不得直接把其结论作为阻断判断依据,需用当前源码和 git diff 校验关键结论。 - 后端类型是
knowledge-base时,不得用于精确调用链或 breaking change 影响范围判断。
Step 3:更新结构化 Memory
Memory 的单一真实来源是 .loom/memory/store.json。MEMORY.md 是 loom memory export 生成的只读视图,禁止手动编辑 MEMORY.md。
判断写入目标:
| 内容类型 | 写入方式 |
|---|---|
| 本次会话的关键结论(决策/踩坑/偏好/状态变更) | loom_add_memory 或 loom memory add --type <类型> --content "..." |
| 技术选型、架构决定,需要保留背景和原因 | type=adr,context 写背景和原因 |
| 实际遇到的坑,含根因和解决方式 | type=踩坑,content 写“问题 + 根因 + 解决方式” |
| 用户明确表达的工作习惯、风格偏好、禁止事项 | type=偏好 |
| 技术栈或当前阶段变化 | type=状态 |
| 本次会话有重要内容需要归档 | loom memory archive --slug <slug> --file <session.md> |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 109 lines · 41 tokens per session scan A fb987b2f52b4
loom-index-update is a skill published in the GitHub repository xiqin/loom (5 stars, last pushed 1mo ago), licensed MIT. It adds 41 tokens to every session and 1,256 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
media-ingest
Ingest video, audio, PDF, book, screenshot, and GitHub repo content into the brain. Multi-format handling with entity extraction and backlink propagation. Covers video-ingest, youtube-ingest, and book-ingest subtypes.
mem0-oss-to-platform
Plan and then execute a migration of a project from the mem0 open-source / self-hosted SDK (the local Memory class) to the mem0 Platform / hosted / managed SDK (the MemoryClient class). Use this whenever a developer wants to move, switch, or migrate their mem0 usage off OSS/self-hosted to the hosted API — e.g.…
Cortex
Operate Cortex, the LifeOS memory system — the typed Knowledge Archive (People, Companies, Ideas, Research with typed related: links) plus recall of prior work sessions, ISAs, and conversations. Search, add, harvest, develop, ingest, distill, graph-navigate, recall. USE WHEN cortex, knowledge, knowledge base, search…
memory
Use when the user asks to remember, recall, forget, update, search, or inspect durable OpenSquilla memory, including profile facts in USER.md and long-term notes in MEMORY.md or memory//.md.
ha-data-stores
Map of Hope Agent's local data stores and safe read-only query workflow. Use when the user asks where Hope Agent stores data, wants to inspect sessions/messages/memory/logs/background jobs/knowledge indexes/settings, asks the model to query local app data, or debugging requires checking persisted state. Trigger…
shellm
Reference for the shellm system — recursive LLM shell, identity management, memory, skills, trajectory, and all CLI tools. Use when working on shellm itself, debugging agent behavior, or understanding how the pieces fit together.