Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ftwagency/wpconvert-devtools/wpconvertnpx skills add FTWAgency/wpconvert-devtools --skill wpconvertgit clone --depth 1 https://github.com/FTWAgency/wpconvert-devtoolsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00121 | $0.00486 |
| Opus 5 | $0.00060 | $0.00243 |
| Sonnet 5 | $0.00024 | $0.00097 |
| Haiku 4.5 | $0.00012 | $0.00049 |
Grade A, and why
wpconvert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
WPConvert conversion skill
Read references/workflow.md for the step-by-step flow and references/troubleshooting.md for failures.
Canonical hub: docs/agents.md
Policy (must follow)
- Quota first —
wpconvert_quotabefore any conversion - Credit confirmation — disclose
consumes; confirmpayg_creditandstarter_creditunless already authorized - No false download promises — when
preview_onlyordownload_available === false, usewpconvert_create_previewonly - Idempotency — on ambiguous submit errors, reuse the returned
idempotency_key; new intentional conversion → omit key - No secrets — never set
includeEnvwithout explicit user approval - No source edits — do not change the frontend repo just to satisfy WPConvert
- Follow
recommended_next— do not invent polling intervals; honorretry_after_seconds
MCP config
See examples/mcp/ — use a literal API key placeholder; do not commit real keys.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 38 lines · 121 tokens per session scan A f5792f69ac09
wpconvert is a skill published in the GitHub repository FTWAgency/wpconvert-devtools (1 stars, last pushed 13d ago), licensed MIT. It adds 121 tokens to every session and 486 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
API Fuzzing
API endpoint fuzzing for discovering unexpected behaviors, crashes, and security vulnerabilities through malformed requests, boundary values, and protocol violations.
API Rate Limiting Testing
Testing API rate limiting implementations including throttling behavior, burst handling, rate limit headers, and distributed rate limiting patterns.
API Versioning Testing
Testing API versioning strategies including URL path, header, and query parameter versioning with backward compatibility validation.
hostinger-headless
Build, connect, or iterate on a website hosted on Hostinger — provision hosting and a domain, optionally seed an ecommerce store with a real hosted checkout or a WordPress content backend (headless CMS/blog), build the frontend, deploy, and verify. Requires an authenticated Hostinger MCP session (see entry/skill.md).…
tray-cupons
API completa de cupons de desconto da Tray (recurso discountcoupons). Cobre criar, editar, listar, consultar e excluir cupons (CRUD) e gerenciar os relacionamentos do cupom com clientes, produtos, categorias, marcas, fretes e cupom-presente, além da geração de cupom de troca a partir de um pedido. Total de 21…
tray-frete
API de cotação e listagem de frete da Tray (recurso shippings, somente leitura). Cobre dois endpoints GET: /shippings/cotation/ calcula valor e prazo de entrega para um ou mais produtos rumo a um CEP, consultando os gateways de frete configurados na loja (Frete-X API, Correios, transportadoras); e /shippings/ lista as…