Clowder AI is a self-hosted workspace where AI agents from different model families work together as a persistent team, retaining identities, shared evidence, and memory across tasks. It is for people who want to coordinate multiple AI agents without repeatedly rebuilding their context.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/zts212653/clowder-ainpx agentmods add skills/zts212653/clowder-ai/merge-gateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zts212653/clowder-ai/merge-gate)<a href="https://agentmods.dev/skills/zts212653/clowder-ai/merge-gate"><img src="https://agentmods.dev/badge/skills/zts212653/clowder-ai/merge-gate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zts212653/clowder-ai/merge-gate"><img src="https://agentmods.dev/badge/skills/zts212653/clowder-ai/merge-gate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 83 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- high Tool Misuse · line 592 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.20444 |
| Opus 5.5 | $0.00034 | $0.08178 |
| Sonnet 5.5 | $0.00017 | $0.04089 |
| Haiku 4.5 | $0.00008 | $0.02044 |
Grade A, and why
merge-gate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 787 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Merge Gate
SOP definition:
sop-definitions/development.yamlstagemerge。
合入 main 的流程：先按 docs/SOP.md 风险入口判断是否适用产品快车道，再选验证命令与必要的独立 review。快车道由作者完成真实入口核对和受影响检查即可合入；其他改动消费风险要求的 review source。PR 是载体，不是自动触发 local + cloud + guardian 三连的理由。
Lane 0：Co-Creation Docs PR
先检查是否已有成功的 pnpm classify:co-creation-docs 证据，且输出同时满足：
lane=co_creation_docsdelivery=pull_request- changed files 与 PR diff 完全一致
满足时，直接消费 classifier 的 validation / cloudReview / fullGate 结论：
- 跑 classifier 返回的全部
validation命令 +git diff --check。 - 新实质内容需要非作者内容 review；已有内容 verdict 或可证明机械合并用 continuityProof 复用，不为 SHA 字符串变化重开 reviewer。
cloudReview=required才触发 cloud；skip时在 PR 留 classifier 原因。家规 / SOP / skill 纯文字通常由有状态 local reviewer 覆盖治理语义，不把“免 cloud”当需要申请的特权。fullGate=required才跑pnpm gate；skip时 evidence manifest 记录 docs validation 命令。- evidence 闭合后由在场 merge owner 执行
gh pr merge --squash；不再额外召唤一只猫只为按 merge 按钮。无 F 号时跳过 Feature Doc Truth post-merge sync。
任一 changed file 不匹配、classifier 缺失/失败或输出 lane=regular_development → 退出本节，走下方风险路由。行数不能作为 Lane 0 证据。
核心知识
Risk-Routed Merge 门禁 5 条（全部满足才能合入）
- PR body 写清五轴风险判断：行为面 / 数据 / 安全 / 契约 / 不可逆；默认最小安全动作，升档理由可查。
- 符合 SOP 产品快车道时，用作者真实入口、截图/交互核对与受影响检查，不默认选 review；其他改动至少一个非作者独立 review source（local 或 cloud）有明确 verdict。已选择的 review 不因等候而撤销；hotfix、共享底座和硬边界不借快车道跳审。愿景守护另按 feature-close 触发。
- 所有 P1/P2 已修复，并由提出 finding 的活跃 source 覆盖当前 HEAD（含 Harness Diet Rebase Continuity 的 continuityProof 桥接）。
- 适用的 feature / BACKLOG 真相源没有过度声称，PR 载体与 changed files 匹配。
- 与影响范围匹配的验证全绿：作者负责选择并证明足够的覆盖，纯文档做文档校验，窄改跑受影响检查，targeted 无法覆盖的风险才跑 full。机器的 full 是默认覆盖建议，作者可按下方「Gate 选择」有据改选 targeted；按风险要求的独立审查和硬授权边界不随之省略。
pnpm gate的 targeted 退出码 3 只表示分类完成，仍需实际检查结果（见「targeted 终态语义」）。
需要 review 时默认只选一个合适的独立 source：家里语境与治理语义优先 local；context-blind 安全 / 契约代码扫描优先 cloud。动作类型（“开了 PR”“改了代码”）不是选择或叠加理由。
合入者要理解 review 批准的究竟是什么。来源/head 正确、测试通过或上一轮 findings 清零，并不能自行证明原约定已兑现。结合现有 review 与仍有效的前轮判断，确认本次交付的实际结果被检查过；只有局部修复结论而原目标尚未判断时，把缺失的具体判断交回已选 source，不能用“整个 Feature 还没 close”绕过。这里是猫的语义判断，不新增 E 项、typed 字段或自动意图 checker；可证明连续的既有判断直接复用。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +8 lines 2262d9e353a4
- 4d ago Changed 05858f2141c6
- 7d ago Changed · +1 lines 05649d904bcc
- 8d ago Changed a18952f9586c
- 11d ago Changed · +2 lines ef8a94a21b39
- 16d ago Changed · -9 lines scan C → A a8aef9462591
- 22d ago Changed · +80 lines · +38 tokens per session ac9f0435ab10
- 1mo ago Changed · +1 lines ae9f7fe6f5b6
- 1mo ago Changed · -4 lines 6cb549bac876
- 1mo ago First seen · 708 lines · 46 tokens per session scan C 07c5a3fe3638
merge-gate is a skill published in the GitHub repository zts212653/clowder-ai (3,567 stars, last pushed yesterday), licensed MIT. It adds 84 tokens to every session and 20,444 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
adk-go-self-review
Review an ADK Go change the way a maintainer will — a fresh-context pass over the whole diff, five lenses (correctness and tests, scope, simplicity, style, adk-python parity), and the mutation check that proves your tests pin the change. Use before opening a PR, before any later push that changes code, and when asked…
adversarial-reviewer
Stress-test a code change for concrete correctness defects, unsafe assumptions, and failure modes. Use when the user explicitly asks for an adversarial review, a deep bug hunt, or to tear a change apart, or to check your own change before submitting it. Do not use for ordinary review, style feedback, or general…
go-testing
Trigger: Go tests, go test coverage, Bubbletea teatest, golden files. Apply focused Go testing patterns.
semgrep-rule-variant-creator
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.
brooks-sweep
Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes are confirmed before execution. Drawing on twelve classic engineering books. Triggers when: user…
plugin-review
Review plugin quality with tiered checks and dependency scoping. Use for PR and pre-release audits.