Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ChenShuo2004/cs-skills --skill cs-ralph-runnergit clone --depth 1 https://github.com/ChenShuo2004/cs-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/chenshuo2004/cs-skills/cs-ralph-runner)<a href="https://agentmods.dev/skills/chenshuo2004/cs-skills/cs-ralph-runner"><img src="https://agentmods.dev/badge/skills/chenshuo2004/cs-skills/cs-ralph-runner/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/chenshuo2004/cs-skills/cs-ralph-runner"><img src="https://agentmods.dev/badge/skills/chenshuo2004/cs-skills/cs-ralph-runner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 67 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.00741 |
| Opus 5.5 | $0.00022 | $0.00296 |
| Sonnet 5.5 | $0.00011 | $0.00148 |
| Haiku 4.5 | $0.00005 | $0.00074 |
Grade A, and why
cs-ralph-runner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CS Ralph Runner
保留用户指定的 Ralph 工作流，完成需求转 PRD、项目预检和要求的执行。更强的模型不需要把每个普通开发请求都改造成循环代理。
输入与模式
需要实际 Markdown 需求和目标 Git 仓库；用户明确提供的路径优先。文档未指定时先检查会话与当前项目中明确对应的需求；仅有多个无法区分的候选才询问。未指定项目时使用当前 Git 仓库。别名仅在使用别名时读取 projects。
执行前读取 run policy，保留本地约定：默认 1 次迭代、no-commit、缺工具不自动全局安装、执行预告不要求确认。
- plan / dry-run：读取需求、生成独立 PRD 与 overview；不启动 build。不把 overview 失败时的猜测称作真实预览。
- no-commit build：真实执行任务，可以修改代码；--no-commit 只禁止提交。
- commit build：沿用当前会话对 Ralph 运行内提交的明确授权；不包含推送/部署。
只要必需输入与授权已具备就连续完成。用户说“运行并允许提交”本身已给提交授权，不重复询问。
执行
核对仓库、工作区、Ralph/Codex 版本和现有配置。按 CLI 工作流 生成有业务验收条件的 stories，按真实依赖划分，不为凑固定数量拆任务。
已有 PRD/配置先检查能否复用；生成新文件可用独立名称，不覆盖用户配置。工作区有改动时遵守 stopOnDirtyWorktree：不得在原脏目录直接运行构建。可创建隔离工作区；若任务依赖未提交内容，必须将其纳入隔离副本并核对，否则说明输入缺口。不要自动 stash/reset 用户工作。
保留宿主的审批、沙箱与工具策略，不写绕过它们的 AGENT_CMD。Windows 使用实际可用的 .cmd 和 Git Bash 路径；根据 help 核实当前参数，不猜安装路径。
运行前给简短预告：目标、模式、迭代数、命令和日志。执行日志保留完整文件，聊天只提供进展和重要失败；等待时保持用户可见进度。
验收与恢复
检查每次运行的 story、状态、产物、实际验证以及 Git 前后变化。no-commit 运行若产生提交，视为约束失败。overview、进程退出和代码验收分别记录，不等同。
达到本次迭代上限或关键条件失败时停止循环并交付诊断，不擅自增加迭代；恢复先检查已有运行 ID 与日志，避免重复执行完成的 story。报告 PRD、日志、修改与未通过的验收。
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 19d ago Changed · -260 lines · -20 tokens per session 422047cd9791
- 1mo ago First seen · 299 lines · 74 tokens per session scan A 90e4e4963808
cs-ralph-runner is a skill published in the GitHub repository ChenShuo2004/cs-skills (204 stars, last pushed 18d ago), licensed MIT. It adds 54 tokens to every session and 741 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
merge-batch
Prepare and merge an owner-selected PR batch with contributor credit and exact-candidate admission. Use for a pasted PR list; combined focused validation is diagnostic, and every actual landing still requires its applicable checks and authorization.
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
gh-auth-isolation
Safely manage multiple GitHub identities (EMU + personal) in agent workflows.
comet-github
A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.
github-skill
Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.
release-helper
Ensures configuration and code changes are released correctly. Use PROACTIVELY whenever you edit config.json, change any setting, or fix a configuration bug in this project, so the change reaches production.