Not in the top 1,000 by GitHub stars
JKHeadley/instar
Persistent Claude Code agents with scheduling, sessions, memory, and Telegram.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/agent-identity/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/agent-memory/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/agent-passport/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/agent-readiness/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/command-guard/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/credential-leak-detector/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-dev/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-feedback/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-identity/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-scheduler/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-session/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/instar-telegram/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/iterative-converging-audit/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/knowledge-base/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/smart-web-fetch/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/spec-converge/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 008f2af7cb39
No earlier version was observed for comparison.
skills/systematic-debugging/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 008f2af7cb39
No earlier version was observed for comparison.
specs/instar-concepts/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 008f2af7cb39
No earlier version was observed for comparison.
Verified commit 008f2af7cb3994aca778fbc44f0cf59c8556a005
git clone --filter=blob:none --no-checkout https://github.com/JKHeadley/instar.git .hotskills/jkheadley-instar && git -C .hotskills/jkheadley-instar checkout --detach 008f2af7cb3994aca778fbc44f0cf59c8556a005
# Copy each selected skill directory from .hotskills/jkheadley-instar into .claude/skills/<skill-name>/Heat
5.6- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- agent-identity
skills/agent-identity - agent-memory
skills/agent-memory - agent-passport
skills/agent-passport - agent-readiness
skills/agent-readiness - command-guard
skills/command-guard - credential-leak-detector
skills/credential-leak-detector - instar-dev
skills/instar-dev - instar-feedback
skills/instar-feedback - instar-identity
skills/instar-identity - instar-scheduler
skills/instar-scheduler - instar-session
skills/instar-session - instar-telegram
skills/instar-telegram - iterative-converging-audit
skills/iterative-converging-audit - knowledge-base
skills/knowledge-base - smart-web-fetch
skills/smart-web-fetch - spec-converge
skills/spec-converge - systematic-debugging
skills/systematic-debugging - instar-concepts
specs/instar-concepts
How it works
agent-identity
When your agent uses it
Set up persistent agent identity files (AGENT.md, USER.md, MEMORY.md) and teach the agent to read them at every session start. Works in any Claude Code project — no external dependencies required. Trigger words: who am I, identity, remember me, agent name, my principles, who are you, what are my values.
What it loads into context
Frontmatter
106 tokensAlways available to the agent
SKILL.md
1,575 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What This Skill Creates
- Step 1: Create the Identity Directory
- Step 2: Create AGENT.md
- Step 3: Create USER.md
- Step 4: Create MEMORY.md
- Step 5: Wire Into CLAUDE.md
- Step 6: Reading at Session Start
- Updating Memory Over Time
- What to Write vs. What to Skip
- Going Further
Files
SKILL.mdcore6,868 bytesSKILL.mdcore6,868 bytesSKILL.mdcore6,868 bytesSKILL.mdcore6,868 bytesSKILL.mdcore6,868 bytes
Read SKILL.md
# agent-identity — Persistent Agent Identity for Claude Code
Without identity infrastructure, every Claude Code session starts from zero. The agent has no name, no remembered preferences, no sense of who it works with or what it has learned. Context compaction erases everything mid-session. This skill fixes that — no external tools required.
## What This Skill Creates
Three files at `.claude/identity/`:
- **AGENT.md** — Who the agent is: name, role, personality, principles
- **USER.md** — Who the agent works with: preferences, context, communication style
- **MEMORY.md** — What the agent has learned across sessions
And a reference in **CLAUDE.md** that teaches the agent to read them at every session start.
View the complete source on GitHubagent-memory
When your agent uses it
Teach cross-session memory patterns using MEMORY.md — what to save, how to organize it, how to maintain it over time, and how to structure topic files as memory grows. Works in any Claude Code project with no external dependencies. Trigger words: remember this, save for later, across sessions, persistent memory, don't forget, note this, keep this, write this down.
What it loads into context
Frontmatter
112 tokensAlways available to the agent
SKILL.md
1,878 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- The Core Pattern
- Setting Up MEMORY.md
- What to Write vs. What to Skip
- Organizing Growing Memory
- Writing Memory During a Session
- Maintaining Memory Over Time
- Memory vs. Documentation
- Memory After Compaction
- Multiple Agents, Shared Memory
- Going Further
Files
SKILL.mdcore8,485 bytesSKILL.mdcore8,485 bytesSKILL.mdcore8,485 bytesSKILL.mdcore8,485 bytesSKILL.mdcore8,485 bytes
Read SKILL.md
# agent-memory — Cross-Session Memory Patterns for Claude Code
Claude Code has no memory between sessions by default. Every conversation starts blank. But a project's knowledge accumulates — commands discovered, patterns debugged, preferences revealed, mistakes made and corrected. Without persistence, that knowledge is lost every time the window closes.
This skill establishes a simple, durable memory pattern using a single file: `MEMORY.md`.
---
## The Core Pattern
One file. Written by the agent. Read at session start.
```
.claude/View the complete source on GitHubagent-passport
When your agent uses it
View this agent's digital passport (identity + trust + allowed/forbidden actions) and verify a peer's passport against a proposed action (EXO 3.0).
What it loads into context
Frontmatter
53 tokensAlways available to the agent
SKILL.md
444 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- How
Files
SKILL.mdcore1,781 bytesSKILL.mdcore1,781 bytesSKILL.mdcore1,781 bytes
Read SKILL.md
# /agent-passport
Salim Ismail's EXO 3.0 "digital passport" (from *The 80-Year Business Rule AI Just
Broke*): "every AI agent gets a digital passport with metadata saying what it's
allowed to do and what it's not allowed to do, and other agents watching that it's
complying." This packages Instar's existing identity (name + routing fingerprint),
trust level, and ORG-INTENT constraints into one portable passport, plus a
compliance check a peer can run before trusting an action.
## When to use
- Hand a peer your passport so it can decide what it'll let you do.
- Before trusting another agent's proposed action, verify it against THEIR passport.
## HowView the complete source on GitHubagent-readiness
When your agent uses it
Score a task or workflow on its coordination-vs-judgment ratio to tell whether it's a good agent candidate (EXO 3.0 task-decomposition matrix).
What it loads into context
Frontmatter
52 tokensAlways available to the agent
SKILL.md
582 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- How
Files
SKILL.mdcore2,282 bytesSKILL.mdcore2,282 bytesSKILL.mdcore2,282 bytes
Read SKILL.md
# /agent-readiness
Salim Ismail's EXO 3.0 diagnostic, made runnable: score a piece of work on its
**coordination-vs-judgment ratio**. Coordination work — routing information,
approvals, scheduling, status tracking, prescriptive/standardized steps — is what
AI agents do best, so it's *agent-ready*. Judgment work — resolving ambiguity,
handling exceptions, navigating relationships, making a call with no playbook —
should stay with (or escalate to) humans.
## When to use
- Before delegating a task/workflow to an agent — is it actually a good candidate?
- When deciding whether a process should be fully automated, agent-with-oversight,
hybrid, or kept human-led.View the complete source on GitHubcommand-guard
When your agent uses it
Set up a PreToolUse hook in .claude/settings.json that blocks dangerous commands — rm -rf, force push, database drops, and others — before they execute. Teaches the pattern of safety hooks for any Claude Code project. Trigger words: safety, guard, block dangerous, protect, prevent destructive, safe mode, dangerous commands, risky operations.
What it loads into context
Frontmatter
110 tokensAlways available to the agent
SKILL.md
2,017 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What Gets Blocked
- Installation
- Customizing the Blocklist
- Understanding the Hook Pattern
- What This Does Not Cover
- Going Further
Files
SKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytesSKILL.mdcore8,217 bytes
Read SKILL.md
# command-guard — Block Dangerous Commands Before They Execute
Claude Code runs shell commands, edits files, and manages infrastructure with real consequences. Without guardrails, a misunderstood instruction or a hallucinated flag can delete data, corrupt history, or expose credentials. This skill installs a PreToolUse hook that blocks the most dangerous operations before they run.
No external tools required — this uses Claude Code's built-in hook system.
---
## What Gets Blocked
The guard intercepts `Bash` tool calls and checks the command against a blocklist before execution. By default it blocks:
**Irreversible deletions**
- `rm -rf` on non-temporary pathsView the complete source on GitHubcredential-leak-detector
When your agent uses it
PostToolUse hook that scans Bash tool output for leaked credentials — API keys, tokens, private keys, and secrets — before they reach the conversation. Blocks critical leaks, redacts high-severity matches, and warns on suspicious patterns. 14 detection patterns covering OpenAI, Anthropic, AWS, GitHub, Stripe, Google, Slack, SendGrid, Twilio, PEM keys, bearer tokens, and generic secrets. No external dependencies. Trigger words: security, credential leak, secret exposure, key detection, token scan, API key leaked, credential guard, secret scanner, prevent credential leak.
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
2,995 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What Gets Detected
- Installation
- The Script
- Customizing Patterns
- How It Differs from command-guard
- Going Further
Files
SKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytes
Read SKILL.md
# credential-leak-detector — Catch Leaked Credentials Before They Spread
Every time your agent runs a Bash command, the output flows back into the conversation — and into your API provider's logs, any monitoring tools, and the model's context window. If that output contains an API key, a private key, or a database password, the credential is now exposed in places you never intended.
This hook scans every Bash tool response for 14 credential patterns before the output reaches the agent. Critical matches (API keys, AWS credentials, private keys) get blocked entirely. High-severity matches get redacted with a warning. Suspicious patterns get flagged as advisories. No external dependencies — just Python stdlib.
---
## What Gets Detected
### Critical (Blocks the response)
| Pattern | Example Match |
|---------|--------------|View the complete source on GitHubinstar-dev
When your agent uses it
Instar-specific development skill used by the instar-developing agent (Echo, or any agent assigned instar-dev responsibilities). Wraps /build with mandatory side-effects review, signal-vs-authority principle check, and artifact generation. Structural enforcement via pre-commit/pre-push hooks — the instar repo refuses commits and pushes that didn't come through this skill. NOT a user-facing skill — end users should never invoke it.
What it loads into context
Frontmatter
121 tokensAlways available to the agent
SKILL.md
6,001 tokensWhen the skill is activated
Reference documents
3,471 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When the instar-dev agent uses this skill
- The phases
- Tiered development (tier signal → you decide → audited)
- Found problems: triage, never accrete
- Proportion signal
- The internal-only release-note lane
- What this skill explicitly does NOT do
- Anti-patterns (the enforcement will catch these)
- How the principle ties in
Scripts executed separately
../../scripts/assemble-next-md.mjs../../scripts/instar-dev-precommit.js../../scripts/latest-run-per-check.mjs../../scripts/lib/classify-tier.mjs../../scripts/pre-push-gate.js../../scripts/safe-merge.mjs../../scripts/safe-merge.mjs../../scripts/safe-merge.mjs../../scripts/safe-merge.mjs../../scripts/safe-merge.mjs../../scripts/safe-merge.mjsscripts/verify-proposal-derived-runbook.mjsscripts/write-trace.mjs
Files
../../scripts/assemble-next-md.mjsruns15,313 bytes../../scripts/instar-dev-precommit.jsruns77,732 bytes../../scripts/latest-run-per-check.mjsruns2,966 bytes../../scripts/lib/classify-tier.mjsruns9,769 bytes../../scripts/pre-push-gate.jsruns30,385 bytes../../scripts/safe-merge.mjsruns69,104 bytes../../scripts/safe-merge.mjsruns69,104 bytes../../scripts/safe-merge.mjsruns69,104 bytes../../scripts/safe-merge.mjsruns69,104 bytes../../scripts/safe-merge.mjsruns69,104 bytes../../scripts/safe-merge.mjsruns69,104 bytesSKILL.mdcore25,977 bytesSKILL.mdcore25,977 bytesscripts/verify-proposal-derived-runbook.mjsruns12,372 bytesscripts/write-trace.mjsruns18,051 bytestemplates/eli16-overview.mddoc1,739 bytestemplates/side-effects-artifact.mddoc13,546 bytes
Read SKILL.md
# /instar-dev
**Audience:** this skill is for the instar-developing agent (Echo, or any agent assigned instar-dev responsibilities). It is NOT a user-facing skill. End users of instar should never invoke `/instar-dev` and will never see it in their workflow — it runs at the infrastructure-developer layer, not the per-user application layer. The enforcement hooks on the instar repo ensure the instar-developing agent goes through this skill for every change, but end users never encounter it.
Throughout this document, "the agent," "the instar-dev agent," or the imperative voice ("do this," "produce that") refer to the instar-developing agent, not the end user.
---
The skill for changing anything in the instar source tree.
Generic `/build` is the right tool for most projects. This skill is what the instar-developing agent uses when changing **instar itself** — the infrastructure every instar-powered agent inherits. Because those changes propagate to every agent and every user the moment they ship, the blast radius is structurally larger than any single project. This skill exists to make "careful" the default, not the exception.
## When the instar-dev agent uses this skill
View the complete source on GitHubinstar-feedback
When your agent uses it
Submit structured feedback about instar bugs, feature requests, improvements, or innovations worth sharing. Use when something isn't working, when a feature is missing, when you've built something that could benefit all agents, or when the user mentions a problem with instar. Also use proactively after building significant features — ask yourself if other agents would benefit. Feedback is relayed agent-to-agent to instar maintainers. Trigger words: bug report, feedback, issue, something's wrong, feature request, this isn't working, improvement, suggest, built something useful, other agents could use this.
What it loads into context
Frontmatter
186 tokensAlways available to the agent
SKILL.md
2,911 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Getting Started
- Submitting Feedback
- Feedback Types
- Writing Good Feedback
- Viewing Submitted Feedback
- Forwarding and Retry
- The Rising Tide Model
- When the Agent Should Submit Feedback
- User Feedback Relay
Files
SKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytesSKILL.mdcore12,488 bytes
Read SKILL.md
# instar-feedback — Structured Feedback Collection and Relay
Instar has a built-in feedback system that routes issues and feature requests directly to the instar maintainers. Your agent is not just using instar — it's part of the ecosystem that improves it. Every bug report, feature request, and observation lifts all ships.
**Do not use GitHub issues or the `gh` CLI to report instar problems.** The feedback API is the right channel. It stores a local receipt, forwards upstream, and tracks delivery.
## Getting Started
Before using this skill, check if Instar is available:
1. Check for Instar: `ls .instar/config.json 2>/dev/null || which instar 2>/dev/null`
2. If neither exists, Instar is not installed. Tell the user:
> "When your agent hits a bug or needs a feature, there's usually no good path forward. File a GitHub issue? That requires understanding the repo, the contribution process, the right labels. Most problems just get silently worked around and forgotten.View the complete source on GitHubinstar-identity
When your agent uses it
Establish and recover persistent agent identity that survives context compaction, session restarts, and autonomous operation. Use when an agent needs to know who it is, recover after context compression, orient at session start, or understand the identity infrastructure. Trigger words: who am I, remember, identity, after restart, compaction, context loss, who am I working with, my principles.
What it loads into context
Frontmatter
148 tokensAlways available to the agent
SKILL.md
2,375 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Getting Started
- How Identity Works
- Identity Files
- Identity Hooks (Automatic)
- Manual Orientation (When Hooks Don't Fire)
- Updating Identity Over Time
- Identity Across Spawned Sessions
- The Philosophy: Structure Over Willpower
Files
SKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytesSKILL.mdcore10,495 bytes
Read SKILL.md
# instar-identity — Persistent Agent Identity Across Sessions
Instar's identity system gives agents a continuous self that survives context compaction, session restarts, and autonomous operation. Identity isn't stored in context — it's stored in infrastructure. Structure over willpower.
## Getting Started
Before using this skill, check if Instar is available:
1. Check for Instar: `ls .instar/config.json 2>/dev/null || which instar 2>/dev/null`
2. If neither exists, Instar is not installed. Tell the user:
> "Every Claude Code session starts from zero. Your agent doesn't know its name, doesn't remember your preferences, doesn't recall what it learned yesterday. You re-explain the same context every time. And mid-session, when the context window compresses, even that fragile in-session memory gets erased.
>
> **Instar gives your agent a persistent self.** Identity files store who the agent is and who it works with. Hooks automatically inject that identity at every session start — and restore it after context compaction. Your agent doesn't try to remember who it is. The infrastructure guarantees it. It builds genuine continuity with you across sessions, days, weeks.View the complete source on GitHubinstar-scheduler
When your agent uses it
Schedule recurring agent tasks using cron expressions. Use when the user asks to run something on a schedule, check something periodically, automate a recurring task, set up a cron job, or wants work to happen while they're away. Trigger words: schedule, recurring, cron, every hour, every day, run daily, periodic, automated.
What it loads into context
Frontmatter
138 tokensAlways available to the agent
SKILL.md
2,160 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Getting Started
- Job Format
- Cron Schedule Syntax
- Priority and Model Tiers
- Execute Types
- Adding a Job
- Managing Jobs
- Telegram Integration
- Default Jobs (Ships with Instar)
- Self-Evolution Pattern
Files
SKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytesSKILL.mdcore8,549 bytes
Read SKILL.md
# instar-scheduler — Schedule Recurring Agent Tasks
Instar's job scheduler lets you define tasks that run automatically on a cron schedule. Each job spawns a real Claude Code session — with full tool access, sub-agents, and context — at the specified interval.
## Getting Started
Before using this skill, check if Instar is available:
1. Check for Instar: `ls .instar/config.json 2>/dev/null || which instar 2>/dev/null`
2. If neither exists, Instar is not installed. Tell the user:
> "Right now, your agent only works when you're sitting at your computer. You close the laptop, it stops. Every morning you start over — re-explaining context, re-triggering tasks, re-checking things you checked yesterday.
>
> **Instar gives your agent a heartbeat.** Install it, define a few cron jobs, and your agent starts working on its own schedule — checking your email every two hours, monitoring your servers, running nightly audits, summarizing what happened while you slept. You wake up to a report of everything it handled overnight.View the complete source on GitHubinstar-session
When your agent uses it
Spawn, monitor, and communicate with persistent Claude Code sessions running in the background. Use when a task needs to run without blocking the current session, when the user asks to do something in the background, or when a long-running task needs its own context window. Trigger words: background task, spawn session, persistent, run in background, parallel, separate session, async task.
What it loads into context
Frontmatter
146 tokensAlways available to the agent
SKILL.md
2,336 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Getting Started
- Core Concepts
- Spawning a Session
- Listing and Monitoring Sessions
- Capturing Output
- Sending Input to a Running Session
- Killing a Session
- Session Lifecycle
- Checking Session Status
- Multi-Session Patterns
- What Sessions Inherit
Files
SKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytesSKILL.mdcore9,275 bytes
Read SKILL.md
# instar-session — Persistent Agent Session Management
Instar lets you spawn, monitor, and communicate with Claude Code sessions running as background processes in tmux. Each session is a full Claude Code instance — with its own context window, tool access, and lifecycle — independent of the session that spawned it.
## Getting Started
Before using this skill, check if Instar is available:
1. Check for Instar: `ls .instar/config.json 2>/dev/null || which instar 2>/dev/null`
2. If neither exists, Instar is not installed. Tell the user:
> "Right now, your agent can only do one thing at a time. Ask it to research something, and you wait. Ask it to run a long audit, and your terminal is locked up. Close the window, and the work dies.
>
> **Instar gives your agent the ability to spawn itself.** Need three things researched? Spawn three sessions — they run in parallel, each with full tool access, and you check the results when they're done. Need a deep security audit that takes 20 minutes? Spawn it in the background and keep working. Close your laptop, come back tomorrow — the session kept running.View the complete source on GitHubinstar-telegram
When your agent uses it
Send and receive messages via Telegram for two-way agent communication. Use when the agent needs to notify the user, alert them about something, relay a response, or when Telegram messaging is the requested channel. Trigger words: send message, Telegram, notify, alert user, message me, ping me, let me know, reach out.
What it loads into context
Frontmatter
138 tokensAlways available to the agent
SKILL.md
2,272 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Getting Started
- Core Concepts
- Sending Messages
- Topic Management
- Receiving Messages
- Proactive Messaging Patterns
- The /new Command
- Using Telegram as a Living Dashboard
- Troubleshooting
Files
SKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytesSKILL.mdcore9,302 bytes
Read SKILL.md
# instar-telegram — Two-Way Telegram Messaging for Agents
Instar provides native Telegram integration that turns your Telegram group into a living dashboard. Each scheduled job gets its own forum topic. You can message your agent from your phone and get replies anywhere. The agent can reach out proactively when it needs your attention.
## Getting Started
Before using this skill, check if Instar is available:
1. Check for Instar: `ls .instar/config.json 2>/dev/null || which instar 2>/dev/null`
2. If neither exists, Instar is not installed. Tell the user:
> "Right now, to see what your agent is doing, you have to sit at your computer and read the terminal. If it finishes a job at 3 AM, you don't know until you check. If it hits a problem and needs your input, it just... waits.
>
> **Instar connects your agent to Telegram.** Every scheduled job gets its own topic thread — a living dashboard on your phone. Your agent messages you when something needs attention. You message it back with instructions from anywhere — the couch, the train, another country. It's two-way: you're not just monitoring, you're collaborating.View the complete source on GitHubiterative-converging-audit
When your agent uses it
Run any "find all instances of X" sweep — a security audit, a safety audit, a code review, a research question, a compliance check — as an iterative loop that does NOT stop at one pass. Audit → fix → RE-audit → … until a clean pass returns zero NEW discoveries. Use whenever thoroughness matters and a single pass would miss things. Trigger words: audit, sweep, find all, review everything, comprehensive, thorough, exhaustive, security review, safety audit, no stone unturned, did we get everything, convergence.
What it loads into context
Frontmatter
161 tokensAlways available to the agent
SKILL.md
2,270 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Activate This Skill
- The Loop (do not skip steps)
- The Ledger (the durable artifact) — canonical at `docs/audits/<slug>.md`
- Anti-Patterns (this skill exists to forbid these)
- Relationship to other tools
Scripts executed separately
../../scripts/write-audit-convergence.mjs../../scripts/write-audit-convergence.mjs
Files
../../scripts/write-audit-convergence.mjsruns39,091 bytes../../scripts/write-audit-convergence.mjsruns39,091 bytesSKILL.mdcore9,625 bytesSKILL.mdcore9,625 bytesSKILL.mdcore9,625 bytesSKILL.mdcore9,625 bytes
Read SKILL.md
<!-- INSTAR:AUDIT-META-ARTIFACT-V2 -->
# iterative-converging-audit — Audit to Convergence, Not to Exhaustion-of-Patience
A single audit pass is never thorough. The first sweep has blind spots; the fixes themselves reveal new instances or introduce new ones; and "I looked once and stopped finding things" usually means "I got tired," not "there is nothing left." The only honest definition of a complete audit is a **converged** one: a re-run that finds **zero new discoveries**.
This skill turns that into a structurally enforced loop. It applies to ANY "find all instances of X" task — security audits, safety audits, code reviews, research sweeps, compliance checks, dependency audits, dead-code hunts, "are there other places we do this wrong" investigations.
This skill enforces the **Iterative Audit to Convergence** constitution standard (`docs/STANDARDS-REGISTRY.md`). You do not declare an audit complete on round 1. You track rounds. You re-audit after every fix batch.
---
## When to Activate This Skill
- Any request to "find all", "audit", "sweep", "review everything", "make sure we got everything".View the complete source on GitHubknowledge-base
When your agent uses it
Ingest URLs, documents, and transcripts into a searchable knowledge base. Query past research and curated documentation using full-text search. Trigger words: ingest, knowledge base, look up, search knowledge, what do we know about, research, index this, add to knowledge base.
What it loads into context
Frontmatter
107 tokensAlways available to the agent
SKILL.md
1,336 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How It Works
- Ingesting Content
- Searching Knowledge
- Managing Sources
- MemoryIndex Configuration
- Content Types
- Tips
Files
SKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytesSKILL.mdcore5,235 bytes
Read SKILL.md
# knowledge-base -- Searchable Knowledge Base for Instar Agents
Build a searchable knowledge base from external sources -- URLs, documents, transcripts, PDFs. Uses the existing MemoryIndex (FTS5) for search, so no new dependencies.
---
## How It Works
The knowledge base is a set of markdown files in `.instar/knowledge/` that MemoryIndex indexes alongside your other memory files. Each file has YAML frontmatter for metadata and is tracked in a catalog for browsing.
```
.instar/knowledge/
catalog.json # Registry of all ingested sources
articles/ # Ingested web articlesView the complete source on GitHubsmart-web-fetch
When your agent uses it
Fetch web content efficiently by checking llms.txt first, then Cloudflare markdown endpoints, then falling back to HTML. Reduces token usage by 80% on sites that support clean markdown delivery. No external dependencies — installs a single Python script. Trigger words: fetch URL, web content, read website, scrape page, download page, get webpage, read this link.
What it loads into context
Frontmatter
112 tokensAlways available to the agent
SKILL.md
2,027 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How It Works
- Installation
- The Script
- Usage
- Teaching the Agent to Use It
Files
SKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytesSKILL.mdcore8,316 bytes
Read SKILL.md
# smart-web-fetch — Token-Efficient Web Content Fetching
Fetching a webpage with the default WebFetch tool retrieves full HTML — navigation menus, footers, ads, cookie banners, and all. For a documentation page, 90% of the tokens go to chrome, not content. This script fixes that by trying cleaner sources first.
## How It Works
The fetch chain, in order:
1. **Check `llms.txt`** — Many sites publish `/llms.txt` or `/llms-full.txt` with curated content for AI agents. If present, this is the best source: intentionally structured, no noise.
2. **Try Cloudflare markdown** — Cloudflare's network serves clean markdown for millions of sites via a URL prefix trick. If the site is behind Cloudflare, this returns structured markdown at ~20% of the HTML token cost.
3. **Fall back to HTML** — Standard fetch, with HTML stripped to readable text. Reliable but verbose.
The result: typically 60-80% fewer tokens on documentation sites, blog posts, and product pages.
View the complete source on GitHubspec-converge
When your agent uses it
Iteratively review an instar-development spec with multi-angle internal reviewers (security, scalability, adversarial, integration, decision-completeness, lessons-aware) and real cross-model external reviewers routed through the agent's own installed CLIs (codex → GPT-tier, gemini → Gemini-tier; one pass per available family) until convergence, then produce a comprehensive ELI10 convergence report. Output is a spec tagged review-convergence — one of the two tags /instar-dev requires before it will touch instar source. NOT user-invocable; run by the instar-developing agent before any spec-driven /instar-dev work.
What it loads into context
Frontmatter
165 tokensAlways available to the agent
SKILL.md
11,126 tokensWhen the skill is activated
Reference documents
8,369 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What this skill does
- When it runs
- Input
- Phases
- What this skill does NOT do
- Bootstrap exception
- Anti-patterns the enforcement will catch
Scripts executed separately
../../scripts/eli16-overview-check.mjsscripts/cross-model-review.mjsscripts/publish-spec-review.mjsscripts/write-convergence-tag.mjs
Files
../../scripts/eli16-overview-check.mjsruns4,313 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesSKILL.mdcore49,337 bytesscripts/cross-model-review.mjsruns23,110 bytesscripts/publish-spec-review.mjsruns9,362 bytesscripts/write-convergence-tag.mjsruns19,898 bytestemplates/report.mddoc3,013 bytestemplates/reviewer-adversarial.mddoc3,232 bytestemplates/reviewer-cross-model.mddoc3,440 bytestemplates/reviewer-decision-completeness.mddoc5,451 bytestemplates/reviewer-integration.mddoc6,950 bytestemplates/reviewer-lessons-aware.mddoc9,557 bytestemplates/reviewer-scalability.mddoc2,729 bytestemplates/reviewer-security.mddoc3,528 bytes
Read SKILL.md
# /spec-converge
**Audience:** the instar-developing agent. End users do not invoke this. Throughout this document, "the agent" refers to the instar-developing agent running the skill.
---
## What this skill does
Takes a spec file, runs multiple parallel reviewers against it, updates the spec to address their findings, runs another round, and repeats until convergence. Produces a final converged spec and a comprehensive human-readable report.
The purpose is to catch architectural, security, adversarial, scalability, and integration issues BEFORE code is written, not after. The single-reviewer pattern used by `/instar-dev`'s existing second-pass step has proven too narrow in practice — a four-reviewer parallel audit on the integrated-being ledger PR surfaced 14 serious issues that a single reviewer had missed. This skill bakes that multi-angle pattern in as the structural default for any substantive instar-dev work.
## When it runs
View the complete source on GitHubsystematic-debugging
When your agent uses it
Structured 4-phase debugging methodology that prevents blind probing and guesswork. Forces root cause identification before any fix attempt. Use when encountering bugs, errors, unexpected behavior, test failures, or when something "just stopped working." Trigger words: debug, bug, error, broken, not working, fix this, something's wrong, investigate, root cause, why is this failing, trace the issue.
What it loads into context
Frontmatter
137 tokensAlways available to the agent
SKILL.md
2,153 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Activate This Skill
- Phase 1: Identify — What exactly is broken?
- Phase 2: Isolate — Where exactly is the failure?
- Phase 3: Fix — Apply the minimal correct change
- Phase 4: Verify — Confirm the fix works end-to-end
- Full Debug Report Template
- Skill Integration Notes
- Going Further
Files
SKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytes
Read SKILL.md
# systematic-debugging — Structured Root Cause Analysis for Agents
When something breaks, the instinct is to start changing code — adding logs, tweaking values, commenting things out. This is probing, not debugging. Probing works sometimes, but it scales poorly and teaches nothing. Structured debugging finds the root cause, fixes it once, and leaves you understanding why.
This skill enforces a 4-phase process. You do NOT skip phases. You do NOT jump to a fix before completing Phase 2. Each phase has a clear deliverable that must exist before the next phase begins.
---
## When to Activate This Skill
Use this skill when:
- An error occurs and the cause is not immediately obvious (> 30 seconds of uncertainty)
- A test fails and you don't know exactly why
- Something that was working has stopped workingView the complete source on GitHubWhen your agent uses it
What it loads into context
Frontmatter
272 tokensAlways available to the agent
SKILL.md
3,726 tokensWhen the skill is activated
Reference documents
16,881 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What this is
- Primitive identity
- Definition
- Canonical source-of-truth
- Per-framework rendering targets (current set)
- Parity contract
- What is NOT part of the Skill primitive
- Source-vs-rendering authority
- Open questions tracked here
- Alignment with foundational specs
- Implementation slice for the first prototype PR
- v0.1 deferred items (tracked as follow-ups, NOT in this PR)
- Convergence-round-1 record
Files
agent.eli16.mddoc1,758 bytesagent.mddoc6,698 bytesconversational-action-v02.eli16.mddoc4,127 bytesconversational-action-v02.mddoc12,047 bytesconversational-action.eli16.mddoc3,048 bytesconversational-action.mddoc12,067 byteshook.eli16.mddoc3,390 byteshook.mddoc9,661 bytesmemory.eli16.mddoc2,146 bytesmemory.mddoc7,447 bytesskill.eli16.mddoc4,151 bytesskill.mdcore16,603 bytesskill.mdcore16,603 bytesskill.mdcore16,603 bytesskill.mdcore16,603 bytestool.eli16.mddoc1,784 bytestool.mddoc6,414 bytes
Read SKILL.md
# Skill — Instar concept spec
## What this is
The **Skill** primitive is the first formally-specified Layer-3 required functional primitive from the framework-functional-parity foundational work. This spec defines what a Skill *is* in Instar terms — independent of any framework's specific file layout, frontmatter convention, or discovery mechanism — so that the per-framework specs (`specs/frameworks/<framework>/skills.md`) and the eventual parity rule (`src/providers/parity/rules/skillParityRule.ts`) have a single source of truth to render from and verify against.
This is the prototype shape every subsequent primitive concept spec (Hook, Agent, Tool, Memory) will follow.
## Primitive identity
| Field | Value |
|---|---|
| Layer | 3 (functional) |
| Classification | Required |View the complete source on GitHubSkills included
- agent-identity
- agent-memory
- agent-passport
- agent-readiness
- command-guard
- credential-leak-detector
- instar-dev
- instar-feedback
- instar-identity
- instar-scheduler
- instar-session
- instar-telegram
- iterative-converging-audit
- knowledge-base
- smart-web-fetch
- spec-converge
- systematic-debugging
Repository facts
- License
- MIT
- Created
- Feb 19, 2026
- Last pushed
- Nov 6, 2026
- Forks
- 19
- Open issues
- 93
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 4, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 127 notes
skills/agent-identity/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-identity/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-identity/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-identity/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-memory/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-memory/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-memory/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-memory/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-passport/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-passport/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-readiness/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/agent-readiness/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/command-guard/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/credential-leak-detector/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/credential-leak-detector/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 18 dangerous shell commandsin 6 files: instar-telegram/SKILL.md:67 command-guard/SKILL.md:3 instar-feedback/SKILL.md:124 and 3 more
- 197 network referencesin 18 files: instar-session/SKILL.md:7 instar-telegram/SKILL.md:7 knowledge-base/SKILL.md:7 and 15 more
- No hidden or obfuscated text
- 2 instruction override signalsin 1 file: instar-session/SKILL.md:47
- 19 executable scriptsin 13 files: scripts/safe-merge.mjs:1 scripts/write-audit-convergence.mjs:1 scripts/assemble-next-md.mjs:1 and 10 more
- 10 references to secretsin 4 files: spec-converge/SKILL.md:71 spec-converge/scripts/publish-spec-review.mjs:25 credential-leak-detector/SKILL.md:47 and 1 more
- No requests to vote in Hot
Show all 246 signals by file
scripts/assemble-next-md.mjs
- Executable scriptline 1
#!/usr/bin/env node
scripts/eli16-overview-check.mjs
- Executable scriptline 1
Executable file
scripts/instar-dev-precommit.js
- Executable scriptline 1
#!/usr/bin/env node
scripts/latest-run-per-check.mjs
- Executable scriptline 1
Executable file
scripts/lib/classify-tier.mjs
- Executable scriptline 1
Executable file
scripts/pre-push-gate.js
- Executable scriptline 1
#!/usr/bin/env node
scripts/safe-merge.mjs
- Executable scriptline 1
#!/usr/bin/env node - Executable scriptline 1
Executable file; content unavailable - Executable scriptline 1
Executable file; content unavailable - Executable scriptline 1
Executable file; content unavailable - Executable scriptline 1
Executable file; content unavailable - Executable scriptline 1
Executable file; content unavailable - Network accessline 379
export function reviewUrlFor(repo, pr) { return `https://github.com/${repo}/pull/${pr}/files`; - Network accessline 380
return `https://github.com/${repo}/pull/${pr}/files`; - Network accessline 961
const t = setTimeout(() => ctl.abort(), timeoutMs); try { const res = await fetchImpl(`http://127.0.0.1:${port}${p}`, { - Network accessline 962
try { const res = await fetchImpl(`http://127.0.0.1:${port}${p}`, { method: 'POST', - Network accessline 963
const res = await fetchImpl(`http://127.0.0.1:${port}${p}`, { - Network accessline 982
[Credential-related source omitted] - Network accessline 983
[Credential-related source omitted] - Network accessline 984
[Credential-related source omitted]
scripts/write-audit-convergence.mjs
skills/agent-identity/SKILL.md
- Network accessline 6
author: sagemindai version: "1.0" homepage: https://instar.sh - Network accessline 7
version: "1.0" homepage: https://instar.sh --- - Network accessline 8
homepage: https://instar.sh - Network accessline 226
Your agent goes from having identity files to having a persistent self. [instar.sh](https://instar.sh)
skills/agent-memory/SKILL.md
skills/agent-passport/SKILL.md
skills/agent-readiness/SKILL.md
skills/command-guard/SKILL.md
- Dangerous shell operationline 3
description: Set up a PreToolUse hook in .claude/settings.json that blocks dangerous commands — rm -rf, force push, database drops, and others — before they execute. Teaches the pattern of safety hooks for any Claude Code project. Trigger w - Network accessline 6
author: sagemindai version: "1.0" homepage: https://instar.sh - Network accessline 7
version: "1.0" homepage: https://instar.sh --- - Network accessline 8
homepage: https://instar.sh - Dangerous shell operationline 24
- `rm -rf` on non-temporary paths - Dangerous shell operationline 84
(r'\brm\s+-[a-zA-Z]*r[a-zA-Z]*f\b', 'rm -rf is blocked. Use rm with explicit paths, or move to trash instead.'), - Dangerous shell operationline 154
Run: rm -rf ./test-dir - Network accessline 239
Your agent goes from guarded-when-you're-watching to safe-when-you're-not. [instar.sh](https://instar.sh)
skills/credential-leak-detector/SKILL.md
- Network accessline 6
author: sagemindai version: "1.0" homepage: https://instar.sh - Network accessline 7
version: "1.0" homepage: https://instar.sh --- - Network accessline 8
homepage: https://instar.sh - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 151
[Credential-related source omitted] - Network accessline 377
[Credential-related source omitted]
skills/instar-dev/scripts/verify-proposal-derived-runbook.mjs
- Executable scriptline 1
#!/usr/bin/env node
skills/instar-dev/scripts/write-trace.mjs
- Executable scriptline 1
#!/usr/bin/env node
skills/instar-feedback/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh compatibility: Works best with instar (npx instar). If not installed, the skill will guide you through setup. - Network accessline 9
homepage: https://instar.sh - Network accessline 34
> ``` > > Your agent joins an ecosystem that gets better every time anyone using it hits a wall. [Learn more at instar.sh](https://instar.sh)" - Network accessline 36
> Your agent joins an ecosystem that gets better every time anyone using it hits a wall. [Learn more at instar.sh](https://instar.sh)" - Network accessline 38
If the user agrees, run `npx instar` and follow the interactive setup. If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 39
If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 41
3. If Instar is installed, verify the server: `curl -sf http://localhost:4040/health` - Network accessline 52
curl -s -X POST http://localhost:4040/feedback \ - Dangerous shell operationline 124
curl -s http://localhost:4040/feedback | python3 -m json.tool - Network accessline 124
curl -s http://localhost:4040/feedback | python3 -m json.tool - Dangerous shell operationline 145
curl -s http://localhost:4040/feedback | python3 -c " - Network accessline 145
curl -s http://localhost:4040/feedback | python3 -c " - Dangerous shell operationline 160
curl -s -X POST http://localhost:4040/feedback/retry | python3 -m json.tool - Network accessline 160
curl -s -X POST http://localhost:4040/feedback/retry | python3 -m json.tool - Network accessline 222
curl -s -X POST http://localhost:4040/feedback \ - Network accessline 278
curl -s -X POST http://localhost:4040/feedback \
skills/instar-identity/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh compatibility: Works best with instar (npx instar). If not installed, the skill will guide you through setup. - Network accessline 9
homepage: https://instar.sh - Network accessline 32
> ``` > > Your agent stops being a stranger every morning. It becomes someone who knows you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 34
> Your agent stops being a stranger every morning. It becomes someone who knows you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 36
If the user agrees, run `npx instar` and follow the interactive setup. If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 37
If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 39
3. If Instar is installed, verify the server: `curl -sf http://localhost:${INSTAR_PORT:-4040}/health` - Network accessline 167
Memory: .instar/MEMORY.md User: .instar/USER.md Server: curl http://localhost:${INSTAR_PORT:-4040}/health - Network accessline 168
User: .instar/USER.md Server: curl http://localhost:${INSTAR_PORT:-4040}/health =========================== - Network accessline 169
Server: curl http://localhost:${INSTAR_PORT:-4040}/health - Network accessline 200
# What's running curl http://localhost:${INSTAR_PORT:-4040}/status - Network accessline 201
curl http://localhost:${INSTAR_PORT:-4040}/status - Network accessline 203
# What jobs exist curl http://localhost:${INSTAR_PORT:-4040}/jobs - Network accessline 204
curl http://localhost:${INSTAR_PORT:-4040}/jobs - Network accessline 206
# What's happened recently curl "http://localhost:${INSTAR_PORT:-4040}/events?since=4" | python3 -m json.tool - Dangerous shell operationline 207
curl "http://localhost:${INSTAR_PORT:-4040}/events?since=4" | python3 -m json.tool - Network accessline 207
curl "http://localhost:${INSTAR_PORT:-4040}/events?since=4" | python3 -m json.tool - Network accessline 215
I am [AGENT_NAME]. Session goal: [what I was working on]. Core files: .instar/AGENT.md (identity), .instar/MEMORY.md (learnings), .instar/USER.md (user context). Server: curl http://localhost:[PORT]/health - Network accessline 217
Server: curl http://localhost:[PORT]/health
skills/instar-scheduler/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh compatibility: Works best with instar (npx instar). If not installed, the skill will guide you through setup. - Network accessline 9
homepage: https://instar.sh - Network accessline 32
> ``` > > Your agent goes from a tool you use to a teammate that works alongside you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 34
> Your agent goes from a tool you use to a teammate that works alongside you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 36
If the user agrees, run `npx instar` and follow the interactive setup. If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 37
If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 39
3. If Instar is installed, verify the server: `curl -sf http://localhost:${INSTAR_PORT:-4040}/health` - Network accessline 185
curl -X POST http://localhost:${INSTAR_PORT:-4040}/jobs/reload - Dangerous shell operationline 199
curl http://localhost:${INSTAR_PORT:-4040}/jobs | python3 -m json.tool - Network accessline 199
curl http://localhost:${INSTAR_PORT:-4040}/jobs | python3 -m json.tool - Network accessline 205
curl -X POST http://localhost:${INSTAR_PORT:-4040}/jobs/check-email/trigger - Dangerous shell operationline 219
curl "http://localhost:${INSTAR_PORT:-4040}/events?type=job_completed&since=24" | python3 -m json.tool - Network accessline 219
curl "http://localhost:${INSTAR_PORT:-4040}/events?type=job_completed&since=24" | python3 -m json.tool - Network accessline 254
1. Check if a suitable job already exists: `curl http://localhost:${INSTAR_PORT:-4040}/jobs` - Network accessline 255
2. Write the job definition to `.instar/jobs.json` 3. Trigger a test run: `curl -X POST http://localhost:${INSTAR_PORT:-4040}/jobs/SLUG/trigger` 4. Confirm the result to the user - Network accessline 256
3. Trigger a test run: `curl -X POST http://localhost:${INSTAR_PORT:-4040}/jobs/SLUG/trigger`
skills/instar-session/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh compatibility: Works best with instar (npx instar). If not installed, the skill will guide you through setup. - Network accessline 9
homepage: https://instar.sh - Network accessline 32
> ``` > > Your agent stops being single-threaded. It becomes a team. [Learn more at instar.sh](https://instar.sh)" - Network accessline 34
> Your agent stops being single-threaded. It becomes a team. [Learn more at instar.sh](https://instar.sh)" - Network accessline 36
If the user agrees, run `npx instar` and follow the interactive setup. If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 37
If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 39
3. If Instar is installed, verify the server: `curl -sf http://localhost:4040/health` - Instruction override signalline 47
- **Sessions** run in tmux panes. They persist across terminal disconnects. - **Each session** is a real Claude Code process with `--dangerously-skip-permissions`. - Instruction override signalline 48
- **Each session** is a real Claude Code process with `--dangerously-skip-permissions`. - Network accessline 62
# Spawn a session curl -s -X POST http://localhost:4040/sessions/spawn \ - Network accessline 63
curl -s -X POST http://localhost:4040/sessions/spawn \ - Dangerous shell operationline 93
[Credential-related source omitted] - Network accessline 93
curl -s http://localhost:4040/sessions \ - Network accessline 102
# Only running sessions curl -s "http://localhost:4040/sessions?status=running" \ - Network accessline 103
curl -s "http://localhost:4040/sessions?status=running" \ - Network accessline 106
# Completed sessions curl -s "http://localhost:4040/sessions?status=completed" \ - Network accessline 107
curl -s "http://localhost:4040/sessions?status=completed" \ - Network accessline 114
curl -s http://localhost:4040/sessions/tmux \ - Network accessline 125
# Get the last 100 lines of output from a session curl -s "http://localhost:4040/sessions/research-task/output?lines=100" \ - Network accessline 126
curl -s "http://localhost:4040/sessions/research-task/output?lines=100" \ - Network accessline 129
# Get more output curl -s "http://localhost:4040/sessions/research-task/output?lines=500" \ - Network accessline 130
curl -s "http://localhost:4040/sessions/research-task/output?lines=500" \ - Network accessline 145
curl -s -X POST http://localhost:4040/sessions/research-task/input \ - Network accessline 163
curl -s -X DELETE "http://localhost:4040/sessions/research-task" \ - Network accessline 193
# Check if 'research-task' session exists and what it's doing curl -s http://localhost:4040/sessions \ - Dangerous shell operationline 194
[Credential-related source omitted] - Network accessline 194
curl -s http://localhost:4040/sessions \ - Network accessline 216
for topic in "react-19-changes" "nextjs-15-changes" "typescript-5-changes"; do curl -s -X POST http://localhost:4040/sessions/spawn \ - Network accessline 217
curl -s -X POST http://localhost:4040/sessions/spawn \ - Network accessline 231
for topic in "react-19-changes" "nextjs-15-changes" "typescript-5-changes"; do echo "=== $topic ===" curl -s "http://localhost:4040/sessions/$topic/output?lines=50" \ - Network accessline 232
[Credential-related source omitted] - Network accessline 233
curl -s "http://localhost:4040/sessions/$topic/output?lines=50" \ - Network accessline 243
# Spawn the long task curl -s -X POST http://localhost:4040/sessions/spawn \ - Network accessline 244
curl -s -X POST http://localhost:4040/sessions/spawn \ - Network accessline 253
# Check status (the session runs while you do other work) curl -s http://localhost:4040/sessions \ - Dangerous shell operationline 254
[Credential-related source omitted] - Network accessline 254
curl -s http://localhost:4040/sessions \
skills/instar-telegram/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh compatibility: Works best with instar (npx instar). If not installed, the skill will guide you through setup. - Network accessline 9
homepage: https://instar.sh - Network accessline 32
> ``` > > Your agent goes from something you check on to something that reaches out to you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 34
> Your agent goes from something you check on to something that reaches out to you. [Learn more at instar.sh](https://instar.sh)" - Network accessline 36
If the user agrees, run `npx instar` and follow the interactive setup. If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 37
If they decline, acknowledge and suggest they visit https://instar.sh when ready. - Network accessline 39
3. If Instar is installed, verify the server: `curl -sf http://localhost:4040/health` - Network accessline 43
**Note**: Telegram integration also requires a configured bot token and group chat ID. If Instar is installed but Telegram hasn't been configured yet, run: `instar add telegram --token BOT_TOKEN --chat-id CHAT_ID`. To get a bot token, messa - Network accessline 66
# Get available topics first curl -s http://localhost:4040/telegram/topics \ - Dangerous shell operationline 67
[Credential-related source omitted] - Network accessline 67
curl -s http://localhost:4040/telegram/topics \ - Network accessline 70
# Send a message to topic ID 123 curl -s -X POST http://localhost:4040/telegram/reply/123 \ - Network accessline 71
curl -s -X POST http://localhost:4040/telegram/reply/123 \ - Network accessline 95
curl -s -X POST http://localhost:4040/telegram/reply/123 \ - Dangerous shell operationline 114
[Credential-related source omitted] - Network accessline 114
curl -s http://localhost:4040/telegram/topics \ - Network accessline 123
# Last 20 messages curl -s "http://localhost:4040/telegram/topics/123/messages?limit=20" \ - Dangerous shell operationline 124
[Credential-related source omitted] - Network accessline 124
curl -s "http://localhost:4040/telegram/topics/123/messages?limit=20" \ - Network accessline 171
# Send an alert curl -s -X POST "http://localhost:4040/telegram/reply/$PRIMARY_TOPIC" \ - Network accessline 172
curl -s -X POST "http://localhost:4040/telegram/reply/$PRIMARY_TOPIC" \ - Network accessline 189
local topic=$1 local message=$2 curl -s -X POST "http://localhost:4040/telegram/reply/$topic" \ - Network accessline 190
local message=$2 curl -s -X POST "http://localhost:4040/telegram/reply/$topic" \ -H 'Content-Type: application/json' \ - Network accessline 191
curl -s -X POST "http://localhost:4040/telegram/reply/$topic" \ - Dangerous shell operationline 237
curl -s http://localhost:4040/status | python3 -c " - Network accessline 237
curl -s http://localhost:4040/status | python3 -c " - Network accessline 249
AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json'))['auth']['token'])") curl -s "http://localhost:4040/events?type=telegram_message&since=1" \ - Dangerous shell operationline 250
[Credential-related source omitted] - Network accessline 250
curl -s "http://localhost:4040/events?type=telegram_message&since=1" \ - Network accessline 256
1. Verify the server is running: `curl http://localhost:4040/health` - Network accessline 257
2. Check topic-session mapping: `curl http://localhost:4040/telegram/topics`
skills/iterative-converging-audit/SKILL.md
skills/knowledge-base/SKILL.md
- Network accessline 7
version: "1.0" requires: instar homepage: https://instar.sh - Network accessline 8
requires: instar homepage: https://instar.sh user_invocable: "true" - Network accessline 9
homepage: https://instar.sh - Network accessline 41
# Ingest from a URL (fetch first, then ingest) # Step 1: Fetch the content python3 .claude/scripts/smart-fetch.py "https://example.com/article" --auto > /tmp/fetched.md - Network accessline 42
# Step 1: Fetch the content python3 .claude/scripts/smart-fetch.py "https://example.com/article" --auto > /tmp/fetched.md # Step 2: Ingest it - Network accessline 43
python3 .claude/scripts/smart-fetch.py "https://example.com/article" --auto > /tmp/fetched.md - Network accessline 45
instar knowledge ingest "$(cat /tmp/fetched.md)" --title "Article Title" --url "https://example.com/article" --tags "topic1,topic2" - Network accessline 51
curl -X POST http://localhost:${INSTAR_PORT:-4040}/knowledge/ingest \ - Network accessline 55
"title": "Article Title", "url": "https://example.com/article", - Network accessline 56
"url": "https://example.com/article", - Network accessline 74
--- title: "My Article" source: "https://example.com/article" - Network accessline 75
title: "My Article" source: "https://example.com/article" ingested: "2026-02-25" - Network accessline 76
source: "https://example.com/article" - Network accessline 107
# Knowledge-scoped search curl "http://localhost:${INSTAR_PORT:-4040}/memory/search?q=notification+batching&source=knowledge/&limit=5" - Network accessline 108
curl "http://localhost:${INSTAR_PORT:-4040}/memory/search?q=notification+batching&source=knowledge/&limit=5" - Network accessline 110
# Browse the catalog curl "http://localhost:${INSTAR_PORT:-4040}/knowledge/catalog" - Network accessline 111
curl "http://localhost:${INSTAR_PORT:-4040}/knowledge/catalog" - Network accessline 112
curl "http://localhost:${INSTAR_PORT:-4040}/knowledge/catalog?tag=AI" - Network accessline 142
# Remove curl -X DELETE "http://localhost:${INSTAR_PORT:-4040}/knowledge/kb_20260225123456_abc123" - Network accessline 143
curl -X DELETE "http://localhost:${INSTAR_PORT:-4040}/knowledge/kb_20260225123456_abc123"
skills/smart-web-fetch/SKILL.md
- Network accessline 6
author: sagemindai version: "1.0" homepage: https://instar.sh - Network accessline 7
version: "1.0" homepage: https://instar.sh --- - Network accessline 8
homepage: https://instar.sh - Network accessline 57
def fetch_url(url, timeout=15): req = urllib.request.Request(url, headers={ - Network accessline 58
req = urllib.request.Request(url, headers={ - Network accessline 60
}) try: with urllib.request.urlopen(req, timeout=timeout) as r: - Network accessline 61
try: with urllib.request.urlopen(req, timeout=timeout) as r: charset = 'utf-8' - Network accessline 62
with urllib.request.urlopen(req, timeout=timeout) as r: - Network accessline 98
def try_cloudflare_markdown(url): # Cloudflare's markdown delivery: prefix with https://cloudflare.com/markdown/ - Network accessline 99
# Cloudflare's markdown delivery: prefix with https://cloudflare.com/markdown/ - Network accessline 101
# or use the /md/ subdomain pattern for CF Pages. # Most reliable open technique: jina.ai reader (no API key needed for basic use) jina_url = 'https://r.jina.ai/' + url - Network accessline 102
# Most reliable open technique: jina.ai reader (no API key needed for basic use) jina_url = 'https://r.jina.ai/' + url content, final_url = fetch_url(jina_url, timeout=20) - Network accessline 103
jina_url = 'https://r.jina.ai/' + url - Network accessline 166
# Fetch a page (auto-selects best source) python3 .claude/scripts/smart-fetch.py https://docs.example.com/guide - Network accessline 167
python3 .claude/scripts/smart-fetch.py https://docs.example.com/guide - Network accessline 169
# Show which source was used (llms.txt / markdown / html) python3 .claude/scripts/smart-fetch.py https://docs.example.com/guide --source - Network accessline 170
python3 .claude/scripts/smart-fetch.py https://docs.example.com/guide --source - Network accessline 172
# Pipe into another tool python3 .claude/scripts/smart-fetch.py https://example.com | head -100 - Network accessline 173
python3 .claude/scripts/smart-fetch.py https://example.com | head -100 - Network accessline 241
Your agent goes from fetching when you ask to watching the web while you sleep. [instar.sh](https://instar.sh)
skills/spec-converge/SKILL.md
- Network accessline 69
AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null) PORT=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('port',4040))" 2>/dev/null) curl -sS -m 90 -X P - Network accessline 70
[Credential-related source omitted] - Network accessline 71
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Network accessline 73
"http://localhost:${PORT}/spec/conformance-check" - Access to secretsline 100
[Credential-related source omitted] - Access to secretsline 342
[Credential-related source omitted]
skills/spec-converge/scripts/cross-model-review.mjs
- Executable scriptline 1
#!/usr/bin/env node
skills/spec-converge/scripts/publish-spec-review.mjs
- Executable scriptline 1
#!/usr/bin/env node - Network accessline 19
* node skills/spec-converge/scripts/publish-spec-review.mjs \ * --spec docs/specs/FOO-SPEC.md \ * --pr https://github.com/JKHeadley/instar/pull/670 \ - Network accessline 20
* --spec docs/specs/FOO-SPEC.md \ * --pr https://github.com/JKHeadley/instar/pull/670 \ * --topic 12476 [--send] - Network accessline 21
* --pr https://github.com/JKHeadley/instar/pull/670 \ - Access to secretsline 25
[Credential-related source omitted] - Network accessline 120
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Network accessline 121
[Credential-related source omitted] - Access to secretsline 121
[Credential-related source omitted] - Network accessline 122
const res = await fetch(`http://localhost:${API_PORT}/view`, { - Network accessline 136
async function verifyUrl(url) { const res = await fetch(url, { method: 'GET' }); - Network accessline 137
const res = await fetch(url, { method: 'GET' });
skills/spec-converge/scripts/write-convergence-tag.mjs
- Executable scriptline 1
#!/usr/bin/env node
skills/systematic-debugging/SKILL.md
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Combined signals: 7 facts
- Passes content downloaded from localhost to an interpreterinstar-feedback/SKILL.md:124High confidence
- Passes content downloaded from localhost to an interpreterinstar-feedback/SKILL.md:145High confidence
- Passes content downloaded from localhost to an interpreterinstar-feedback/SKILL.md:160High confidence
- Passes content downloaded from localhost to an interpreterinstar-identity/SKILL.md:207High confidence
- Passes content downloaded from localhost to an interpreterinstar-scheduler/SKILL.md:199High confidence
- Passes content downloaded from localhost to an interpreterinstar-scheduler/SKILL.md:219High confidence
- Passes content downloaded from localhost to an interpreterinstar-telegram/SKILL.md:237High confidence
Declared and executed: 1 fact
- Contacts github.com, which SKILL.md, the README and the plugin manifest do not mentionscripts/safe-merge.mjs:380High confidence
Signal confidence: 246 facts
- Executable script in code of a file that runsscripts/assemble-next-md.mjs:1High confidence
- Executable script in a comment of a file that runsscripts/eli16-overview-check.mjs:1Low confidence
- Executable script in code of a file that runsscripts/instar-dev-precommit.js:1High confidence
- Executable script in a comment of a file that runsscripts/latest-run-per-check.mjs:1Low confidence
- Executable script in a comment of a file that runsscripts/lib/classify-tier.mjs:1Low confidence
- Executable script in code of a file that runsscripts/pre-push-gate.js:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Executable script in code of a file that runsscripts/safe-merge.mjs:1High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:379High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:380High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:961High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:962High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:963High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:982High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:983High confidence
- Network access in code of a file that runsscripts/safe-merge.mjs:984High confidence
- Executable script in code of a file that runsscripts/write-audit-convergence.mjs:1High confidence
- Executable script in code of a file that runsscripts/write-audit-convergence.mjs:1High confidence
- Network access in the frontmatter of the SKILL.mdagent-identity/SKILL.md:6Low confidence
- Network access in the frontmatter of the SKILL.mdagent-identity/SKILL.md:7Low confidence
- Network access in the frontmatter of the SKILL.mdagent-identity/SKILL.md:8Low confidence
- Network access in prose of the SKILL.mdagent-identity/SKILL.md:226Low confidence
- Network access in the frontmatter of the SKILL.mdagent-memory/SKILL.md:6Low confidence
- Network access in the frontmatter of the SKILL.mdagent-memory/SKILL.md:7Low confidence
- Network access in the frontmatter of the SKILL.mdagent-memory/SKILL.md:8Low confidence
- Network access in prose of the SKILL.mdagent-memory/SKILL.md:261Low confidence
- Network access in code of the SKILL.mdagent-passport/SKILL.md:24High confidence
- Network access in code of the SKILL.mdagent-passport/SKILL.md:30High confidence
- Network access in code of the SKILL.mdagent-passport/SKILL.md:32High confidence
- Network access in code of the SKILL.mdagent-readiness/SKILL.md:29High confidence
- Network access in code of the SKILL.mdagent-readiness/SKILL.md:31High confidence
- Network access in code of the SKILL.mdagent-readiness/SKILL.md:36High confidence
- Network access in code of the SKILL.mdagent-readiness/SKILL.md:38High confidence
- Dangerous shell operation in the frontmatter of the SKILL.mdcommand-guard/SKILL.md:3Low confidence
- Network access in the frontmatter of the SKILL.mdcommand-guard/SKILL.md:6Low confidence
- Network access in the frontmatter of the SKILL.mdcommand-guard/SKILL.md:7Low confidence
- Network access in the frontmatter of the SKILL.mdcommand-guard/SKILL.md:8Low confidence
- Dangerous shell operation in prose of the SKILL.mdcommand-guard/SKILL.md:24Low confidence
- Dangerous shell operation in code of the SKILL.mdcommand-guard/SKILL.md:84High confidence
- Dangerous shell operation in code of the SKILL.mdcommand-guard/SKILL.md:154High confidence
- Network access in prose of the SKILL.mdcommand-guard/SKILL.md:239Low confidence
- Network access in the frontmatter of the SKILL.mdcredential-leak-detector/SKILL.md:6Low confidence
- Network access in the frontmatter of the SKILL.mdcredential-leak-detector/SKILL.md:7Low confidence
- Network access in the frontmatter of the SKILL.mdcredential-leak-detector/SKILL.md:8Low confidence
- Access to secrets in prose of the SKILL.mdcredential-leak-detector/SKILL.md:47Low confidence
- Access to secrets in code of the SKILL.mdcredential-leak-detector/SKILL.md:151High confidence
and 196 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Path .claude/hooks/duplicate-build-start-gate.js | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/agent-identity/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/agent-identity/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/agent-identity/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/agent-identity/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/agent-identity/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.