huashu-skills is a catalogue of Agent Skills, which are reusable instruction packages that extend coding agents such as Claude Code, Codex, and Kimi Code for particular tasks. It organizes skills for design, research, document conversion, content creation, and other workflows, and includes machine-readable metadata and update checking. The catalogue entries are the skills and related tools that agents install and use.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add alchaincyf/huashu-skills --skill huashu-skill-updatergit clone --depth 1 https://github.com/alchaincyf/huashu-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alchaincyf/huashu-skills/huashu-skill-updater)<a href="https://agentmods.dev/skills/alchaincyf/huashu-skills/huashu-skill-updater"><img src="https://agentmods.dev/badge/skills/alchaincyf/huashu-skills/huashu-skill-updater/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/alchaincyf/huashu-skills/huashu-skill-updater"><img src="https://agentmods.dev/badge/skills/alchaincyf/huashu-skills/huashu-skill-updater.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.01078 |
| Opus 5.5 | $0.00023 | $0.00431 |
| Sonnet 5.5 | $0.00012 | $0.00216 |
| Haiku 4.5 | $0.00006 | $0.00108 |
Grade C, and why
huashu-skill-updater scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf ~/.claude/skills/<名字> && cp -r /tmp/huashu-skills-update/<名字> ~/.claude/skills/ How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
huashu-skill-updater — 花叔系 Skill 更新检查
花叔的 skill 都在持续迭代(修 bug、补方法论、加能力)。这个 skill 负责让用户装过的版本不掉队。
全量检查(首选)
python3 ~/.claude/skills/huashu-skill-updater/scripts/check_updates.py
脚本会扫描 skills 目录下所有花叔系 skill(识别标准:目录带 .git 且 origin 指向 alchaincyf,或存在 .huashu-skill-meta.json),输出「已最新 / 有更新 / 无法判断」三态报告。有更新时 exit code 为 1,方便接 cron。
怎么算「有新版本」:git 安装的 skill,比较 SKILL.md 开头 metadata.version 和远程仓库最大的 vX.Y.Z 标签。作者只在实质更新(新能力、行为变化、修 bug)时打标签,改错字、改 README 不打,所以不会因为小改动反复提醒。检查只读取远程标签,不下载文件、不上传数据。复制安装的 skill 没有版本号,仍按来源仓库的 commit 比较。
加 --mark-checked 会在联网成功后刷新各 skill 的检查日期(联网失败不刷新):
python3 ~/.claude/skills/huashu-skill-updater/scripts/check_updates.py --mark-checked
执行更新
- git 安装的 skill(独立仓库):
git -C ~/.claude/skills/<名字> pull --ff-only - 复制安装的 skill(huashu-skills 内置,或 dukou):重新 clone 来源仓库到临时目录,把对应子目录覆盖复制回去,然后更新
.huashu-skill-meta.json里的commit和installed_at:
git clone --depth 1 https://github.com/alchaincyf/huashu-skills.git /tmp/huashu-skills-update
rm -rf ~/.claude/skills/<名字> && cp -r /tmp/huashu-skills-update/<名字> ~/.claude/skills/
更新前如果用户对该 skill 做过本地改动(git status 有未提交修改,或复制安装的目录 mtime 晚于 installed_at),先提醒用户会被覆盖,让用户确认。
元数据约定
复制安装的 skill 必须在其目录里带一个 .huashu-skill-meta.json(安装它的 agent 负责写入):
{
"name": "huashu-slides",
"repo": "alchaincyf/huashu-skills",
"subdir": "huashu-slides",
"commit": "安装时来源仓库的 HEAD sha(git rev-parse HEAD)",
"installed_at": "YYYY-MM-DD",
"last_checked": "YYYY-MM-DD"
}
git clone 安装的 skill 不需要这个文件,.git 本身就是元数据。另外每个独立仓库 skill 的 SKILL.md 末尾自带「版本检查」段:agent 使用该 skill 时读目录里的 .last-update-check(一行日期加结果,如 2026-10-13 ok),上次成功不足 30 天、上次失败不足 7 天就跳过,到期才读一次远程版本标签;用户把内容改成 off 就永久不检查。check_updates.py --mark-checked 联网成功后会同时刷新这个文件,避免刚全量检查完又被单个 skill 重复提醒。
每月定期检查
推荐用户任选其一:
- 每月对 agent 说一句「检查花叔skill更新」
- 挂 cron,每月 1 号早上跑一次:
0 9 1 * * python3 ~/.claude/skills/huashu-skill-updater/scripts/check_updates.py --mark-checked
给 agent 的行为规则
- 触发本 skill 后先跑
check_updates.py,把报告翻译成人话给用户:哪些最新、哪些落后几个 commit、更新命令是什么。 - 不要不问就更新——列出有更新的 skill,让用户决定更新哪些(用户明确说「全部更新」除外)。
- 单个 skill 的到期检查由它自己的「版本检查」段负责,本 skill 不重复提醒。
- skills 目录不在
~/.claude/skills/时(项目级安装、其他 agent),用--skills-dir指定。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago Changed · +2 lines · -61 tokens per session 082e904e1158
- 1mo ago First seen · 70 lines · 119 tokens per session scan C 4cc5159a20b3
huashu-skill-updater is a skill published in the GitHub repository alchaincyf/huashu-skills (2,025 stars, last pushed yesterday), licensed MIT. It adds 58 tokens to every session and 1,078 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
claude-md-improver
Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report, then makes targeted updates. Also use when the user mentions "CLAUDE.md maintenance" or "project…
agent-platform-model-registry
Agent Platform Model Registry Management. Use when you need to upload, list, describe, update, or delete machine learning models (and their versions) in the Agent Platform Model Registry. Don't use for model training, model deployment to endpoints, or managing non-Agent Platform models.
gke-workload-security
Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (auditcluster.sh), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (gVisor), enforcing Pod…
gke-reliability
Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability, setting up PDBs, or configuring GKE health probes (liveness, readiness, startup). Don't use for generating K8s YAML manifests (use gke-manifest-generation) or disaster recovery…
google-cloud-solution-agentic-analytics-spark-knowledge-catalog
Discovers requirements and designs an end-to-end governed agentic analytics solution using Knowledge Catalog and Managed Service for Apache Spark (Lightning Engine). Use when designing data science and analytics workflows across structured and unstructured distributed data (including in S3, Azure Blob, AlloyDB, and…
glance-canonical-layouts
Use this skill to create home screen widgets using Jetpack Glance Canonical Layouts from the Android Platform Samples project, or when asked to implement standard widget layout patterns (including Check List, Image Grid, Snap Scrolling, and Standard Toolbar).