Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add KristenPan/pickoo-your-favorites --skill save-to-favoritesgit clone --depth 1 https://github.com/KristenPan/pickoo-your-favoritesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kristenpan/pickoo-your-favorites/save-to-favorites)<a href="https://agentmods.dev/skills/kristenpan/pickoo-your-favorites/save-to-favorites"><img src="https://agentmods.dev/badge/skills/kristenpan/pickoo-your-favorites/save-to-favorites/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kristenpan/pickoo-your-favorites/save-to-favorites"><img src="https://agentmods.dev/badge/skills/kristenpan/pickoo-your-favorites/save-to-favorites.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 8 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 50 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00110 | $0.07476 |
| Opus 5 | $0.00055 | $0.03738 |
| Sonnet 5 | $0.00022 | $0.01495 |
| Haiku 4.5 | $0.00011 | $0.00748 |
Grade A, and why
save-to-favorites scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 254 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Save to favorites
Write every Agent's result into the same local library. The frontend is a reader for that library, not a separate database.
Routing boundary
This is the only automatically selected skill for a new link entering Pickoo. One request gets one intake owner and one shared task; the source platform does not select another top-level skill. Platform capture, OCR, ASR, chaptering, analysis, and asset review are downstream capabilities of this task, not competing entry points.
Do not invoke creator-content-ingest or asset-review-agent as another route, including as a user-facing downstream Skill. They are internal implementation contracts owned and scheduled by this workflow after the Pickoo package exists. Obsolete standalone platform-capture and link-intake Skills are not part of Pickoo's runtime, including as an explicit alternative or fallback. All platform capture, OCR, ASR, chaptering, analysis, and archive work stays inside this managed workflow.
Shared contract
Read references/library-contract.md before writing. Use the bundled scripts/save_link.py as the single entry point so duplicate detection and Markdown output stay identical across Agents.
For podcast shownote timestamps, use the internal shownote-timeline contract supplied by the current Pickoo execution manifest or bundled runtime. Do not discover another Skill to find it. Capture owns the canonical structured timeline; chapter rebuilding may parse body text only as a legacy fallback and must never override valid structured evidence.
For NetEase Cloud Music share links or music.163.com/song?id=..., also read references/netease-music.md. Short and standard links are canonicalized by song ID without login or user cookies. Capture public lyrics and attempt only the platform's no-login public playback response; never reconstruct signed URLs or bypass membership, region, or DRM controls.
Default library root: ~/Documents/Pickoo Library/.
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 278 B
- references/library-contract.md 14 KB
- references/netease-music.md 2.7 KB
- scripts/apply_chapter_semantic_review.py 8.3 KB runs code
- scripts/build_article_chapters.py 18 KB runs code
- scripts/build_transcript_chapters.py 79 KB runs code
- scripts/capture_netease_music.py 31 KB runs code
- scripts/chapter_title_audit.py 9.0 KB runs code
- scripts/diarize_package.py 23 KB runs code
- scripts/install_speaker_runtime.sh 1.4 KB runs code
- scripts/migrate_shownote_chapter_titles.py 3.7 KB runs code
- scripts/plan_asset_batch.py 4.6 KB runs code
- scripts/prepare_asset_review.py 40 KB runs code
- scripts/prepare_chapter_semantic_review.py 12 KB runs code
- scripts/restore_asset_snapshot.py 7.0 KB runs code
- scripts/save_link.py 251 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 254 lines · 110 tokens per session scan A c571c0ee17b2
save-to-favorites is a skill published in the GitHub repository KristenPan/pickoo-your-favorites (17 stars, last pushed 13d ago), licensed MIT. It adds 110 tokens to every session and 7,476 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
my-wiki
A skill for managing a local Markdown knowledge vault that stores captured webpages, PDFs, Office files, notes, images, folders, and ZIP files. It links preserved source material, called References, to durable topic pages, called Concepts.
kb
Set up, evolve, or operate a hraness/kb local-first Markdown knowledge base for coding-agent memory. Use when a user asks to design KB conventions or a recurring KB ritual; search or query a KB or Obsidian vault; load or recover repository context, plans, decisions, concepts, backlinks, semantic search, or Git…
course-builder
Use whenever the user wants to ingest a new course's materials (lecture notes, textbook chapters, HW problems, HW solutions) and build the course-specific knowledge base — patterns.md (recurring solution techniques), coverage.md (HW-to-section map with 🔥 exam tiers + ⚠weak flags), and summary.md (topic tree). Invoked…
alt-import
Parse an Exam Radar (OPTIMETA Alt plugin) export and fold its lecture-emphasis exam-probability signal into the PAIDEIA course index — write course-index/radar.md, annotate course-index/coverage.md with a lecture-emphasis column and divergence flags, and seed a gold-zone weakmap. Invoked by /paideia:alt. The export…
Use whenever the user works with PDF files — reading/extracting text from PDFs (lecture notes, textbook chapters, HW problems, HW solutions, hand-written answers), converting PDFs to markdown for downstream analysis, merging/splitting PDFs, or creating PDFs. For scanned or hand-written PDFs, OCR is required…
linza-operator
Use when operating LINZA MCP as a local-first agent workspace. Guides agents through doctor checks, guidenextsteps, agentworkspace actions, teach/grow review loops, dry-run apply gates, artifact safety, calibr trace review, and context export without exposing raw tool lists to users.