Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/craftos-dev/craftbot/craftbot-skill-creatornpx skills add CraftOS-dev/CraftBot --skill craftbot-skill-creatorgit clone --depth 1 https://github.com/CraftOS-dev/CraftBotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/craftos-dev/craftbot/craftbot-skill-creator)<a href="https://agentmods.dev/skills/craftos-dev/craftbot/craftbot-skill-creator"><img src="https://agentmods.dev/badge/skills/craftos-dev/craftbot/craftbot-skill-creator.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00083 | $0.03963 |
| Opus 5 | $0.00042 | $0.01982 |
| Sonnet 5 | $0.00017 | $0.00793 |
| Haiku 4.5 | $0.00008 | $0.00396 |
Grade A, and why
craftbot-skill-creator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CraftBot Skill Creator
Author a reusable skill from one completed task. The handler that spawned this task already gathered everything you need into a single markdown file — read it, generalise it, write the new skill, send the user a one-message summary, end the task. The handler has already posted "Creating skill <name>…" in chat for you, so do not duplicate that message. Your only chat message is the final presentation right before end_turn. Do not iterate with test cases. Do not run subagents.
What you receive
Your task instruction contains five lines (the two paths are absolute — pass them verbatim to read_file / write_file, do NOT prepend or modify any prefix):
Source file (read this — absolute path, use verbatim): <absolute path to SKILL_SOURCE_<id>.md>
Target file (write the new SKILL.md here — absolute path, use verbatim): <absolute path to skills/<name>/SKILL.md>
Mode: create
Skill name: <kebab-case-name>
⚠️ Do not invent your own path for the target file. The handler has already placed it at the correct location under the project's
skills/directory; using the literal value ofTarget file:puts the SKILL.md where the framework will discover it. A common mistake is generalising the source'sagent_file_system/prefix onto the target — that lands the new skill in the wrong directory and CraftBot will never see it.
SKILL_SOURCE_<task_id>.md has YAML frontmatter (mode, target_skill, source_task_id, generated_at) and these body sections, in order:
## Task name— the short task title shown in the action panel. Treat this as a one-line summary of what the user wanted, not a verbatim instruction (the original instruction is not retained on disk after the source task ends).## Outcome— status, created/ended timestamps, the skills the source task had attached, and any internalworkflow_id.## Action trace— every action and reasoning item the source agent emitted, in order, withinput,output,error, and duration. This is your primary evidence — it is the durable record of what actually happened, kept inactions.db.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 267 lines · 83 tokens per session scan A afeea5cf2205
craftbot-skill-creator is a skill published in the GitHub repository CraftOS-dev/CraftBot (376 stars, last pushed yesterday), licensed MIT. It adds 83 tokens to every session and 3,963 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
turix-mac
Computer Use Agent (CUA) for macOS automation using TuriX. Use when you need to perform visual tasks on the desktop, such as opening apps, clicking buttons, or navigating UIs that don't have a CLI or API.
macos-control
Control macOS GUI applications via mouse automation, keyboard input, screenshots, image recognition, and AppleScript execution. Use when you need to interact with macOS app UIs, take screenshots, click buttons, type text, scroll, drag, or locate images on screen.
artifact-storage-policy
管理 Codex 交付物的專案識別、Google Drive/GitHub 路由、檔名、儲存位置與回讀驗證;凡工作報告、外部保存、交付成果或新 repository 選擇涉及遠端儲存時使用。.
model-worker-routing
Route a task to the existing Ox Alpha worker only when the user explicitly names Ox Alpha; preserve normal Codex behavior for all other tasks.
output-contract
任務完成前需要一致交付格式、修改清單、測試結果、待確認事項、或使用者明確要求「完成後列出」時使用。適用於程式碼、設定、文件、skills、同步與多步驟任務收尾;本 Skill 不取代內容 readiness 或風險檢查。.
prompt-portability
需要把 Codex / Claude 的全域規則、skill 原則、工作流程或提示詞移植到 Gemini、ChatGPT、Claude 網頁版、API、或其他不具備本機檔案修改能力的平台時使用。.