Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fusebase-dev/fusebase-flow/skill-authoringnpx skills add fusebase-dev/fusebase-flow --skill skill-authoringgit clone --depth 1 https://github.com/fusebase-dev/fusebase-flowWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00054 | $0.04217 |
| Opus 5 | $0.00027 | $0.02108 |
| Sonnet 5 | $0.00011 | $0.00843 |
| Haiku 4.5 | $0.00005 | $0.00422 |
Grade A, and why
skill-authoring scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 257 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill Authoring
Style: Mode-B-lite. Clean-room, Fusebase-specific procedure for deciding, writing, wiring, and validating reusable skills.
Purpose
Create or update skills without skill sprawl, role drift, mirror drift, or license contamination. This skill governs reusable instruction capture: what deserves a skill, where it belongs, which role uses it, and what validation proves it was authored cleanly.
When to invoke
- Operator asks to create, update, install, import, compare, or analyze a skill.
- Operator provides an external skill, prompt, guide, or workflow and asks to reproduce similar capability in Fusebase Flow.
- A recurring pattern should become durable reusable expertise.
- Existing skill behavior needs tightening after a missed bug, failed handoff, or repeated role drift.
- A framework skill is added or changed and provider mirrors/manifests must stay in sync.
Do not invoke when
- The request is normal per-ticket implementation covered by
implementation-planning,validation-and-qa, or another domain skill. - The issue is a one-off failure with a concrete cause; file
docs/problem-catalog/<slug>/problem.mdinstead. - The operator wants to copy external text verbatim. Refuse copying and offer clean-room capability extraction.
- The topic is already covered by an existing skill and only needs normal use, not authoring or update.
- A provider mirror is the only target. Canonical skill edits start in
flow-skills/(framework) ordocs/skills/(project-local); mirrors are generated or deliberately promoted.
Required inputs
| Input | Where it lives | If missing |
|---|---|---|
| Operator request | chat | Stop; skill purpose depends on requested reuse |
| Candidate source material | attachment, repo file, operator summary, or observed repeated pattern | Proceed only from available concepts; do not invent missing domain rules |
| Existing skill catalog | flow-skills/, .agents/skills/, .claude/skills/, docs/skills/README.md |
Search before adding; avoid duplicate skills |
| CLI edition map, for CLI provider assets | docs/fusebase-cli-edition.md |
Treat provider assets as domain support, not canonical Flow skills |
| Skill substrate | templates/skill-template.md |
Stop; use the canonical section order |
| Role boundaries | FLOW_RULES.md, flow-skills/role-discipline/references/<role>.md, agents/*/AGENT.md |
Stop if role ownership cannot be assigned |
| Clean-room constraints | docs/source-map.md, docs/clean-room.md |
Treat external material as concept-only |
| Mirror process | hooks/local/mirror-skills.sh, audit/skill-mirror-manifest.txt |
Required for framework skill changes |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 257 lines · 54 tokens per session scan A 7a42bdeda006
skill-authoring is a skill published in the GitHub repository fusebase-dev/fusebase-flow (9 stars, last pushed 7d ago), licensed MIT. It adds 54 tokens to every session and 4,217 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
lov-cli2anything
将已授权观察到的网站 API 转成可验证的 OpenAPI、SDK、Swagger 或任务型 CLI。适用于“把这个网站 API 变成 CLI”“生成可调用 Swagger”以及 “turn observed APIs into a CLI”。.
dsh-plugin-creator
Create a @deepseek-ai/dsh- plugin package end-to-end — choose the extension point or capability seam, scaffold the package, implement the tool/hook/service, and run the repo gates. 触发：新增插件 / 加工具 / 开发 capability。.
sgc-install-ai
为现有或新 App 快速初始化可上线的 AI 功能，可选择本地 Agent Client、MaaS 中转渠道、模型偏好和配套 UI。用户说集成 AI、给 App 加聊天/生成能力、Agent Client、MaaS 或模型选择时使用。.
prompt-pack
Generates a self-contained prompt pack from a spec. Embeds real code patterns from .vibeflow/ so any coding agent (Claude Code, Cursor, Copilot) follows the project's conventions without needing repo context. Use when handing off implementation to a separate session or agent.
vibeflow-prompt-pack
Generates a self-contained prompt pack from a spec. Embeds real code patterns from .vibeflow/ so any coding agent follows the project's conventions. Use when handing off implementation to a separate session or agent.
iblai-api-agent-mcp
MCP connectors for ibl.ai agents, end to end — register MCP servers (featured multi-tenant sharing, enable/disable, OAuth service linkage), manage credential connections with the authtype × scope matrix (org / agent / per-user), wire servers onto an agent, run the OAuth connected-service lifecycle, handle per-user…