Borrowing it
Nothing to install: this file belongs to himkt/cafleet. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/himkt/cafleet/main/.claude/skills/skill-author/SKILL.mdgit clone --depth 1 https://github.com/himkt/cafleetWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/himkt/cafleet/skill-author)<a href="https://agentmods.dev/skills/himkt/cafleet/skill-author"><img src="https://agentmods.dev/badge/skills/himkt/cafleet/skill-author/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/himkt/cafleet/skill-author"><img src="https://agentmods.dev/badge/skills/himkt/cafleet/skill-author.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 530 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.01169 |
| Opus 5.5 | $0.00012 | $0.00468 |
| Sonnet 5.5 | $0.00006 | $0.00234 |
| Haiku 4.5 | $0.00003 | $0.00117 |
Grade A, and why
skill-author scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Authoring a CAFleet team skill
Use CAFleet when independent investigation, implementation or review calls for subagents or agent teams. A direct local transformation can stay in the current session. A team has a Director and the members selected for its assignment; the host owns continuation.
Phase prerequisites
| Before | Read | Local responsibility |
|---|---|---|
| Designing the workflow | Core and backend bindings | Define outcome, role authority, file ownership, artifacts and user gates |
| Resolving outputs | BASE | Normalize the task folder and inherit supplied BASE in members |
| Spawning | Spawn Protocol and Director policy | Diagnose environment, register the Director and select members/models |
| Rendering prompts | Canonical skeleton and audit convention | Supply absolute role/core/backend paths, identity, BASE, host prerequisites and lossless role constraints |
| Coordination | Coordination | Use artifact pointers and paired issue markers |
| Receiving | Director wake and backend recipes | Arm native reception before ready replies and retain one owned receiver until resolution or explicit handoff |
| Recovery / finish | Recovery / Shutdown | Preserve context and tear down owned members before the fleet |
Members open their authoritative role first, load their own backend and required skills through its supported loader, then use supplied host-rule equivalents for absent optional files. Ready is the first operational broker command; prerequisite shell reads may precede it only when shell is the available reader.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed ef15309686f7
- 3d ago Changed b11c9e486e0b
- 4d ago Changed · -76 lines · -37 tokens per session 67bace52866c
- 18d ago Changed af5ca703e61e
- 27d ago Changed 21fc577d360f
- 1mo ago Changed · -394 lines · -59 tokens per session 9478d65a42c3
- 1mo ago First seen · 539 lines · 126 tokens per session scan A 71f88a395615
skill-author is a skill published in the GitHub repository himkt/cafleet (53 stars, last pushed today), licensed MIT. It adds 30 tokens to every session and 1,169 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
anycap-human-interaction
Collect structured visual feedback from humans using AnyCap's annotation tool, or create and iterate on diagrams using the interactive whiteboard (Excalidraw). Covers image annotation, URL/web page review with screen recording, video review, audio feedback, and collaborative diagramming with Mermaid input. Use when…
anycap-media-production
Produce media assets using AnyCap: generate images, videos, music, speech, dialogue, and complete audio scenes from text or reference inputs, refine images through interactive visual annotation, and deliver finished assets. Covers the full production workflow from concept to delivery across all media types (image…
anycap-blog-production
Turn user-provided data, notes, research, product facts, or structured inputs into AnyCap-style blog posts and then enrich those posts with first-party evidence blocks when needed. Use when a user wants a blog, article, tutorial, learn page, or SEO content draft written in the tone of the AnyCap website. Best fit when…
anycap-worldcup-predict
World Cup match prediction and pre-match intel for football (soccer) fans: predict who will win and a likely scoreline, backed by structured, verifiable evidence -- player profiles, squad dossiers, current form, head-to-head records, and past-tournament history -- using AnyCap web search and crawl. Weighs FIFA…
anycap-deepresearch
Guide for conducting thorough, multi-source research and producing comprehensive, well-sourced reports. Powered by AnyCap -- the capability runtime that equips AI agents with web search (including AI Grounded citations), web crawl, image generation, cloud storage, and one-click web publishing through a single CLI. Use…
anycap-gemini-omni-video-edit
Use Gemini Omni Flash Preview through AnyCap for practical short-video editing workflows. Trigger when a user wants to edit or refine an existing video with natural-language instructions, especially product replacement, object removal or replacement, relighting, restyling, preserving a person/scene while changing one…