Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add a-tokyo/aiworkspace --skill scaffold-skillgit clone --depth 1 https://github.com/a-tokyo/aiworkspaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/a-tokyo/aiworkspace/scaffold-skill)<a href="https://agentmods.dev/skills/a-tokyo/aiworkspace/scaffold-skill"><img src="https://agentmods.dev/badge/skills/a-tokyo/aiworkspace/scaffold-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/a-tokyo/aiworkspace/scaffold-skill"><img src="https://agentmods.dev/badge/skills/a-tokyo/aiworkspace/scaffold-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 6 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Agent Snooping · line 22 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.00708 |
| Opus 5 | $0.00032 | $0.00354 |
| Sonnet 5 | $0.00013 | $0.00142 |
| Haiku 4.5 | $0.00006 | $0.00071 |
Grade A, and why
scaffold-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Scaffold Skill
Creates new skills using the workspace script, which handles name validation, directory placement, and symlinking to all AI tool directories.
Workflow
1. Decide scope
Ask the user if unclear.
- Workspace-wide: stored in
root-config/.agents/skills/, symlinked to the workspace root so all projects and AI tools (.agents/skills/,.claude/skills/,skills/) can discover it. - Project-specific: stored in
<repo>/.agents/skills/, symlinked into that project's AI tool directories only.
2. Scaffold
Run from the workspace/ directory:
# Workspace-wide
npm run skills:create -- --name <skill-name>
# Project-specific
npm run skills:create -- --name <skill-name> --project <repo>
This validates the name, creates the directory with a template SKILL.md, and
runs setup to symlink the skill into .claude/skills/ and
skills/ so every AI tool can discover it.
Naming rules: lowercase letters, numbers, hyphens, underscores, and dots. Max 64 chars. Must start and end with a letter or number.
3. Write content
Do not write the SKILL.md content directly. Delegate to your IDE's skill-authoring guide for quality content and proper requirements gathering.
-
Search your available skills for one named
create-skill. Common locations:- Cursor:
~/.cursor/skills-cursor/create-skill/SKILL.md - Claude Code:
~/.claude/skills-cursor/create-skill/SKILL.md - Or check your available skills list for any skill with "create-skill" in the name or "skill" + "create" in the description.
- Cursor:
-
If found: Read it and follow its complete workflow from the start -- including any discovery or requirements-gathering phase (asking the user questions about purpose, triggers, format, etc.). Use the scaffolded
SKILL.mdas your starting point; the guide tells you how to fill it in. -
If not found: Edit the generated
SKILL.mddirectly:- Replace the placeholder
descriptionwith a specific, third-person description that includes both WHAT the skill does and WHEN to use it. - Replace the placeholder body with clear instructions and examples.
- Keep the file under 500 lines.
- Replace the placeholder
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 86 lines · 63 tokens per session scan A 5706950c97c1
scaffold-skill is a skill published in the GitHub repository a-tokyo/aiworkspace (19 stars, last pushed 20d ago), licensed Apache-2.0. It adds 63 tokens to every session and 708 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
agent-self-scheduling
Schedule AI agent runs with cron, loops, or external clocks while avoiding unsafe tight autonomous timers.
craque-neto
Faz análise de risco de projetos gritando a real, sem bajulação, no tom de voz do ex-jogador José Ferreira Neto, o 'Craque Neto', apresentador do 'Donos da Bola' (Band) e da 'Rádio Craque Neto'. A resposta é só a bronca do Neto: texto corrido de até 200 palavras, primeira pessoa, linguagem do povo, palavrão pesado…
gerador-soul
Gera um arquivo SOUL.md completo e estruturado para qualquer agente ou assistente de IA. Use esta skill SEMPRE que a pessoa usuária quiser criar um SOUL.md, definir a identidade de um agente, descrever a "alma" de um assistente, ou usar os gatilhos "/soul", "/soul.md" ou "gerar soul". Ative também quando a pessoa…
visual-review
Render a GitHub Pull Request diff as a self-contained HTML page where each changed hunk is annotated with a software-principle explanation and a suggested simplification. Use when the user wants to review a PR visually, generate an HTML/visual diff report, or see PR feedback linked to principles (e.g. an unnecessary…
triage-review
Fetch unresolved review comments on a GitHub PR (Copilot bot + human reviewers), verify each against the current code, and classify as Address / Skip / Optional / Discuss with a one-line rationale. Use when the user asks which review comments to address, to triage Copilot/reviewer feedback, sort signal from noise on a…
visual-validate
Validate UI changes in a real browser using Chrome DevTools or Playwright MCP. Takes screenshots, compares before/after, exercises interactions, captures console errors. Use when user asks to "visual validate", "/visual-validate", "check the UI", "screenshot before/after", or finishes a UI change. Don't use for unit…