Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add baodq97/open-plugin --skill cio-playbookgit clone --depth 1 https://github.com/baodq97/open-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/baodq97/open-plugin/cio-playbook)<a href="https://agentmods.dev/skills/baodq97/open-plugin/cio-playbook"><img src="https://agentmods.dev/badge/skills/baodq97/open-plugin/cio-playbook/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/baodq97/open-plugin/cio-playbook"><img src="https://agentmods.dev/badge/skills/baodq97/open-plugin/cio-playbook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00186 | $0.01916 |
| Opus 5.5 | $0.00074 | $0.00766 |
| Sonnet 5.5 | $0.00037 | $0.00383 |
| Haiku 4.5 | $0.00019 | $0.00192 |
Grade A, and why
cio-playbook scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 190 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CIO Playbook v1.0
Guides IT Directors and Heads of IT through IT Leadership tasks using the SFIA 9 framework. Combines a phase-based workflow with inline coaching to build CIO competency from SFIA level 6 (Initiate, influence) toward level 7.
Core Principles
- Hybrid guidance — Walk through CIO phases together, not just instruct. Recommend frameworks, draft artifacts collaboratively, and help complete the task.
- SFIA-mapped coaching — Every activity maps to a SFIA skill and level. Inline coaching explains what skill is being practiced and how to level up.
- Flexible phases — 5 phases provide structure, but skip or jump as context demands. No forced quality gates.
- Artifacts over theory — Each phase produces concrete deliverables (IT strategy documents, governance frameworks, transformation plans), not just checklists.
- Strategic enablement — IT strategy enables business strategy, not the other way around. IT capabilities must align with and accelerate business objectives.
- CIO does not own the business strategy — CIO ensures IT capability aligns with business objectives set by the executive team. The CIO translates business strategy into IT strategy, not the reverse.
CIO Workflow — 5 Phases
| # | Phase | Purpose | Key SFIA Skills | Key Artifacts |
|---|---|---|---|---|
| 1 | Discover | Assess current IT landscape, business alignment, pain points | IRMG, SLMO, RLMT | IT landscape assessment, Business-IT alignment analysis, Stakeholder map, Pain point register |
| 2 | Strategize | Define IT vision, strategy, investment priorities | ITSP, STPL, FMIT, DEMM | IT strategy document, Investment portfolio, Technology roadmap, Capability gap analysis |
| 3 | Govern | Establish governance frameworks, policies, compliance | GOVN, BURM, QUMG, SUPP | IT governance framework, Risk management plan, Quality standards, Vendor management strategy, Policy catalog |
| 4 | Transform | Drive transformation initiatives, manage change | ISCO, ITMG, OCDV, DLMG | Transformation program plan, Change management strategy, Operating model design, Capability development plan |
| 5 | Sustain | Monitor performance, optimize operations, continuous improvement | SLMO, ITMG, SLEN | IT performance dashboard, Service improvement plan, Operational excellence report, Annual IT review |
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 190 lines · 186 tokens per session scan A 7384959e69a8
cio-playbook is a skill published in the GitHub repository baodq97/open-plugin (4 stars, last pushed 4mo ago), licensed MIT. It adds 186 tokens to every session and 1,916 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
metrics-dashboard
Define and design a product metrics dashboard with key metrics, data sources, visualization types, and alert thresholds. Use when creating a metrics dashboard, defining KPIs, setting up product analytics, or building a data monitoring plan.
brainstorm-okrs
Brainstorm team-level OKRs aligned with company objectives — qualitative objectives with measurable key results. Use when setting quarterly OKRs, aligning team goals with company strategy, drafting objectives, or learning how to write effective OKRs.
dummy-dataset
Generate realistic dummy datasets for testing with customizable columns, constraints, and output formats (CSV, JSON, SQL, Python script). Use when creating test data, building mock datasets, or generating sample data for development and demos.
pre-mortem
Run a pre-mortem risk analysis on a PRD or launch plan. Categorizes risks as Tigers (real problems), Paper Tigers (overblown concerns), and Elephants (unspoken worries), then classifies as launch-blocking, fast-follow, or track. Use when preparing for launch, stress-testing a product plan, or identifying what could go…
interview-script
Create a structured customer interview script with JTBD probing questions, warm-up, core exploration, and wrap-up sections. Follows The Mom Test principles — no leading questions, no pitching, focus on past behavior. Use when preparing for user interviews, creating interview guides, or planning discovery research.
ab-test-analysis
Analyze A/B test results with statistical significance, sample size validation, confidence intervals, and ship/extend/stop recommendations. Use when evaluating experiment results, checking if a test reached significance, interpreting split test data, or deciding whether to ship a variant.