Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/davidtoby/agent-skillsnpx agentmods add skills/davidtoby/agent-skills/agent-skills-repo-publishingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/davidtoby/agent-skills/agent-skills-repo-publishing)<a href="https://agentmods.dev/skills/davidtoby/agent-skills/agent-skills-repo-publishing"><img src="https://agentmods.dev/badge/skills/davidtoby/agent-skills/agent-skills-repo-publishing/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/davidtoby/agent-skills/agent-skills-repo-publishing"><img src="https://agentmods.dev/badge/skills/davidtoby/agent-skills/agent-skills-repo-publishing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.01361 |
| Opus 5 | $0.00037 | $0.00681 |
| Sonnet 5 | $0.00015 | $0.00272 |
| Haiku 4.5 | $0.00007 | $0.00136 |
Grade C, and why
agent-skills-repo-publishing scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf skills/<skill-name>/scripts/__pycache__ How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Skills Repo Publishing
Publish battle-tested skills to davidtoby/agent-skills in a way that keeps the repo valid and the local Hermes copy in sync.
Quick start
- Work in the local clone at
~/.Hermes/workspace/output/skill_repo_cache/agent-skills. - Add or edit the skill under
skills/<skill-name>/. - Update repo indexes (
README.md,skills/README.md) so the new skill is discoverable. - Rebuild affected
.skillpackages withscripts/rebuild_all_packages.py --skill .... - If validation fails because another package is stale, rebuild that package too.
- Copy the final skill folder into local Hermes skills under
~/.hermes/skills/user-imports/. - Commit, fetch/rebase, and push via SSH to
[email protected]:davidtoby/agent-skills.git. - Verify the pushed commit on GitHub.
Repo-specific workflow
Working repo
Use:
~/.Hermes/workspace/output/skill_repo_cache/agent-skills
This repo contains:
skills/source-of-truth folderspackages/*.skillpackaged artifactsscripts/rebuild_all_packages.pyscripts/validate_skills_repo.py
Add or update a skill
Required files:
skills/<name>/SKILL.md- optional
references/,scripts/,assets/
Important repo-specific mapping:
- the GitHub skills repo uses a flat
skills/<name>/layout - local Hermes may store the same skill under namespaced paths such as
~/.Hermes/skills/user-imports/<name>/or~/.Hermes/skills/openclaw-imports/<name>/ - when publishing an update that was made locally first, sync the local skill folder into the repo path explicitly rather than assuming the repo mirrors the local namespace structure
Typical sync pattern:
rsync -a --delete ~/.Hermes/skills/user-imports/<name>/ \
~/.Hermes/workspace/output/skill_repo_cache/agent-skills/skills/<name>/
# or, for an OpenClaw-imported skill
rsync -a --delete ~/.Hermes/skills/openclaw-imports/<name>/ \
~/.Hermes/workspace/output/skill_repo_cache/agent-skills/skills/<name>/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 161 lines · 74 tokens per session scan C 743e8a8e4a14
agent-skills-repo-publishing is a skill published in the GitHub repository davidtoby/agent-skills (10 stars, last pushed 1mo ago), licensed MIT. It adds 74 tokens to every session and 1,361 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
claude-team
Orchestrate multiple Claude Code workers via iTerm2 using the claude-team MCP server. Spawn workers with git worktrees, assign beads issues, monitor progress, and coordinate parallel development work.
conventional-commits
Format commit messages using the Conventional Commits specification. Use when creating commits, writing commit messages, or when the user mentions commits, git commits, or commit messages. Ensures commits follow the standard format for automated tooling, changelog generation, and semantic versioning.
app-store-changelog
Create user-facing App Store release notes by collecting and summarizing all user-impacting changes since the last git tag (or a specified ref). Use when asked to generate a comprehensive release changelog, App Store "What's New" text, or release notes based on git history or tags.
diff-summary
Summarize git diffs in plain English.
codex-review
Professional code review with auto CHANGELOG generation, integrated with Codex AI.
backup
Backup and restore openclaw configuration, skills, commands, and settings. Sync across devices, version control with git, automate backups, and migrate to new machines.