Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Dannykkh/skill-olympus --skill cliogit clone --depth 1 https://github.com/Dannykkh/skill-olympusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dannykkh/skill-olympus/clio)<a href="https://agentmods.dev/skills/dannykkh/skill-olympus/clio"><img src="https://agentmods.dev/badge/skills/dannykkh/skill-olympus/clio/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dannykkh/skill-olympus/clio"><img src="https://agentmods.dev/badge/skills/dannykkh/skill-olympus/clio.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 8 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 186 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 189 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 192 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 569 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 617 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 642 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Agent Snooping · line 742 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 743 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.10098 |
| Opus 5.5 | $0.00043 | $0.04039 |
| Sonnet 5.5 | $0.00021 | $0.02020 |
| Haiku 4.5 | $0.00011 | $0.01010 |
Grade A, and why
clio scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 757 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Clio (클리오) — 마무리투수 + 역사의 뮤즈
클리오(Clio / Kleio): 그리스 신화 9 뮤즈 중 역사의 뮤즈. 야구의 마무리투수(Closer)처럼, 모든 파이프라인이 끝난 뒤 최종 점검하고 판정을 내린다. 그리고 역사의 뮤즈답게, 확정된 코드를 후대에 남길 기록으로 정리한다.
마무리투수 → 기록자. 점검 먼저, 문서는 그 다음.
GS 작업을 전달받은 경우에만
GS 인증 사전점검에서 등급·기관 기준·run_dir을 전달받으면 gs-certification 모듈을
프로젝트 실제 경로 → 현재 CLI 활성 루트 → SKILLS-CATALOG.md의 정확한 source-only 경로로 해석한다.
그 SKILL.md를 읽고 부모 디렉터리의 references/clio-gs-documents.md를 적용한다.
GS 입력이 없는 일반 실행은 기존 절차를 따른다. 필수 참조 누락은 NOT RUN으로 반환한다.
사용자의 점검/수정 권한과 GS 출력 경로를 우선하고 기존 latest 보고서를 덮어쓰지 않는다.
Quick Start
/clio # 전체 실행 (점검 + 문서)
/clio src/ # 특정 소스 디렉토리 지정
/clio --check-only # 최종 점검만 (Phase 1, GO/NO-GO 판정)
/clio --docs-only # 문서 생성만 (Phase 2~3, 점검 건너뜀)
/clio --flow-only # 흐름도만 추출 (Phase 2)
공식 호출명: /clio (별칭: 클리오, 마무리, 최종 점검, 레거시: /closer, 클로저)
내부 소스 모듈 해석 계약 (필수)
flow-verifier, humanizer, mermaid-diagrams, pdf와 선택 모듈 diagram-design은 Clio가 호출하는 등록 스킬이 아니라
절차·문법·스크립트를 직접 소비하는 source-only 내부 모듈입니다. 각 이름에 대해 해석된
SKILL.md 절대경로를 MODULE_SKILL[name], 그 부모 디렉터리를 MODULE_ROOT[name]으로
기록합니다.
각 모듈을 처음 쓰기 전에 다음 순서로 해석합니다.
- 프로젝트 루트의
skills/<name>/SKILL.md가 실제 파일로 존재하고 frontmatter의name이 정확히<name>일 때만 그 절대경로를 사용합니다. 없거나 이름이 다르면 프로젝트의 다른 경로를 추측하지 않고 2번으로 갑니다. - 없으면 현재 런타임의 활성 루트에서 정확한
skills/<name>/SKILL.md를 확인합니다. Codex는$CODEX_HOME/skills(미설정이면~/.codex/skills), Claude와 Grok 호환 표면은~/.claude/skills, Antigravity는~/.gemini/antigravity-cli/skills입니다. 파일 존재와 frontmatter 이름이 모두 일치할 때만 사용하고, 아니면 3번으로 갑니다. - 없으면 현재 런타임의 전역
SKILLS-CATALOG.md를 읽습니다. Codex는$CODEX_HOME/SKILLS-CATALOG.md(미설정이면~/.codex/SKILLS-CATALOG.md), Claude와 Grok 호환 표면은~/.claude/SKILLS-CATALOG.md, Antigravity는~/.gemini/antigravity-cli/SKILLS-CATALOG.md입니다. 첫 번째 셀이 정확히<name>인 행 (| <name> | ... | ... | <읽을 경로> |) 하나를 찾아읽을 경로의 절대SKILL.md를 그대로 사용합니다. 정확한 이름의 행이 0개이거나 2개 이상이면 해석 실패이며 다른 행이나 레지스트리 경로를 추측하지 않습니다. - 해석한 파일의 존재를 확인하고
SKILL.md전체를 읽은 뒤에만 그 모듈의 기준을 적용합니다. 참조 파일은MODULE_ROOT[name]/references/..., 스크립트는MODULE_ROOT[name]/scripts/...로부터 절대경로를 만듭니다.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago Changed · +1 lines 0bdc67c39035
- 1mo ago Changed · +8 lines 585d235b0e18
- 1mo ago Changed 4af41cb5b9af
- 1mo ago First seen · 748 lines · 107 tokens per session scan A eda69c3f4be7
clio is a skill published in the GitHub repository Dannykkh/skill-olympus (7 stars, last pushed 3d ago), licensed MIT. It adds 107 tokens to every session and 10,098 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
audit-project
Audits the Claude Code configuration of a project against the dotforge template. Generates a report with score and gaps.
init-project
Quick-start Claude Code configuration. Auto-detects stack, asks 4 questions to understand the project, generates complete config.
domain-extract
Extract domain knowledge from existing project sources and generate domain rules. Also handles vault sync and domain listing.
rule-effectiveness
Cross-reference .claude/rules/ globs against git history to find inert rules and uncovered directories. Content quality and context cost are native — run /doctor prompt-audit and /skill-doctor for those.
session-insights
Per-project insights from dotforge data — CLAUDEERRORS.md, session-report metrics, agent memory, registry score trend — fed into the practices pipeline. General friction analysis across transcripts is native (/insights).
forge
Execute dotforge configuration management commands from any OpenClaw channel (WhatsApp, Telegram, Slack, etc.).