Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ccfos/nightingale/skill-creatornpx skills add ccfos/nightingale --skill skill-creatorgit clone --depth 1 https://github.com/ccfos/nightingaleWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ccfos/nightingale/skill-creator)<a href="https://agentmods.dev/skills/ccfos/nightingale/skill-creator"><img src="https://agentmods.dev/badge/skills/ccfos/nightingale/skill-creator.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00110 | $0.04295 |
| Opus 5 | $0.00055 | $0.02148 |
| Sonnet 5 | $0.00022 | $0.00859 |
| Haiku 4.5 | $0.00011 | $0.00430 |
Grade C, and why
skill-creator scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
Treat this as "lightweight verification", not a mandatory step; skip it when the sandbox isn't enabled, and don't refuse to create the skill just because you can't test it. Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Network: open by default, but governed.** By default (server-side `Egress=open`) the script **can access the network** —— the platform automatically injects `HTTP(S)_PROXY`, and standard HTTP clients (Python `request How it starts
The opening of the file, as written. The whole thing — 166 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill: Nightingale (N9E) Skill Authoring Assistant
Help the user create and improve their own AI skills directly in the conversation. A skill is a single SKILL.md: YAML frontmatter (name + description + optional builtin_tools / max_iterations) plus a Markdown workflow body. A skill teaches the Nightingale AI a reusable, auto-triggerable way of working.
Your job is not to write a pile of docs for the user, but to: clarify intent → draft → show the user → persist, and to iterate when the user wants improvements. Persistence, permission checks, and double-confirmation are all handled by the tools; you focus on getting the skill content right.
Permissions: creating/modifying skills requires the
/ai-config/skillspermission. Ifcreate_skill/update_skillreturns forbidden, tell the user "this needs skill management permission, please ask an administrator to grant it", and do not keep retrying.
1. The two kinds of skills (decide which path first)
| Kind | What it is | Typical scenarios | How to persist |
|---|---|---|---|
| Knowledge/workflow | Only a SKILL.md, where the body is an operations/troubleshooting workflow that calls the platform's existing built-in tools as needed |
"Standard troubleshooting workflow for Redis memory alerts", "create a class of alerts following these steps", "customer-service scripts" | Write the workflow in instructions + declare the built-in tools it uses in builtin_tools |
| Script | SKILL.md + main.py / main.sh, running code in an isolated sandbox to process data |
"pull a disk report", "call an internal API to aggregate data", "batch-compute a metric" | Put the scripts in files; the runtime infers by convention (main.py→python, main.sh→bash) |
How to decide: one question is enough —— "Does this skill teach the AI to do something by following a workflow using existing features, or does it need to actually run a script/code to process data?" Most ops scenarios are the former (knowledge/workflow).
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 166 lines · 110 tokens per session scan C 8c7a60613916
skill-creator is a skill published in the GitHub repository ccfos/nightingale (13,276 stars, last pushed yesterday), licensed Apache-2.0. It adds 110 tokens to every session and 4,295 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it C with 2 findings (tells the agent never to refuse, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cis-aws-database-10.8
Ensure Monitoring and Alerting is Enabled.
frontend-dashboard
Use this skill when editing the embedded dashboard frontend in this repository. It focuses on preserving the single-file embedded SPA model, keeping the UI lightweight, and avoiding unnecessary frontend tooling or dependencies.
embedded-captions
Add captions to a talking-head video. ONE catalog (CATALOG.md) of 32 visual identities behind two engines: column-flow (captions composited INTO the scene — matte occlusion + mix-blend; cream/ink/editorial/keynote/documentary/loud/neon/glitch/chrome/velocity) and themed constitutions…
atai-operational-state-monitoring-agent
Run Archetype AI's managed Operational State Monitoring (OSM) agent over the Agents API — upload a sensor CSV, resolve a maintained pre-packaged "OSM Quick Start" bundle (classifier + windowing already pinned), run it, poll status + audit events, download the per-window state predictions. Use when the user wants…
atai-rare-event-detection-agent
Run Archetype AI's managed Rare Event Detection (RED) agent over the Agents API — upload a sensor CSV, resolve the pre-packaged "RED Quick Start" bundle by name (its nearest-prototype classifier and windowing are already pinned), run it, poll status + audit events, download per-window event predictions. Use when the…
Alerting & Monitoring Testing
Testing monitoring and alerting configurations including threshold validation, alert routing, escalation policies, and false-positive rate monitoring.