Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add asherzj/ashers-agent-skills --skill wizardgit clone --depth 1 https://github.com/asherzj/ashers-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/asherzj/ashers-agent-skills/wizard)<a href="https://agentmods.dev/skills/asherzj/ashers-agent-skills/wizard"><img src="https://agentmods.dev/badge/skills/asherzj/ashers-agent-skills/wizard.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.01156 |
| Opus 5 | $0.00037 | $0.00578 |
| Sonnet 5 | $0.00015 | $0.00231 |
| Haiku 4.5 | $0.00007 | $0.00116 |
Grade A, and why
wizard scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
向导(Wizard)
**向导(wizard)**是一个 bash 脚本,带领人类一步一步走完一套手动流程——这套流程亲手做很繁琐,每次向 AI 重新解释一遍也很繁琐。它打开每个 URL,精确说明点什么、复制什么,捕获各个值,把它们写到该去的地方(.env、GitHub secrets),在每个阶段确认,并显示还剩几个阶段。它可能配置第三方服务、执行一次性迁移,或把项目从一个状态转移到另一个状态。
令人愉悦的 UX 已由 template.sh 解决:逐阶段进度、确认门、跨平台打开 URL(包括 WSL)、隐藏式密钥输入、幂等的 .env upsert、gh secret/gh variable 写入,以及收尾摘要。你的工作只是划定流程范围并撰写各个阶段。STAGES 标记之上的库在每个向导中都完全相同;这种一致性正是关键:绝不要手改它。
向导默认是短命的:为单次运行而构建,保存到 scratch 或 scripts/ 路径,活儿干完就删。只有当用户想要一条应留在仓库中的可重复安装路径时才提交它。
流程
1. 划定流程范围
摸清人类必须执行的每个手动步骤,以及沿途要捕获的每个值。先读仓库,不要冷启动就发问:
- 安装类:
.env、.env.example、.env.*、README、docker-compose*、框架配置,以及.github/workflows/*(每一处secrets.*/vars.*引用都是向导必须产出的值)。 - 迁移或过渡类:当前状态、目标状态,以及两者之间的不可逆动作。
然后把排好序的阶段列表和每个阶段产出的值展示给用户,并确认:他们可能增删或重排。
**完成标准:**每个阶段都按顺序命名,且对每个被捕获的值你都清楚 (a) 人类从哪里获取它,(b) 它写到哪里(.env、GitHub secret、两者都写、或不落盘;有些阶段是纯动作),以及 (c) 它是机密(隐藏输入)还是公开的。
2. 勾画每个阶段的路径
对每个阶段,写下人类要走的精确路径:打开哪个 URL、在那里做什么、某个值显示在哪里、它填入哪个变量:例如「Dashboard → Developers → API keys → Reveal test key → copy」。凡是你并不真正知道当前 UI 或确切命令的地方,如实说明并询问用户或查阅文档:绝不编造可能不存在的步骤。
**完成标准:**每个阶段都能落成陌生人也能照做的具体指令。
3. 撰写向导
把 template.sh 复制到目标路径。用每步一个 stage 替换示例阶段,按依赖顺序排列。使用库中的辅助函数:stage、say/step、open_url、ask/ask_secret、write_env、set_secret/set_var、pause/confirm。把 TOTAL_STAGES 设为你所写阶段的数量。
守住模板定下的标准:先打开 URL 再索要它的值,凡机密一律用 ask_secret,每个要持久化的值都 write_env,set_secret 只写 CI 真正需要的值,任何不可逆动作前先 confirm。每个 stage 都会清屏,只显示当前步骤:让一个阶段只做一件专注的事,人类需要的信息就不会被滚走。不要动标记之上的库。
4. 验证并交接
bash -n <script>;如有shellcheck则运行它。chmod +x <script>。- 不要自己从头到尾运行它:它会打开浏览器并阻塞等待人类输入。改为静态走查:第 1 步中的每个值都被捕获并落到第 1 步所说的位置,且每个
set_secret名称与 CI 中的secrets.*引用精确匹配。 - 告诉用户如何运行。如果它是一条可重复的安装路径,就提交它并从 README 链过去,让下一个人直接跑脚本,而不是去问 AI。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 45 lines · 74 tokens per session scan A 94c1dee5e1ba
wizard is a skill published in the GitHub repository asherzj/ashers-agent-skills (2 stars, last pushed 10d ago), licensed MIT. It adds 74 tokens to every session and 1,156 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
next-cache-components-optimizer
Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…
next-partial-prefetching-adoption
Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…