Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/aipoch/open-science/customizenpx skills add aipoch/open-science --skill customizegit clone --depth 1 https://github.com/aipoch/open-scienceWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.02356 |
| Opus 5 | $0.00028 | $0.01178 |
| Sonnet 5 | $0.00011 | $0.00471 |
| Haiku 4.5 | $0.00006 | $0.00236 |
Grade A, and why
customize scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 212 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Customize
This Skill routes conversational customization to one of two native composers. It is not a security boundary: it helps the user draft, review, confirm, and report changes, while the application decides whether a destructive or identity-affecting operation actually takes effect.
Important: this is a framework Skill, not hard isolation. Do not claim that this Skill provides hard security isolation; it is workflow guidance only.
Route first
- For creating, revising, publishing, inspecting, or deleting a Skill, call
host.skills.read('skill-creator')and follow that internal Skill completely. Do not duplicate its authoring workflow here. - For creating or managing a Specialist, follow the Specialist workflow below.
- For a combined request, create or revise the Skill first. After publish and read-back, attach it to the selected Specialist only when the user requested that relationship.
Do not create a plan record for Specialist or Skill CRUD. Ask only about choices that materially change behavior, access, or safety. Skills and Specialists are application-managed resources, not Artifacts.
Specialist runtime
The Skill runs in the JavaScript control-plane REPL only. It uses JavaScript exclusively. Do not
use Python or R here, and do not look for host.agents or host.skills in a data kernel — they are
absent there. Specialist mutation happens through host.agents.*; Skill lifecycle work is delegated
to the internal Skill Creator above.
The Skill never uses the following, and you must not invent them:
- Do not use a Customize Specialist/Profile (there is no such profile).
- Do not use a management MCP tool, and do not route
host.agentsthroughhost.mcp(). - Do not create per-Specialist environments.
- Do not perform duplicate operations (no duplicate Specialist or duplicate operation).
- Do not automatically retry declined or stale privileged operations.
The host.agents SDK surface
The SDK is name-first and lives in the trusted calling session. JavaScript methods, inputs, and returned records all use camelCase. Methods:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 212 lines · 56 tokens per session scan A 729e03c353ff
customize is a skill published in the GitHub repository aipoch/open-science (3,307 stars, last pushed yesterday), licensed Apache-2.0. It adds 56 tokens to every session and 2,356 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
conventions
Calkit conventions and foundational context. Load whenever working in a Calkit project—defines calkit.yaml structure, environments, pipeline stages, CLI commands, and version control conventions.
create-pipeline
Convert an existing repo with ad hoc scripts into a fully reproducible Calkit pipeline. Use when the user invokes /calkit:create-pipeline or asks to make a project reproducible end-to-end.
check-reproducibility
Check whether a project is fully traceable, and fix what isn't, including numbers typed into a manuscript that no pipeline output accounts for. Use when the user invokes /calkit:check-reproducibility, asks whether a project is reproducible, or asks where a number in a paper came from.
clinical-q-and-a
快速回答普通教育性医学问题与常见误区。默认用一份国内现行权威指南/共识完成轻量核验并立即作答；不用于个体诊疗、处方剂量、精确推荐定位、药品高风险事实、医保监管或跨版本比较。.
doctor-registration
当医生提供或更新称谓、地区、医院、科室、职称这5项登记信息，变更科室/地区/职称，或要求停用、删除订阅数据时使用。本技能只管登记的写入/更新/清除；登记完成后的订阅任务创建由 subscription-setup skill 负责。不启用诊断、治疗、疾病SOP、急诊行动卡、个体患者建议、药物剂量、HIS决策支持或医保报销结论能力。.
insurance-policy-learning
为基层医生学习小助手生成地区医保政策学习内容。支持每周二、周五或按需的最新变化摘要，也支持近一年／指定区间的重点政策回顾学习。只输出政策原文摘要、待本地确认事项和权威信源，不输出报销结论、支付比例、HIS提醒、病历要求或医院执行承诺。.