Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dirtcubeinteractive/specter-skills --skill specter-admingit clone --depth 1 https://github.com/dirtcubeinteractive/specter-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dirtcubeinteractive/specter-skills/specter-admin)<a href="https://agentmods.dev/skills/dirtcubeinteractive/specter-skills/specter-admin"><img src="https://agentmods.dev/badge/skills/dirtcubeinteractive/specter-skills/specter-admin.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.02873 |
| Opus 5 | $0.00049 | $0.01437 |
| Sonnet 5 | $0.00020 | $0.00575 |
| Haiku 4.5 | $0.00010 | $0.00287 |
Grade A, and why
specter-admin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 189 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Specter Admin — configure your game via API
⚡ First: use the Specter MCP server if it's connected
If the specter MCP server is available (tools named specter_create_currency,
specter_create_item, specter_list_*, specter_login, etc.), use those tools to configure
the backend — do NOT hand-roll the raw admin HTTP calls below. The MCP server handles
authentication for you (a one-time browser sign-in), auto-detects the project, and clears the
gateway. The raw API reference below is for when the MCP server is not connected, or for
generating standalone scripts.
Never ask the user for their dashboard email/password. Member auth happens through a browser sign-in, not a pasted password. If a create/configure action needs auth:
- With the MCP server: just call a create tool — it triggers
specter_login(browser) when needed, or tell the user to runnpx -p specter-skills specter-mcp loginonce. - Without the MCP server: tell the user to set up the
specterMCP server (see the package README) and sign in — then ask again. Do not collect a password to callmember/sign-in.
Everything the dashboard (https://console.specterapp.xyz) does, the admin API can do — useful for bulk content import, IaC-style game config, and CI pipelines.
This API mutates live game configuration. Two standing rules when generating admin integrations:
- Always show the user what will be created/changed and get confirmation before calling
mutating endpoints — especially
*/delete(destructive, archive/soft-delete). - Run against a dev/staging project first; admin changes are immediately visible to clients using that project's api-key.
Achievements — the four types (task / mission / step-series / time-series)
When a user asks to "configure an achievement / quest / mission / challenge / streak", first pick the right type. There are four, split across two endpoints:
| Type | Endpoint | Discriminator | MCP tool | Use when… |
|---|---|---|---|---|
| Single task | task/create |
— | specter_create_task |
one objective → one reward ("win 10 matches", "log in today") |
| Mission | task-group/create |
typeId: 1 |
specter_create_mission |
a pool of tasks; player sees/does a subset per cycle ("daily missions", "rotating challenges", noOfMissionsPerCycle) |
| Step series | task-group/create |
typeId: 2 |
specter_create_step_series |
sequential — finish step 1 to unlock step 2 ("quest line", "tutorial chain") |
| Time series | task-group/create |
typeId: 3 |
specter_create_time_series |
per-window streak ("login 7 days in a row", "weekly, resets on miss"; stageLength + interval) |
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/admin-endpoints.md 12 KB
- references/endpoints-index.md 22 KB
- references/endpoints/admin-edge-functions-add.md 1.1 KB
- references/endpoints/admin-edge-functions-analytics.md 766 B
- references/endpoints/admin-edge-functions-delete.md 708 B
- references/endpoints/admin-edge-functions-deploy.md 628 B
- references/endpoints/admin-edge-functions-edit.md 913 B
- references/endpoints/admin-edge-functions-get-by-id.md 640 B
- references/endpoints/admin-edge-functions-get.md 928 B
- references/endpoints/admin-edge-functions-invocations-get.md 1.0 KB
- references/endpoints/admin-edge-functions-invocations-sync.md 894 B
- references/endpoints/admin-edge-functions-jwt-get.md 541 B
- references/endpoints/admin-edge-functions-jwt-regenerate.md 569 B
- references/endpoints/admin-edge-functions-logs.md 1.2 KB
- references/endpoints/admin-edge-functions-secrets-add.md 715 B
- references/endpoints/admin-edge-functions-secrets-delete.md 703 B
- references/endpoints/admin-edge-functions-secrets-get.md 551 B
- references/endpoints/analytics-usage-api.md 1.0 KB
- references/endpoints/analytics-usage-event.md 1.0 KB
- references/endpoints/analytics-usage-history-api.md 1.1 KB
- references/endpoints/analytics-usage-history-event.md 1.1 KB
- references/endpoints/analytics-usage-overview.md 566 B
- references/endpoints/app-add-orchestration-config.md 439 B
- references/endpoints/app-add.md 2.0 KB
- references/endpoints/app-api-key-create.md 727 B
- references/endpoints/app-delete.md 2.1 KB
- references/endpoints/app-edit-auth-config.md 1.2 KB
- references/endpoints/app-edit-master.md 1.6 KB
- references/endpoints/app-edit.md 1.6 KB
- references/endpoints/app-event-add-custom.md 1.4 KB
- references/endpoints/app-event-create-param.md 421 B
- references/endpoints/app-event-custom-subscribe-all.md 440 B
- references/endpoints/app-event-custom-unsubscribe-all.md 526 B
- references/endpoints/app-event-default-subscribe-all.md 443 B
- references/endpoints/app-event-default-unsubscribe-all.md 529 B
- references/endpoints/app-event-edit-custom.md 1.6 KB
- references/endpoints/app-event-edit-default.md 421 B
- references/endpoints/app-event-get-custom.md 1.0 KB
- references/endpoints/app-event-get-default.md 1.0 KB
- references/endpoints/app-event-get-params-value.md 425 B
- references/endpoints/app-event-get-specter-params.md 436 B
- references/endpoints/app-get-auth-config.md 668 B
- references/endpoints/app-get-custom-params.md 403 B
- references/endpoints/app-get-master.md 1.1 KB
- references/endpoints/app-get-orchestration-config.md 439 B
- references/endpoints/app-get.md 1.1 KB
- references/endpoints/app-link-accounts.md 1000 B
- references/endpoints/app-overview.md 527 B
- references/endpoints/app-update-orchestration-config.md 451 B
- references/endpoints/battlepass-create.md 3.2 KB
- references/endpoints/battlepass-get.md 1.2 KB
- references/endpoints/battlepass-schedule.md 853 B
- references/endpoints/battlepass-stop.md 531 B
- references/endpoints/battlepass-update.md 3.3 KB
- references/endpoints/blueprint-add.md 1.3 KB
- references/endpoints/blueprint-get.md 1.1 KB
- references/endpoints/blueprint-update.md 1.4 KB
- references/endpoints/bundle-create.md 3.7 KB
- references/endpoints/bundle-get.md 1.3 KB
- references/endpoints/bundle-update.md 3.7 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 189 lines · 99 tokens per session scan A ccfcdf0f5b65
specter-admin is a skill published in the GitHub repository dirtcubeinteractive/specter-skills (0 stars, last pushed 2mo ago), licensed MIT. It adds 99 tokens to every session and 2,873 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
league-akari-sgp-data-source
Use when implementing or reviewing League Akari SGP/LCU data-source selection, SGP API clients, League Servers remote config, Tencent cross-region queries, token handling, or per-feature SGP interoperability.
csharp-godot
Use when working with C# in Godot — conventions, GodotSharp API differences from GDScript, project setup, and interop.
cloudflare-durable-objects
Cloudflare Durable Objects for stateful coordination and real-time apps. Use for chat, multiplayer games, WebSocket hibernation, or encountering class export, migration, alarm errors.
gamedev-multiplayer
Use when adding multiplayer or netcode to a game — client-server vs P2P, server authority and anti-cheat, state replication vs RPCs, prediction and reconciliation, lag compensation, plus Godot 4 / Unity NGO / Unreal wiring. NOT single-player gameplay (that is godot, unity, unreal), NOT matchmaking or server hosting…
cloudflare-do-turn-based-multiplayer
Design, implement, debug, or verify a remote turn-based multiplayer game whose rooms run on Cloudflare Durable Objects. Use for room and invite identity, reconnectable seats, WebSocket hibernation, concurrent turns, action idempotency, revision conflicts, or cross-browser game-state agreement. Do not trigger for…
roblox-cloud
Use for Roblox Open Cloud APIs, API keys, OAuth 2.0, webhooks, scopes, token lifecycle, or in-experience HttpService calls.