Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/jmagly/aiwgnpx agentmods add skills/jmagly/aiwg/aiwg-utils-quickrefWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jmagly/aiwg/aiwg-utils-quickref)<a href="https://agentmods.dev/skills/jmagly/aiwg/aiwg-utils-quickref"><img src="https://agentmods.dev/badge/skills/jmagly/aiwg/aiwg-utils-quickref/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jmagly/aiwg/aiwg-utils-quickref"><img src="https://agentmods.dev/badge/skills/jmagly/aiwg/aiwg-utils-quickref.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 244 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.03366 |
| Opus 5.5 | $0.00030 | $0.01346 |
| Sonnet 5.5 | $0.00015 | $0.00673 |
| Haiku 4.5 | $0.00007 | $0.00337 |
Grade A, and why
aiwg-utils-quickref scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 248 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AIWG Core Utilities — Quick Reference
This is your always-loaded core directory for AIWG. It does not list every utility skill. Instead, it teaches the cross-cutting domains and gives you curated search phrases that map to aiwg discover lookups, plus a list of which framework-specific quickrefs are loaded.
How to use this quickref
aiwg show <type> <name> returns a metadata card. Inspect its outline, then fetch a needed --section "Heading" or use --body for the full instructions. Fetch required rules with --rules --with-rule-bodies before governed work.
Routing authority: aiwg show rule skill-discovery --body (kernel). Skill/CLI precedence:
aiwg show rule cli-secondary --body. The capability phrases below are lookup aids.
Framework quickrefs (loaded if framework is installed)
If a user asks about a specific framework's surface, the corresponding quickref is your first stop. These are kernel-resident, so they're already in your context:
sdlc-quickref— software-development-lifecycle workflowsforensics-quickref— incident response and digital forensicsresearch-quickref— research corpus and citation workflowsmedia-curator-quickref— media archive managementmarketing-quickref— marketing operations and campaignsops-quickref— operational infrastructure and runbookssecurity-engineering-quickref— applied security and crypto decisionsknowledge-base-quickref— wiki and documentation workflows
If a quickref isn't loaded, the framework isn't installed in this project. Use aiwg list to confirm.
Addons & extensions (separate kernel quickref)
For everything outside the framework set — the ~214 skills across 29 addons (loops, voice, memory, color, testing, NLP, etc.) and 7 ops extensions (sys/net/sec/dev/it/stream/api-adapter) — load aiwg-language-map. It's also kernel-resident and acts as the orientation layer for the addon/extension surface, with curated discover phrases per capability domain.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed · +2 lines f3b47ce3a203
- 13d ago Changed · -31 lines 91d7b3c8fdfb
- 27d ago Changed · +1 lines bddd7a24f9b5
- 1mo ago Changed · +4 lines 2f3fbefaad64
- 2mo ago First seen · 272 lines · 74 tokens per session scan A e836c8bac68a
aiwg-utils-quickref is a skill published in the GitHub repository jmagly/aiwg (227 stars, last pushed today), licensed MIT. It adds 74 tokens to every session and 3,366 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
builder
Implementing robust business logic, API integrations, data models, and reproducible AI image-generation code with type safety. Use for production implementation, Gemini image API pipelines, or interactive pair programming.
cue
Writing and producing product videos: scripts, storyboards, narration, and reproducible Playwright demo recordings. Use for explainers, onboarding, feature walkthroughs, multi-aspect exports, captions, and video quality checks.
matrix
Controlling combinatorial explosion across multi-dimensional axes: minimum coverage sets, execution plans, test/deploy/UX/risk prioritization. Use when scoping multi-axis combinations.
nexus
Orchestrating multi-specialist task chains and scope-adaptive product delivery: classifies intent, selects and executes the minimum viable chain, aggregates results, and verifies acceptance criteria. For multi-domain tasks, build-first delivery, and product lifecycle execution.
palette
Improving usability, interaction quality, cognitive load reduction, feedback design, and a11y compliance. Use when improving UX usability or interaction feel.
pixel
Generating pixel-accurate HTML/CSS code from image mockups (PNG/JPG/screenshots) and performing visual verification for faithful reproduction. Use when mockup-to-code generation is needed.