Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ggg123124/vrchat-assistant --skill plugin-templategit clone --depth 1 https://github.com/ggg123124/vrchat-assistantWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ggg123124/vrchat-assistant/plugin-template)<a href="https://agentmods.dev/skills/ggg123124/vrchat-assistant/plugin-template"><img src="https://agentmods.dev/badge/skills/ggg123124/vrchat-assistant/plugin-template/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ggg123124/vrchat-assistant/plugin-template"><img src="https://agentmods.dev/badge/skills/ggg123124/vrchat-assistant/plugin-template.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00536 |
| Opus 5.5 | $0.00000 | $0.00214 |
| Sonnet 5.5 | $0.00000 | $0.00107 |
| Haiku 4.5 | $0.00000 | $0.00054 |
Grade A, and why
plugin-template scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Agent 直接通过 MCP `tools/call` 调用上述工具,无需 curl 手写 JSON-RPC。例如: What it actually says
my-plugin —— 插件能力说明(模板)
本文档是插件的 SKILL.md,给调用你的 AI Agent 看:告诉它这个插件能做什么、怎么用。 只需把本文件放进
plugins/local/<name>/SKILL.md(或docs/plugin-template/下随插件分发), 改写「能力」「用法」两节即可。
能力
- my_plugin_ping:自检工具,返回插件名 / 版本 / 当前时间。用于验证插件已成功加载并注册,无凭据可调用。
用法
Agent 直接通过 MCP tools/call 调用上述工具,无需 curl 手写 JSON-RPC。例如:
my_plugin_ping (无参数)
返回:
{ "plugin": "my-plugin", "version": "0.1.0", "now": "2026-08-23T00:00:00.000Z" }
开发提示
- 插件只准通过
api对象与核心交互,不得 importcore/、触碰ctx、直连数据库文件。 - 对外暴露能力一律
api.registerTool({ name, description, inputSchema, handler })。 - 需要核心能力/数据 →
api.consume("<域>.<名>", args);需要调别的工具 →api.tools.call(name, args); 需要自有表 →api.db.table("<alias>")(核心自动加plg_<name>_前缀)。 - 权威契约见
docs/PLUGIN-API.md(v1.3),开发指南见docs/PLUGIN-DEV.md。 - 如需第三方依赖:在插件目录加
package.json声明(模板本体保持零依赖),见 PLUGIN-API.md §6.1。
⚠️ 重要:
api.registerTool注册的工具只有其名字在core/tool-order.json中, 才会出现在tools/list(registry.listTools() 只遍历该清单)。若想让 Agent 在tools/list里看到你的工具,需把工具名补进core/tool-order.json;若只是给 其他插件用(api.tools.call或hasTool),则无需改它。详见 ARCHITECTURE / registry.js。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 36c6aec15e5f
- 1mo ago Changed · +1 lines d2ae22b5c7e3
- 1mo ago First seen · 37 lines · 0 tokens per session scan A fca12ca50d4e
plugin-template is a skill published in the GitHub repository ggg123124/vrchat-assistant (26 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 536 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
mnemosyne
Persistent cross-session memory via Mnemosyne — store, recall, and consolidate facts, preferences, and context.
mnemosyne-memory-override
Hard rule override that forces Mnemosyne for all durable memory storage. The legacy memory tool is DEPRECATED for user preferences, credentials, and project conventions. Use memory ONLY for ephemeral session state.
mnemosyne-maintenance
Use when: upgrading Mnemosyne, diagnosing slow/hung consolidation (mnemosynesleep), fixing missing embeddings, or troubleshooting import/version mismatches.
hermes-tweet
Use Xquik in Hermes Agent for public X research, monitoring, thread summaries, creator discovery & approved actions. Not affiliated with X Corp. Use when the user requests X data or a named action. Trigger with "search X", "monitor X", "post tweet", or "X trends".
holix-sdd-propose
Create Spec-Driven Development changes (OpenSpec-style) — multi-project openspec, understanding gate, assigned tasks before coding.
make-release
A release workflow for the Holix GitHub repository. It prepares a pull request, checks that automated tests pass, merges it, and creates the next numbered release.