Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add Abilityai/abilities/plugin install create-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/abilityai/abilities/custom)<a href="https://agentmods.dev/skills/abilityai/abilities/custom"><img src="https://agentmods.dev/badge/skills/abilityai/abilities/custom/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/abilityai/abilities/custom"><img src="https://agentmods.dev/badge/skills/abilityai/abilities/custom.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.17556 |
| Opus 5.5 | $0.00014 | $0.07022 |
| Sonnet 5.5 | $0.00007 | $0.03511 |
| Haiku 4.5 | $0.00004 | $0.01756 |
Grade C, and why
create-agent scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads MCP configurationmediumAgent snooping
mcp.json carries server URLs and auth tokens; reading it lets a mod discover and abuse other integrations.
- "1.8: Platform-truth refresh (Trinity dev 88a4e2f7) — report payload cap corrected 256 KB → 5 MiB (object only), display_hint gains `json` and now drives the customer-facing Workspace Reports tab, and list_reports/get_ Enumerates other installed skillsmediumAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
find .claude/skills -name SKILL.md 2>/dev/null How it starts
The opening of the file, as written. The whole thing — 1,371 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create Agent
ℹ️ First, set expectations: before anything else, print one short line with this skill's version and its most recent change — the top entry of
metadata.changelogabove — e.g.create-agent vX.Y — recent: <summary>. Then proceed.
Scaffold a complete Claude Code agent from scratch. The agent will be Trinity-compatible and ready for development with playbook-based skill creation.
HEADLESS MODE (read first)
You are headless when the AskUserQuestion tool is not available — typically when this wizard runs inside a deployed Trinity agent (a builder agent) rather than a person's Claude Code session. Interactive sessions ignore this section entirely.
In headless mode every AskUserQuestion below is replaced by these rules:
- The brief is the answer. Take purpose, name, destination, skills, plugins, credentials and schedules from the argument. Destination defaults to
~/builds/[agent-name]; plugins default toagent-dev+trinity. - Decorative choices take the default silently — the avatar prompt, widget layout, wording. Never ask about them.
- Real gaps go out as ONE ask, never as guesses. A real gap is something the generated agent cannot work without and the brief does not say: the data sources it watches, the accounts it posts to, a currency or locale, an external system's name. Collect every gap first, then raise a single
mcp__trinity__ask_operator—request_id: "create-agent:[agent-name]:gaps",type: "question",title: "[Agent Display Name] — N details needed before I build it",question: the numbered gaps, each with the default you would use. Write~/builds/[agent-name].pending.md(the brief + the request_id + the gap list), report that you are waiting on the ask, and end the turn. On the next invocation for the same agent, read the pending file andmcp__trinity__get_my_ask(request_id): answered → merge the answers and continue from Step 2; cancelled or dismissed → stop and say so (do not raise the same ask again); expired → continue with the stated defaults and list them as assumptions in the Completion summary. Keep the title ≤120 characters and the question ≤4,000 (longer is refused); the gaps are one decision — "confirm or correct these defaults" — never a list of unrelated approvals. Never writeREPLACE-MEplaceholders for a gap you could have asked about. - One approval before anything leaves the workspace. The Step 6 "present each skill outline" gate and the Step 13/14 questions fold into a single approval ask at the end — see Step 14 → Headless. Nothing is pushed or created before it is approved.
- Schedules stay declared
enabled: false(the default below). The created agent is non-production until a person reviews it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +2 lines 5bd2a69a3941
- 14d ago Changed · +27 lines 4235f130993b
- 16d ago Changed scan D → C e1d364c7bb52
- 24d ago Changed · +37 lines f4cac117b77e
- 1mo ago Changed · +3 lines c4000eb4158f
- 1mo ago First seen · 1,302 lines · 36 tokens per session scan D 8b83c3a0d095
create-agent is a skill published in the GitHub repository Abilityai/abilities (12 stars, last pushed 3d ago), licensed MIT. It adds 36 tokens to every session and 17,556 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it C with 2 findings (reads mcp configuration, enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…