Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/kklimuk/docx-cli/weak-agent-testnpx skills add kklimuk/docx-cli --skill weak-agent-testgit clone --depth 1 https://github.com/kklimuk/docx-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00218 | $0.06049 |
| Opus 5 | $0.00109 | $0.03024 |
| Sonnet 5 | $0.00044 | $0.01210 |
| Haiku 4.5 | $0.00022 | $0.00605 |
Grade A, and why
weak-agent-test scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 384 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Adversarial review — weak-agent harness for docx-cli
This harness answers one question: can weak agents actually use docx-cli to get
real work done, and what should we fix first? It runs the weak-agent-test
workflow (.claude/workflows/weak-agent-test.js), which fans out one weak exercise
agent per scenario (Haiku by default — swappable to Sonnet via args.model), renders
every output with Microsoft Word, grades each against ground-truth criteria with an
opus judge, and has opus synthesize a prioritized improvement report.
Exercise agents do NOT self-report tool counts — every tool-economy and token number
is measured after the run (agents under-count their own calls ~2×, so self-reports
were dropped): from the agent transcripts for the Claude arms, from each scenario's
exercise.json ledger for the local arm. Both roll up into the same Run-metrics table
(tokens, wall-clock, tool split, correctness) via exercise-metrics.ts.
The test corpus is bundled with this skill under scenarios/, one folder per
scenario, named after its key (scenarios/mnda/, scenarios/invoice/, …). Each
scenario folder is self-describing and holds everything that scenario needs:
task.md— the AGENT-FACING request, written as a human delegating the work: the goal, the data, the intent — and no tool vocabulary (nodocxcommands, locators, or OOXML terms), because discovering which features deliver the outcome is part of what's measured,criteria.md— the JUDGE-ONLY grading rubric (the precise, tool-specific checks). The stage step withholds it from the agent's run workspace, and the judge reads it from the pristine source — the agent never sees the answer key,- the fixture
.docxto work on (edit scenarios only; authoring scenarios create their output fresh), assets/— any additional inputs (data files, images; empty for most edit scenarios).
The workflow's SCENARIOS manifest holds only the per-scenario routing metadata
(key, bucket label, edit/author kind, the doc filename); whether a baseline gets
rendered is DERIVED from the kind (every edit scenario has a pristine source, so it
gets one — see hasBaseline()), not a stored field. The actual
request/criteria/fixture/assets all live in the folder. The skill is
therefore self-contained and travels with its test corpus. To change what a scenario
tests, edit the files in its folder. (Heavy, ephemeral run outputs — edited docx,
renders, reviews, the report — are dumped to ./tmp/docx-weak-agent-test/<ts>/,
never into the repo.)
Staging is ONE code path for every backend: scripts/stage-scenario.ts copies a
scenario folder, strips the judge-only criteria.md, and verifies the inputs landed.
The workflow's Stage agent runs it per scenario; the local corpus runner imports it.
Each run produces, under the timestamped run dir, one result folder per scenario (named after its key) plus the run-level report and metrics:
<RUN_DIR>/
REPORT.md ← synthesized report; the Metrics phase appends the measured
run-metrics section (local: in-run; Claude: your post-run pass)
exercise-metrics.md ← measured per-exercise-agent tokens/time/tool split
exercise-metrics.json
<key>/ ← one per scenario; the worked-on copy lives here
task.md assets/ ← (criteria.md is withheld from this copy — judge-only)
<doc>.docx ← the edited/authored document
renders/output/ ← the OUTPUT: Word-rendered page PNGs + read.md (markdown read view)
renders/baseline/ ← the pristine "before": page PNGs + read.md (every EDIT scenario;
absent only for the authored eliot-journal — no source to diff)
review.md ← the judge's saved review for this task (written in-run)
verdict.json ← the judge's structured verdict incl. taskSuccess (written in-run
by the judge — the correctness source the Metrics phase reads)
metrics.json ← this task's measured tokens/time/tool split + correctness
(local: in-run Metrics phase; Claude: your post-run pass)
What ships with it
32 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- scenarios/contract-finalize/assets/.gitkeep 0 B
- scenarios/contract-finalize/contract-redlined.docx 15 KB
- scenarios/contract-finalize/criteria.md 2.9 KB
- scenarios/contract-finalize/task.md 2.3 KB
- scenarios/contract-markup/assets/.gitkeep 0 B
- scenarios/contract-markup/contract.docx 14 KB
- scenarios/contract-markup/criteria.md 3.2 KB
- scenarios/contract-markup/task.md 3.1 KB
- scenarios/eliot-journal/assets/eliot-poems.md 1.7 KB
- scenarios/eliot-journal/assets/frontispiece.svg 1.4 KB
- scenarios/eliot-journal/criteria.md 3.2 KB
- scenarios/eliot-journal/task.md 3.2 KB
- scenarios/invoice/assets/logo.svg 1.2 KB
- scenarios/invoice/criteria.md 5.1 KB
- scenarios/invoice/invoice.docx 23 KB
- scenarios/invoice/task.md 4.1 KB
- scenarios/mnda/assets/.gitkeep 0 B
- scenarios/mnda/criteria.md 2.1 KB
- scenarios/mnda/mnda.docx 28 KB
- scenarios/mnda/task.md 3.1 KB
- scenarios/resume/assets/.gitkeep 0 B
- scenarios/resume/criteria.md 2.9 KB
- scenarios/resume/resume.docx 28 KB
- scenarios/resume/task.md 3.6 KB
- scripts/collect-exercises.ts 2.4 KB runs code
- scripts/exercise-metrics.ts 28 KB runs code
- scripts/local-exercise-prompt.md 1.5 KB
- scripts/parse-local-ledger.ts 8.9 KB runs code
- scripts/run-local-corpus.ts 15 KB runs code
- scripts/stage-competitor.ts 11 KB runs code
- scripts/stage-scenario.ts 3.1 KB runs code
- scripts/tsconfig.json 667 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 384 lines · 218 tokens per session scan A 3bdf77be4ca5
weak-agent-test is a skill published in the GitHub repository kklimuk/docx-cli (194 stars, last pushed 15d ago), licensed MIT. It adds 218 tokens to every session and 6,049 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
vox-director
Turn ONE topic into a finished Vox-style paper-collage explainer / ad video, end to end on the Atlas Cloud API + local ffmpeg — script, collage keyframes, motion, voice-over, music, captions, all automated. Use this whenever the user wants a "Vox style" video, a paper/torn-paper collage animation, a "motion collage"…
social-post
學習使用者的 Facebook/Instagram/YouTube/Threads/X 語氣與受眾,規劃、撰寫、確認後發佈內容;以已登入 Chrome 受控掃描、草擬及回覆 FB/IG/Threads 留言;並作為流量、留存與轉化的結構化帳本。使用者說「發文」「用我的口氣」「回覆留言」「自動回留言」「掃留言」「查流量」「演算法」「把數據訓練進去」「比較貼文」「優化 pattern」時使用。.
privacy-eu
EU 사용자 대상 서비스용 Privacy Notice·Terms of Service·Consent Modal·Cookie Banner 자동 생성. GDPR (Regulation 2016/679) + ePrivacy Directive + Consumer Rights Directive 2011/83 + Digital Services Act + Digital Content Directive + Unfair Terms Directive 반영. 영문 인터뷰로 진행.
privacy-terms
처리방침·이용약관 자동 생성 진입점. 호출 즉시 6개 하위 스킬(privacy-kr·privacy-eu·privacy-us·privacy-jp·privacy-global·privacy-global-jp)을 번호 메뉴로 제시하고, 번호 입력 즉시 해당 스킬 인터뷰로 직행한다.
higgsfield-troubleshoot
Use when a Higgsfield generation fails, produces poor quality, looks wrong, doesn't match the prompt, or the user needs to fix or improve an output.
higgsfield-motion-design
End-to-end motion-design / animated-ad creation flow on Higgsfield via the MCP connector. Use when the user wants to create motion design, animate a logo, make a video from an image, build an animated ad or brand promo, turn a product into motion, or says 'make a motion', 'motion design', 'animate this', 'make a video…