Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ailiheizi/workflow-to-skill --skill workflow-to-skillgit clone --depth 1 https://github.com/ailiheizi/workflow-to-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ailiheizi/workflow-to-skill/workflow-to-skill)<a href="https://agentmods.dev/skills/ailiheizi/workflow-to-skill/workflow-to-skill"><img src="https://agentmods.dev/badge/skills/ailiheizi/workflow-to-skill/workflow-to-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ailiheizi/workflow-to-skill/workflow-to-skill"><img src="https://agentmods.dev/badge/skills/ailiheizi/workflow-to-skill/workflow-to-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00104 | $0.02012 |
| Opus 5 | $0.00052 | $0.01006 |
| Sonnet 5 | $0.00021 | $0.00402 |
| Haiku 4.5 | $0.00010 | $0.00201 |
Grade A, and why
workflow-to-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Workflow To Skill
Create one readable workflow Skill for one coherent reusable outcome. The
generated SKILL.md is an Agent-readable method, not a DAG, DSL, compiled
program, registry entry, or runtime.
The target Harness loads the Skill, runs the Agent, and invokes tools. Existing CLI, MCP, HTTP, API, Dify, n8n, ComfyUI, or other systems perform the real work. Do not implement an executor or copy an external workflow graph into the Skill.
Authoring Method
Adapt this reference flow to the task:
- Clarify the outcome, users, scope, inputs, outputs, side effects, completion criteria, target Harness, and representative success and failure cases.
- Inspect real Harness documentation and available capabilities. Confirm the semantic capability, exact binding, important parameters and results, credential binding names, external workflow identity or version, lifecycle states, and verification signals. Confirm how the target installs, discovers, reloads, and explicitly invokes Skills. Never guess these contracts.
- Present one concise proposal covering the goal, dependencies, inputs, recommended method, decision guidance, posture, recovery, evidence, and test approach. Label user-confirmed choices, proposed safe defaults, and unresolved material decisions.
- Ask for review only where a choice could materially change the goal, target, scope, cost, authority, side effects, or success criteria. Harmless formatting and low-risk defaults may remain Agent judgment.
- Write or update the candidate
SKILL.mdafter material decisions are confirmed or covered by an explicit unattended policy. Otherwise return an incomplete proposal and state what prevents finalization. - Re-read and structurally validate the candidate. When authorized, install it through the Harness's existing mechanism, confirm the intended candidate was discovered rather than a stale or conflicting copy, and explicitly invoke it through the ordinary Skill path.
- Exercise a safe representative success case and material stop or failure cases that can be tested without disproportionate risk. Separate observed behavior from untested dependencies and lifecycle claims.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 206 lines · 104 tokens per session scan A e991fe3c3e91
workflow-to-skill is a skill published in the GitHub repository ailiheizi/workflow-to-skill (2 stars, last pushed 16d ago), licensed Apache-2.0. It adds 104 tokens to every session and 2,012 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
desktop-subagent-connector
Securely coordinate a remote sandbox with a user-approved local desktop through scoped file, shell, browser, and GUI access. Use for: remote sandbox, user-approved desktop, local desktop bridge, scoped desktop access.
agent-reach-wrapper
Thin wrapper around Panniantong/Agent-Reach for live web, YouTube transcripts, RSS, GitHub, Bilibili, Exa search, and optional login-state platforms (X, Reddit, Facebook, Instagram, Xiaohongshu, LinkedIn). Triggered by agent-reach, reach this URL, YouTube transcript, Reddit thread, Bilibili, Xiaohongshu, RSS feed, or…
drive-github-skill-audit
Compare Google Drive skill definitions with a GitHub skills repository and identify Drive skills not yet published. Use for: audit Drive skills, compare Drive and GitHub SKILL.md files, find unpublished skills, skill-library inventory.
skill-rubric-reviewer
Reviews SKILL.md files against a 10-dimension quality rubric inspired by the Agent Skills specification. Use for: review skill, skill rubric, audit SKILL.md, score skill quality.
hitl-approver
Pauses high-risk actions for explicit human approval. Use for: approve this, hitl check, human review needed, confirm before send.
whatsapp-message-rater
Rates WhatsApp messages for sentiment, urgency, and spam likelihood. Use for: rate this WhatsApp, analyze chat sentiment, score message urgency, whatsapp-auto-responder.