Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/go1c/workflow-plugin/workflow-dependenciesnpx skills add Go1c/workflow-plugin --skill workflow-dependenciesgit clone --depth 1 https://github.com/Go1c/workflow-pluginWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00050 | $0.00615 |
| Opus 5 | $0.00025 | $0.00308 |
| Sonnet 5 | $0.00010 | $0.00123 |
| Haiku 4.5 | $0.00005 | $0.00061 |
Grade A, and why
workflow-dependencies scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
workflow-dependencies — 依赖分析与关系补全
本技能读取线上单据或 .workflow-drafts/<bundleId>/，输出依赖 DAG、上下游链、当前阻塞
链和待写入关系。先读取 dependency-model.md
与 relation-provider.md。需要线上写入时
转 workflow-upload，不绕过权限模式直接调用 API。
流程
- 读取草稿/单据正文、评论、附件元数据、验收项和已有关系；按共享搜索规则做项目级全局搜索。
- 解析 displayKey、UUID、本地 ID、深链和明确的“依赖/阻塞/前置”语句。
- 用模型补全语义关系；每条关系必须同时写入证据片段、来源位置、推断方式和置信度。
- 规范方向为“上游/前置 -> 下游/后继”，去重并检查自环、环、孤儿或跨项目引用。
- 计算传递闭包、根节点、叶节点、完整关系链和当前阻塞链；状态判定使用 workflow 返回的
semantic与isTerminal，不硬编码状态名。 - 将所有可解析的直接边写入 manifest 的边清单。Requirement direct edge 交给
bindRequirementReference对应的原生 Provider；WorkItem edge 交给 schedule relations。 按当前权限模式决定后续上传方式；不逐边询问。环、跨项目、无法唯一解析的引用和权限/并发 冲突是硬阻塞。无向references只表达关联存在，不能把它当成依赖方向。
输出
写入同一 bundle 的 analysis.json，并向用户报告：直接边、传递链、阻塞节点、证据、置信度、
Provider 能力和仍需处理的阻塞。Requirement 引用通过 GET /api/v1/requirement-graph
读回，但图谱的 source / target 是无向展示顺序；分析结果不代表依赖方向已经线上落库。
只有上传器完成 Provider 读回后才能报告原生引用已建立。
边界
只处理 Workflow PM 对象之间的关系。代码依赖图、需求图谱 UI、自动修改代码和自动删除已有 关系均不在本技能范围。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 37 lines · 50 tokens per session scan A 8d098d43edbd
workflow-dependencies is a skill published in the GitHub repository Go1c/workflow-plugin (2 stars, last pushed 2d ago), licensed MIT. It adds 50 tokens to every session and 615 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
opencli-sitemap-author
Use when creating or maintaining OpenCLI site sitemaps: agent-facing navigation, page-state, action, workflow, API-reference, pitfall, and fallback knowledge for a website. Use after browser exploration discovers durable site context, when a sitemap is stale, or when promoting local site knowledge into the repo.
golden-rss
Use when testing the rss golden build.
omh-code-review
This is a Hermes-native code-review workflow skill.
hyperpod-version-checker
Check and compare software component versions on SageMaker HyperPod cluster nodes - NVIDIA drivers, CUDA toolkit, cuDNN, NCCL, EFA, AWS OFI NCCL, GDRCopy, MPI, Neuron SDK (Trainium/Inferentia), Python, and PyTorch. Use when checking component versions, verifying CUDA/driver compatibility, detecting version mismatches…
redteam-web-detail-pack
Routing and boundary guidance for authorized general web application security testing. Use as a web testing router when the attack surface should be dispatched to more specific web vulnerability skills.
android-pentest
安卓应用渗透测试 — APK分析、Hook、自动化测试、运行态驱动、签名恢复、抓包分析.