Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Guiziweb/guiziweb-plugins --skill plugin-initgit clone --depth 1 https://github.com/Guiziweb/guiziweb-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/guiziweb/guiziweb-plugins/plugin-init)<a href="https://agentmods.dev/skills/guiziweb/guiziweb-plugins/plugin-init"><img src="https://agentmods.dev/badge/skills/guiziweb/guiziweb-plugins/plugin-init/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/guiziweb/guiziweb-plugins/plugin-init"><img src="https://agentmods.dev/badge/skills/guiziweb/guiziweb-plugins/plugin-init.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00600 |
| Opus 5.5 | $0.00007 | $0.00240 |
| Sonnet 5.5 | $0.00003 | $0.00120 |
| Haiku 4.5 | $0.00002 | $0.00060 |
Grade C, and why
plugin-init scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf .git How it starts
The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sylius Plugin Development
Creating a new plugin
Arguments are appended at the end as ARGUMENTS: Company PluginName "description". Parse them to get Company (PascalCase), PluginName (PascalCase), and Description.
If no arguments are provided, use AskUserQuestion to collect Company, PluginName, and Description.
-
Derive the directory name from Company and PluginName:
{Company}{Name}Plugin(PascalCase concatenation, e.g.Guiziweb+Blog→GuiziwebBlogPlugin). The package name, namespace, and bundle class are set byrename-plugin.phpin step 5. -
Clone the skeleton:
git clone https://github.com/Sylius/PluginSkeleton.git {Company}{Name}Plugin cd {Company}{Name}Plugin rm -rf .git cp compose.override.dist.yml compose.override.yml -
Check ports: read
compose.override.ymlto identify exposed ports, then runlsofchecks in parallel. If a port is in use, find a free port and updatecompose.override.yml. -
Initialize Docker (this takes several minutes — run in background using
run_in_background: true):ENV=dev make initIf error, run the same command again. Wait for completion before proceeding.
-
Rename the plugin (via Docker, after
make initfinishes):docker compose exec php php bin/rename-plugin.php --company={Company} --plugin-name={Name} --description="{description}" --skip-interaction -
Initialize the database:
make database-init && make load-fixtures -
Display setup summary to the user:
Service URL Frontend http://localhost:{http_port} Admin http://localhost:{http_port}/admin MySQL localhost:{mysql_port} Mailhog http://localhost:{mailhog_port} Admin credentials:
[email protected]/sylius
Next steps
- Start adding resources to the plugin →
/sylius-plugin:add-model - Once the plugin is feature-complete, create a GitHub repo and push
- Publish on Packagist
- Add a Symfony Flex recipe so integrators auto-install plugin assets
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 61 lines · 17 tokens per session scan C da60e32d29e4
plugin-init is a skill published in the GitHub repository Guiziweb/guiziweb-plugins (4 stars, last pushed 2mo ago), licensed MIT. It adds 17 tokens to every session and 600 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
xml-config-migrating
Use this skill when a Shopware plugin or app-server extension needs its XML configuration migrated to PHP — phrases like "migrate services.xml", "convert my plugin config to PHP", "xml to php migration", "fix the XML deprecation", "prepare my plugin for Shopware 6.8 / Symfony 8", or when a deprecation like "The XML…
magento-di
Configure Magento 2 dependency injection — di.xml, types, virtual types, preferences, argument replacement, and Object Manager. Use when wiring dependencies, creating class variations, or configuring module integrations.
hyva-create-module
Create a new Magento 2 module in app/code/. This skill should be used when the user wants to create a module, scaffold a new module, generate module boilerplate, or set up a custom module. It handles registration.php, composer.json, module.xml generation with configurable dependencies. Trigger phrases include "create…
magento-php-specialist
Advanced PHP development for Magento 2 following PSR-12 and Magento coding standards. Use when writing PHP code, implementing business logic, or ensuring code quality. Masters modern PHP features, object-oriented programming, design patterns, and Magento-specific PHP practices.
laravel-specialist
Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers…
laravel-security
Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.