Skip to content
Back to skills

Reap

ASecurity

Report how much of the context this agent loads is never used - unused skills, MCP servers, subagents, hooks and always-loaded prose - measured from real session transcripts. Use when asked why the context window is full, what is wasting tokens, or what is safe to remove.

  • 55 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added August 30, 2026
ai-agentsgobashgit

Works with

  • terminal
  • mcp

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned August 30, 2026

npx -y skills add thousandflowers/skillreaper --skill reap --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Reap?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Reap
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/thousandflowers-reap/badge)](https://www.skillsdirectory.com/skills/thousandflowers-reap)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
description: Report how much of the context this agent loads is never used - unused skills, MCP servers, subagents, hooks and always-loaded prose - measured from real session transcripts. Use when asked why the context window is full, what is wasting tokens, or what is safe to remove.
---

# skillreaper - context utilization report

Run `reap --agent`, then paste its output verbatim.

Do not reformat, re-order, summarise, truncate or re-align anything, and do not
add a heading or a table of your own: the binary already renders the report,
including its closing attribution line.

## Arguments

Append any `$ARGUMENTS` tokens that begin with `-`; ignore anything else and say
so. `--days N` sets the evidence window (default 30), `--model <id>` prices it.
For the full inventory rather than the top rows, use `reap --json`.

## If reap is not installed

Decide with `command -v reap` and nothing else - never an absolute path, never a
filesystem search: a copy found off `PATH` may be an older build, and silently
using it hides a broken install.

If that fails, print exactly this and nothing else:

> `reap` is not installed. Run it once without installing anything:
>
> ```bash
> npx skillreaper
> ```
>
> Or install it permanently:
>
> ```bash
> brew install thousandflowers/tap/skillreaper
> ```
>
> ```bash
> go install github.com/thousandflowers/skillreaper/cmd/reap@latest
> ```

## If reap is too old

`--agent` needs reap ≥ 0.5.0. If it exits with
`flag provided but not defined: -agent`, say the installed build is too old and
give `brew upgrade skillreaper` (npm: `npm install -g skillreaper@latest`) - an
upgrade, never the install block above, which they have already done.

## Pruning

Never prune on your own initiative. `reap prune` is interactive and aborts when
it has no terminal, so calling it from here does nothing anyway.

If the user explicitly asks in this turn: get an unambiguous yes, run
`reap prune --yes`, and remind them of `reap restore --all`. If the request is
at all ambiguous, hand them the plain `reap prune` command instead.

For the per-category breakdown, point them at `/skillreaper:gap`.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…