Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/jscraik/Agent-Skillsnpx agentmods add skills/jscraik/agent-skills/plugin-creatorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jscraik/agent-skills/plugin-creator)<a href="https://agentmods.dev/skills/jscraik/agent-skills/plugin-creator"><img src="https://agentmods.dev/badge/skills/jscraik/agent-skills/plugin-creator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jscraik/agent-skills/plugin-creator"><img src="https://agentmods.dev/badge/skills/jscraik/agent-skills/plugin-creator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.01187 |
| Opus 5.5 | $0.00017 | $0.00475 |
| Sonnet 5.5 | $0.00008 | $0.00237 |
| Haiku 4.5 | $0.00004 | $0.00119 |
Grade A, and why
plugin-creator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plugin Creator
Core Philosophy
- Start minimal, then add only requested surfaces.
- Keep naming and manifest shape deterministic.
When to Use
Use for initial plugin scaffolding.
Inputs
- plugin name and destination scope
- optional marketplace update intent
- optional existing skill path to adopt by move
Outputs
Return: schema_version, plugin_name, plugin_path, validation, optional blocked_by.
For non-trivial plugins, also return factory_governance with plugin posture, visibility policy, traceability mode, budget posture, and risks.
Workflow
Use the detailed scaffold procedure in references/workflow.md.
Apply the context-disposition policy: move important still-valid context to references, and intentionally discard stale, duplicated, unsafe, superseded, or low-signal text.
Classify reusable, delivery-oriented, visible-family, or coding-harness plugins with references/factory-governance-spine.md. Keep one-skill plugins minimal.
Apply the OpenAI-style plugin design contract during scaffold shape decisions: keep the root-visible surface small, split child skills by distinct user intent, declare side-effect classes early, and leave confirmation behavior for install, external write, destructive, or completion-gating actions. Add bundled hooks only when lifecycle behavior is explicitly requested, and prefer hooks/hooks.json.
Read when:
- You need full plugin scaffold and marketplace update flow: references/workflow.md.
- You need plugin posture, visibility, budget, traceability, or session-evidence rules: references/factory-governance-spine.md.
- You need side-effect, context-minimization, user-control, or output-shape guidance: OpenAI-style plugin design contract.
- You need to choose whether the requested factory work should build a new artifact, improve an existing one, stay docs-only, or stop: First-principles factory gate.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 139 B
- assets/plugin-creator-small.svg 1.3 KB
- assets/plugin-creator.png 24 KB
- references/contract.yaml 3.4 KB
- references/evals.yaml 6.7 KB
- references/factory-governance-spine.md 2.7 KB
- references/marketplace-entry.sample.json 243 B
- references/plugin-json-spec.md 2.7 KB
- references/plugin-manifest.sample.json 1.5 KB
- references/task-profile.json 1.4 KB
- references/workflow.md 2.2 KB
- scripts/check_plugin_creator_template_drift.py 281 B runs code
- scripts/check_plugin_creator_template_drift.pyw 4.0 KB
- scripts/create_basic_plugin.py 265 B runs code
- scripts/create_basic_plugin.pyw 22 KB
- scripts/render_plugin_creator_templates.py 4.5 KB runs code
- templates/marketplace-entry.json.tmpl 245 B
- templates/plugin.json.tmpl 1.2 KB
- tests/test_wrappers.py 1.1 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +3 lines ad0dff13caa0
- 1mo ago First seen · 117 lines · 42 tokens per session scan A 9f41ab25a115
plugin-creator is a skill published in the GitHub repository jscraik/Agent-Skills (9 stars, last pushed 4d ago), licensed Apache-2.0. It adds 42 tokens to every session and 1,187 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
agent-code-analyzer
Agent skill for code-analyzer - invoke with $agent-code-analyzer.
worker-integration
Worker-Agent integration for intelligent task dispatch and performance tracking.
agui-dotnet-streaming-chat
Get started with the AG-UI .NET SDK: bootstrap and run your first streaming-chat app (client + server) with the AG-UI .NET NuGet packages (AGUI.Client, AGUI.Server, AGUI.Formatting, AGUI.Abstractions). USE FOR: which packages to install and how to wire them; constructing an AGUIChatClient against an endpoint and…
agui-dotnet-protobuf
Use the protobuf wire transport (instead of the default Server-Sent Events) for an AG-UI connection with the AG-UI .NET SDK — a compact binary event stream negotiated via the Accept header. USE FOR: making an AGUIChatClient prefer protobuf by wiring an AGUIEventStreamHandler with ProtobufEventStreamFormatter (then…
revdiff-plan
Review the last Codex assistant message (plan, analysis, or proposal) with inline annotations in a TUI overlay. Extracts the most recent response from Codex rollout files and opens it in revdiff for review and annotation. Activates on "revdiff-plan", "review plan with revdiff", "annotate plan", "review last response"…
moai-ref-ui-polish
UI polish and interface-completion reference: the small visual details — concentric border radius, optical alignment, shadow-vs-border, motion easing, typography smoothing, tabular numbers, icon stroke weight, hit areas — that separate polished interfaces from generic ones. Agent-extending skill that amplifies…