Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bam-bam-2/solo-skills --skill discord-remindergit clone --depth 1 https://github.com/bam-bam-2/solo-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bam-bam-2/solo-skills/discord-reminder)<a href="https://agentmods.dev/skills/bam-bam-2/solo-skills/discord-reminder"><img src="https://agentmods.dev/badge/skills/bam-bam-2/solo-skills/discord-reminder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bam-bam-2/solo-skills/discord-reminder"><img src="https://agentmods.dev/badge/skills/bam-bam-2/solo-skills/discord-reminder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 11 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 12 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 33 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 44 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 46 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 48 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00985 |
| Opus 5 | $0.00024 | $0.00492 |
| Sonnet 5 | $0.00010 | $0.00197 |
| Haiku 4.5 | $0.00005 | $0.00098 |
Grade A, and why
discord-reminder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 68 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Mac-mini Discord reminder
이 스킬이 시스템에 하는 일 (설치 전 확인)
- 사용자 홈에 실행 스크립트 하나(
~/Projects/<프로젝트>/<slug>.sh, mode 700)를 만듭니다.- macOS launchd 항목 하나(
~/Library/LaunchAgents/com.bambam.reminder-<slug>.plist)를 등록합니다.- 일회성 리마인더는 발송 직후 스스로 launchd에서 내려가고 plist를 지웁니다. 상주하지 않습니다.
- 반복 리마인더는 사용자가 지운 시점까지 유지됩니다. 목록은
launchctl list | grep reminder로 확인합니다.- 디스코드 토큰은 실행 시점에
.env에서만 읽고 출력하지 않습니다.보안 스캐너는 이 동작을
service_persistence(영구 서비스 설치)로 분류합니다. 맞습니다. 다만 일회성 항목은 스스로 제거되고, 만드는 파일은 위 두 개뿐입니다.
Use the remote-host instead of Aside routine slots for scheduled reminders.
- Resolve relative dates in Asia/Seoul and choose a concrete KST time. If the user gives no time, use 10:00 KST and state it.
- Store the executable script at
~/Projects/<프로젝트>/<slug>.shonremote-hostwith mode700. - Load Discord credentials only at runtime from
~/Projects/<프로젝트>/discord_bot/.env. Never print or copy token values. - Send the DM through Discord API v10 to
BAMBAM_USER_ID. Include a non-emptyUser-Agentheader to avoid Cloudflare blocking. - Store the LaunchAgent at
~/Library/LaunchAgents/com.bambam.reminder-<slug>.plist.- One-time reminder: use
StartCalendarIntervalwithYear,Month,Day,Hour, andMinute. - Recurring reminder: use only the requested recurring calendar fields.
- Never use
StartIntervalon this remote-host. Verified 2026-08-16: everyStartIntervalLaunchAgent in thegui/501domain sits atpended nondemand spawn = intervaland does not fire, including one that had previously run 2,429 times.StartCalendarIntervaljobs fire normally. For an every-N-minutes job, list the minutes explicitly, e.g.[{Minute: 0}, {Minute: 5}, ... {Minute: 55}]for a 5-minute cadence.
- One-time reminder: use
- Write stdout and stderr to
~/Projects/<프로젝트>/<slug>.log. - Validate and load without firing the reminder immediately:
plutil -lint <plist>launchctl bootout gui/$(id -u)/<label>if an old copy existslaunchctl bootstrap gui/$(id -u) <plist>launchctl print gui/$(id -u)/<label>plutil -p <plist>to verify the exact schedule
- Confirm it actually fires.
launchctl printshowing the job loaded is not proof — watchrunsincrement across two scheduled ticks, or check the job's own log for two consecutive scheduled entries. A job can load cleanly and never spawn. - Do not test-send a real DM unless the user asks. Report the resolved date, time, timezone, delivery channel, and loaded label.
Use concise reminder text that says what happened, what the user should do next, and any account or product distinction needed to avoid a wrong action.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +19 lines 9844561296b5
- 13d ago First seen · 49 lines · 48 tokens per session scan A 188349477f3e
discord-reminder is a skill published in the GitHub repository bam-bam-2/solo-skills (363 stars, last pushed 9d ago), licensed MIT. It adds 48 tokens to every session and 985 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gws-gmail
Gmail: Send, read, and manage email.
recipe-block-focus-time
Create recurring focus time blocks on Google Calendar to protect deep work hours.
recipe-create-vacation-responder
Enable a Gmail out-of-office auto-reply with a custom message and date range.
recipe-save-email-attachments
Find Gmail messages with attachments and save them to a Google Drive folder.
happiness-skill
A Chinese-language guide to happiness based on reducing unmet wants, focusing on the present, and treating happiness as a trainable skill.
post-build-flow
Handles workflow verification and setup after build-workflow succeeds, or when the message contains workflow-verification-follow-up or workflow-setup-required. Load after direct builds, when verificationReadiness requires action, or on orchestrator verify/setup follow-up turns.