Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/cloudchef/atlasclaw-providers/component-script-designernpx skills add CloudChef/atlasclaw-providers --skill component-script-designergit clone --depth 1 https://github.com/CloudChef/atlasclaw-providersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cloudchef/atlasclaw-providers/component-script-designer)<a href="https://agentmods.dev/skills/cloudchef/atlasclaw-providers/component-script-designer"><img src="https://agentmods.dev/badge/skills/cloudchef/atlasclaw-providers/component-script-designer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00041 | $0.00699 |
| Opus 5 | $0.00020 | $0.00349 |
| Sonnet 5 | $0.00008 | $0.00140 |
| Haiku 4.5 | $0.00004 | $0.00070 |
Grade A, and why
component-script-designer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
component-script-designer
Read one file from the current saved component and produce a complete replacement for manual copying.
Workflow
- Call
smartcmp_read_current_component_file. If several files are returned and the user did not identify one, ask for the exact listedfile_path; never guess. - Use
componentFamilyto select the matching rules inreferences/component-script-rules.md. - Apply only the requested change and preserve the selected file's entrypoints, parameters, return shape, runtime version, line-ending expectations, and unrelated logic.
- Return the exact file path and the complete updated file in one fenced block. Never return only a diff, partial snippet, or ellipsis placeholder.
- State that the output is for manual review and copying into CMP. Do not claim that the component was saved, published, upgraded, or deployed.
Type Routing
exporter: Prometheus exporter and monitoring-agent components.integration:resource.integration.*.software:resource.software.*.resource:resource.iaas.*,resource.paas.*, andresource.caas.*.- Unknown families fail closed; do not apply a different component family's assumptions.
Safety
- No component write, publish, upgrade, import, export, or execution APIs.
- Do not invent third-party endpoints, cloud SDK fields, runtime variables, or credentials.
- Read
references/component-script-rules.mdbefore producing component code.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 70 lines · 41 tokens per session scan A 8a2c3c178b52
component-script-designer is a skill published in the GitHub repository CloudChef/atlasclaw-providers (15 stars, last pushed today), licensed Apache-2.0. It adds 41 tokens to every session and 699 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
package-list
List all UPM packages installed in the Unity project — name, version, source, description. Optionally filter by source (registry, embedded, local, git, built-in, local tarball), by name/display/description substring, and by direct-dependency-only.
package-search
Search Unity's package registry plus locally installed packages (Git, local, embedded sources) by query string. Returns available versions and installation status. Online mode fetches exact matches from the live registry then supplements with cached substring matches.
frontend-dashboard
Use this skill when editing the embedded dashboard frontend in this repository. It focuses on preserving the single-file embedded SPA model, keeping the UI lightweight, and avoiding unnecessary frontend tooling or dependencies.
xiaoai-tts
Control Xiaoai speaker via OpenXiaoAI Voice API for high-quality TTS playback. Use when the user wants to play voice notifications, announcements, or TTS through the Xiaoai speaker using the OpenXiaoAI HTTP API. Supports Doubao (ByteDance) TTS with emotions, voice types, and speed control. Triggers on queries like…
reflectworld
You have access to ReflectWorld, a visual perception and persistent memory system. It gives you eyes and memory for cameras.
reflectworld-vision-controller
VisionController dynamically adjusts camera sampling and analysis parameters based on perception results. Two policies.