Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add Zate/cc-plugins/plugin install devloopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zate/cc-plugins/local-config)<a href="https://agentmods.dev/skills/zate/cc-plugins/local-config"><img src="https://agentmods.dev/badge/skills/zate/cc-plugins/local-config/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zate/cc-plugins/local-config"><img src="https://agentmods.dev/badge/skills/zate/cc-plugins/local-config.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.01592 |
| Opus 5.5 | $0.00012 | $0.00637 |
| Sonnet 5.5 | $0.00006 | $0.00318 |
| Haiku 4.5 | $0.00003 | $0.00159 |
Grade A, and why
local-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 194 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Local Configuration
Project-specific devloop settings via .devloop/local.md (NOT git-tracked).
Format
YAML frontmatter followed by optional markdown notes:
---
git:
auto-branch: false # Create branch when plan starts
branch-pattern: "feat/{slug}" # {slug}, {date}, {user}
main-branch: main
pr-on-complete: ask # ask | always | never
worktree_isolation: false # Isolate swarm workers in git worktrees (opt-in)
commits:
style: conventional # conventional | simple
scope-from-plan: true
sign: false
review:
before-commit: ask # ask | always | never
use-plugin: null # null | code-review | pr-review-toolkit
github:
link-issues: false # Enable GH issue linking
auto-close: ask # ask | always | never
comment-on-complete: true
tokens:
token_budget: 4000 # Max tokens for gather-task-context.sh output (default: 4000)
cache_friendly_context: true # Order agent prompts for prompt cache hits (default: true)
---
Settings Reference
| Setting | Values | Default |
|---|---|---|
git.auto-branch |
true/false | false |
git.branch-pattern |
Pattern with {slug}, {date}, {user} | feat/{slug} |
git.pr-on-complete |
ask/always/never | ask |
git.worktree_isolation |
true/false | false |
commits.style |
conventional/simple | conventional |
commits.sign |
true/false | false |
review.before-commit |
ask/always/never | ask |
review.use-plugin |
null/code-review/pr-review-toolkit | null |
github.link-issues |
true/false | false |
github.auto-close |
ask/always/never | ask |
github.comment-on-complete |
true/false | true |
fresh_threshold |
5-50 | 10 |
context_threshold |
50-95 | 70 |
tokens.token_budget |
1000-20000 | 4000 |
tokens.cache_friendly_context |
true/false | true |
Example Configurations
Minimal (Git-aware)
---
git:
auto-branch: true
---
Full CI/CD Workflow
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 194 lines · 30 tokens per session scan A 4c2d62837c6f
local-config is a skill published in the GitHub repository Zate/cc-plugins (10 stars, last pushed 2mo ago), licensed MIT. It adds 30 tokens to every session and 1,592 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
merge-batch
Prepare and merge an owner-selected PR batch with contributor credit and exact-candidate admission. Use for a pasted PR list; combined focused validation is diagnostic, and every actual landing still requires its applicable checks and authorization.
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
gh-auth-isolation
Safely manage multiple GitHub identities (EMU + personal) in agent workflows.
comet-github
A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.
release-helper
Ensures configuration and code changes are released correctly. Use PROACTIVELY whenever you edit config.json, change any setting, or fix a configuration bug in this project, so the change reaches production.
github-skill
Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.