Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add inkeep/open-knowledge-skills --skill open-knowledge-write-skillgit clone --depth 1 https://github.com/inkeep/open-knowledge-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/inkeep/open-knowledge-skills/open-knowledge-write-skill)<a href="https://agentmods.dev/skills/inkeep/open-knowledge-skills/open-knowledge-write-skill"><img src="https://agentmods.dev/badge/skills/inkeep/open-knowledge-skills/open-knowledge-write-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/inkeep/open-knowledge-skills/open-knowledge-write-skill"><img src="https://agentmods.dev/badge/skills/inkeep/open-knowledge-skills/open-knowledge-write-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 33 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 38 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00152 | $0.03582 |
| Opus 5.5 | $0.00061 | $0.01433 |
| Sonnet 5.5 | $0.00030 | $0.00716 |
| Haiku 4.5 | $0.00015 | $0.00358 |
Grade A, and why
open-knowledge-write-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 236 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Writing an OpenKnowledge skill
You are helping the user author an Agent Skill — a SKILL.md file (plus
optional references/ and scripts/) that teaches an AI agent how to do a
recurring task. In OpenKnowledge a skill is a first-class, versioned,
installable artifact: you author it with the write / edit skill verbs, then
install it into the user's editors.
Skills earn their keep by being recognized at the right moment and followed
faithfully. Most of the craft is in two places: a description that triggers
reliably, and a body short and concrete enough that the agent actually does what
it says. Work the stages below in order, but jump to where the user already is.
Stage 1 — Capture intent and classify the skill
Gate — does this already exist? Check BEFORE you build. First list managed
skills with skills({}), then read any likely match with skills({ name });
these are the Project/Global skills OpenKnowledge already manages. Also search
the public marketplace with skills({ query: "<2-4 trigger words>" }) before
drafting when the task sounds reusable beyond this project. Each marketplace row
returns name, source, and description; inspect the strongest descriptions,
then import a chosen candidate with import({ source, skill: name, add: [...] }) and adapt
it only if reuse is the right call. Use the Vercel find-skills skill,
npx skills find <query>, or manual skills.sh search only when the OK MCP
skills({ query }) path is unavailable. If the user already has a skills.sh page
open, pass the full skill-page URL as source, e.g.
import({ source: "https://www.skills.sh/<owner>/<repo>/<skill>", add: [...] }) — the
middle segment is the REPO, not a literal skills. Do not
run npx skills add as the
default install path in this flow: import through OpenKnowledge
(import({ source, skill, add })) so the skill lands as a real folder with
provenance, versioning, and managed fan-out; add says where it goes, and
install afterwards changes where it lives. Use 2-4 concrete trigger phrases from the user's request plus
the domain or tool name, then open/read the strongest candidates' descriptions
before judging. If an existing or public skill covers most of it, STOP and
recommend reuse — a near-duplicate with overlapping triggers mis-fires and
dilutes both. If a public skill is close but not exact, decide WITH the user
whether to import/adapt it into OpenKnowledge, install it outside OK with the
Skills CLI, or write a narrower companion whose description explicitly hands
off to it. Build a new skill only when it is genuinely distinct. Surface the
overlap and the installed-skill plus marketplace search outcome before drafting
or writing anything. This is a disclosure gate: tell the user what you checked,
what matched, and why reuse/import/adapt/new-skill is the right next step. Never
discover overlap after the skill is written. If skills({ query }) / skills.sh
is unreachable, say so plainly and continue with the installed-skill check.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 23d ago Changed 7b7be652da96
- 1mo ago Changed · +1 lines 16dce338e3f2
- 2mo ago First seen · 235 lines · 152 tokens per session scan A 0bb385abfa92
open-knowledge-write-skill is a skill published in the GitHub repository inkeep/open-knowledge-skills (17 stars, last pushed 11d ago), licensed MIT. It adds 152 tokens to every session and 3,582 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
open-knowledge-write-skill compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| open-knowledge-write-skillinkeep/open-knowledge-skills | Skill | 17 | 11d ago | MIT | A | 152 | Claude Code, Codex |
| claude-md-improveranthropics/claude-plugins-official | Skill | 46k | yesterday | Apache-2.0 | A | 82 | Claude Code |
| agent-platform-model-registrygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 60 | Claude Code, Codex |
| gke-reliabilitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 85 | Claude Code, Codex |
| gke-workload-securitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 171 | Claude Code, Codex |
| google-cloud-solution-agentic-analytics-spark-knowledge-cataloggoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 132 | Claude Code, Codex |
| glance-canonical-layoutsandroid/skills | Skill | 10k | yesterday | Apache-2.0 | A | 56 | Claude Code |