Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add christian289/dotnet-with-claudecode --skill make-wpf-custom-controlgit clone --depth 1 https://github.com/christian289/dotnet-with-claudecodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/christian289/dotnet-with-claudecode/make-wpf-custom-control)<a href="https://agentmods.dev/skills/christian289/dotnet-with-claudecode/make-wpf-custom-control"><img src="https://agentmods.dev/badge/skills/christian289/dotnet-with-claudecode/make-wpf-custom-control.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 260 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 299 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 374 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.03291 |
| Opus 5 | $0.00030 | $0.01646 |
| Sonnet 5 | $0.00012 | $0.00658 |
| Haiku 4.5 | $0.00006 | $0.00329 |
Grade A, and why
make-wpf-custom-control scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 425 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WPF CustomControl Generation
If $0 is empty, use the AskUserQuestion tool to ask: "Enter the CustomControl name (e.g., CircularProgress, RangeSlider)". Do NOT proceed until a valid name is provided. Use the response as the ControlName for all subsequent steps.
Generate a $0 CustomControl.
- Replace
{BaseClass}with the appropriate WPF base class (e.g., Control, Button, ContentControl, ItemsControl) based on the control name and context. - Replace
{Namespace}with the project's root namespace detected from csproj or existing code. - If the host project follows a non-default style convention (e.g. block-scoped namespaces, custom usings), conform to it.
Workflow
Step 1: Validate Input
$0must be PascalCase- Determine the best BaseClass based on
$0name and intended usage
Step 2: Generate C# Class File
Create $0.cs:
using System.Windows;
using System.Windows.Controls;
using System.Windows.Input;
using System.Windows.Media.Animation;
namespace {Namespace}.Controls;
/// <summary>
/// $0 - Custom WPF control based on {BaseClass}.
/// </summary>
[TemplatePart(Name = TemplateParts.Root, Type = typeof(Border))]
[TemplateVisualState(GroupName = VisualStates.CommonStates, Name = VisualStates.Normal)]
[TemplateVisualState(GroupName = VisualStates.CommonStates, Name = VisualStates.MouseOver)]
[TemplateVisualState(GroupName = VisualStates.CommonStates, Name = VisualStates.Pressed)]
[TemplateVisualState(GroupName = VisualStates.CommonStates, Name = VisualStates.Disabled)]
public class $0 : {BaseClass}
{
// Single source of truth for Template Part names.
// XAML <Border x:Name="…"> literals MUST match these constants.
private static class TemplateParts
{
public const string Root = "PART_Root";
}
// Single source of truth for VSM group/state names.
// XAML <VisualStateGroup x:Name="…"> / <VisualState x:Name="…"> literals
// MUST match these constants exactly. The compiler will not catch a mismatch
// and runtime GoToState will return false silently.
private static class VisualStates
{
public const string CommonStates = "CommonStates";
public const string Normal = "Normal";
public const string MouseOver = "MouseOver";
public const string Pressed = "Pressed";
public const string Disabled = "Disabled";
}
#region Constructors
static $0()
{
DefaultStyleKeyProperty.OverrideMetadata(
typeof($0),
new FrameworkPropertyMetadata(typeof($0)));
}
public $0()
{
// IsEnabledChanged is an EVENT — there is no OnIsEnabledChanged to
// override (Control/UIElement exposes no such virtual). Subscribe here.
IsEnabledChanged += (_, _) => UpdateVisualState(true);
}
#endregion
#region Dependency Properties
/// <summary>
/// Example dependency property.
/// </summary>
public static readonly DependencyProperty ValueProperty =
DependencyProperty.Register(
nameof(Value),
typeof(int),
typeof($0),
new FrameworkPropertyMetadata(
defaultValue: 0,
flags: FrameworkPropertyMetadataOptions.AffectsRender,
propertyChangedCallback: OnValueChanged,
coerceValueCallback: CoerceValue));
public int Value
{
get => (int)GetValue(ValueProperty);
set => SetValue(ValueProperty, value);
}
private static void OnValueChanged(DependencyObject d, DependencyPropertyChangedEventArgs e)
{
if (d is $0 control)
{
control.OnValueChanged((int)e.OldValue, (int)e.NewValue);
}
}
protected virtual void OnValueChanged(int oldValue, int newValue)
{
// Handle property change
}
// Multi-constraint coerce: relational constraints first, hard domain LAST.
// See authoring-wpf-controls §4 "Multi-Constraint Coerce Ordering".
private static object CoerceValue(DependencyObject d, object baseValue)
{
var control = ($0)d;
var v = (int)baseValue;
// (Add any relational constraints that depend on other properties first.)
// Hard domain clamp LAST so transient cross-property states cannot leak
// a value outside the legal domain.
v = Math.Clamp(v, 0, 100);
return v;
}
#endregion
#region Read-only Dependency Property (optional)
// Read-only DPs expose internal state for binding while preventing external writes.
// Replace with your real read-only property or remove this region.
private static readonly DependencyPropertyKey IsBusyPropertyKey =
DependencyProperty.RegisterReadOnly(
nameof(IsBusy),
typeof(bool),
typeof($0),
new PropertyMetadata(false));
public static readonly DependencyProperty IsBusyProperty = IsBusyPropertyKey.DependencyProperty;
public bool IsBusy
{
get => (bool)GetValue(IsBusyProperty);
private set => SetValue(IsBusyPropertyKey, value);
}
#endregion
#region Routed Event (optional)
// Replace with your real routed event or remove this region.
public static readonly RoutedEvent ValueChangedEvent =
EventManager.RegisterRoutedEvent(
nameof(ValueChanged),
RoutingStrategy.Bubble,
typeof(RoutedPropertyChangedEventHandler<int>),
typeof($0));
public event RoutedPropertyChangedEventHandler<int> ValueChanged
{
add => AddHandler(ValueChangedEvent, value);
remove => RemoveHandler(ValueChangedEvent, value);
}
protected virtual void OnValueChanged(RoutedPropertyChangedEventArgs<int> e)
=> RaiseEvent(e);
#endregion
#region Template Parts
private Border? _partRoot;
private bool _isPressed;
public override void OnApplyTemplate()
{
base.OnApplyTemplate();
// OnApplyTemplate fires BEFORE Loaded. Avoid duplicating init logic in both —
// do template-binding setup here, and only do Loaded-time work in Loaded.
_partRoot = GetTemplateChild(TemplateParts.Root) as Border;
// Template-Part tolerance: if PART_Root is missing, disable only the
// feature that depends on it. Do NOT throw — see authoring-wpf-controls §3.1.
if (_partRoot is null)
{
// Optional: log a designer-only warning here if you want.
}
UpdateVisualState(false);
}
#endregion
#region Visual States
private void UpdateVisualState(bool useTransitions)
{
// States declared via [TemplateVisualState] MUST be reachable here,
// otherwise the attribute is a documentation lie and the state never fires.
string state =
!IsEnabled ? VisualStates.Disabled :
_isPressed ? VisualStates.Pressed :
IsMouseOver ? VisualStates.MouseOver :
VisualStates.Normal;
VisualStateManager.GoToState(this, state, useTransitions);
}
protected override void OnMouseEnter(MouseEventArgs e)
{
base.OnMouseEnter(e);
UpdateVisualState(true);
}
protected override void OnMouseLeave(MouseEventArgs e)
{
base.OnMouseLeave(e);
UpdateVisualState(true);
}
protected override void OnMouseLeftButtonDown(MouseButtonEventArgs e)
{
base.OnMouseLeftButtonDown(e);
_isPressed = true;
UpdateVisualState(true);
}
protected override void OnMouseLeftButtonUp(MouseButtonEventArgs e)
{
base.OnMouseLeftButtonUp(e);
_isPressed = false;
UpdateVisualState(true);
}
// Note: IsEnabled changes are handled via the IsEnabledChanged event
// subscribed in the constructor (there is no OnIsEnabledChanged to override).
#endregion
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 425 lines · 60 tokens per session scan A 29dd49a8fd27
make-wpf-custom-control is a skill published in the GitHub repository christian289/dotnet-with-claudecode (41 stars, last pushed 1mo ago), licensed MIT. It adds 60 tokens to every session and 3,291 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
mapsui
Use when embedding interactive 2D maps in .NET desktop (WinForms/WPF) or mobile (MAUI) applications — tile layers, vector features, map controls. Mapsui: cross-platform .NET map component library.
wpf
Build and modernize WPF applications on .NET with correct XAML, data binding, commands, threading, styling, and Windows desktop migration decisions. USE FOR: working on WPF UI, MVVM, binding, commands, or desktop modernization; migrating WPF from .NET Framework to .NET; integrating newer Windows capabilities into a…
sharpconsoleui
Use SharpConsoleUI to build full terminal (TUI) applications in .NET — equally suited to full-screen single-window apps and multi-window desktops with overlapping draggable windows — using a compositor, a DOM layout engine, and 40+ reactive controls (data tables, tree views, forms, an embedded PTY terminal, markdown…
mvvm
Implement the Model-View-ViewModel pattern in .NET applications with proper separation of concerns, data binding, commands, and testable ViewModels using MVVM Toolkit. USE FOR: implementing UI separation with Model-View-ViewModel; using MVVM Toolkit (CommunityToolkit.Mvvm) for ViewModels; designing testable UI…
blazor
Build and review Blazor applications across server, WebAssembly, web app, and hybrid scenarios with correct component design, state flow, rendering, and hosting choices. USE FOR: building interactive web UIs with C# instead of JavaScript; choosing between Server, WebAssembly, or Auto render modes; designing component…
winforms
Build, maintain, or modernize Windows Forms applications with practical guidance on designer-driven UI, event handling, data binding, MVP separation, and migration to modern .NET. USE FOR: working on Windows Forms UI, event-driven workflows, or classic LOB applications; migrating WinForms from .NET Framework to modern…