Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Lee-W/maigonpx agentmods add skills/lee-w/maigo/maigo-self-checkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lee-w/maigo/maigo-self-check)<a href="https://agentmods.dev/skills/lee-w/maigo/maigo-self-check"><img src="https://agentmods.dev/badge/skills/lee-w/maigo/maigo-self-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lee-w/maigo/maigo-self-check"><img src="https://agentmods.dev/badge/skills/lee-w/maigo/maigo-self-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.01098 |
| Opus 5 | $0.00029 | $0.00549 |
| Sonnet 5 | $0.00012 | $0.00220 |
| Haiku 4.5 | $0.00006 | $0.00110 |
Grade A, and why
maigo-self-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Maigo Self-Check
Owner: Taki (Verifier)
Consumers: /maigo:go, /maigo:quick, /maigo:team, /maigo:crystallize
觸發條件
diff 動到以下任一路徑時啟用本 skill:
agents/commands/skills/(含SKILL.md與references/子目錄)mkdocs.ymldocs/
純動 Python source(hooks/、scripts/、tests/)→ 只跑 pytest,不觸發本 skill。
兩者都動(如同時改 scripts/ 與 docs/)→ pytest + 本 skill 兩條都跑。
驗證指令
uv run python scripts/validate_plugin.py
uv run mkdocs build --strict
為什麼都用專案環境:
uv run python scripts/validate_plugin.py— validator 使用專案宣告的 Python 版本;不受 host 上較舊的系統python3影響。uv run mkdocs build --strict— mkdocs 是 venv 工具(在pyproject.toml的 docs dependency 裡)。
這兩條抓的是 pytest 抓不到的東西
| 問題類型 | 被哪條抓到 |
|---|---|
include shim 缺失(docs/skills/<name>.md 沒建) |
validate_plugin.py |
frontmatter name 對不上目錄名 |
validate_plugin.py |
skill catalog(docs/reference/skills.md)漏列 |
validate_plugin.py |
| mermaid 相依圖缺 skill 節點 | validate_plugin.py |
| 相對 link 在 include-markdown rewrite 後炸 strict-mode | mkdocs build --strict |
| docs nav 指到不存在的 page | mkdocs build --strict |
| command 檔缺「掛名」角色台詞(引號旁邊沒有角色 emoji / 名字) | validate_plugin.py |
CLAUDE.md / AGENTS.md 的共同驗證慣例漂移 |
validate_plugin.py |
pytest 測的是 Python 行為;上述問題都在 plugin 結構層——pytest 對它們是盲的。
新增 / 改 commands/*.md 時,至少保留一段掛名角色台詞(MyGO!!!!! 濃度慣例)——單純
「有「」引號」不算數,旁邊要看得到角色 emoji / 名字(或是 > 「...」 blockquote 標題引言),
不能只是 UI/error 訊息引號。機器兜底由 validate_plugin.py 的
check_command_persona_quotes 檢查,不必自己記著掃。
改 references/*.md 時:跟 SKILL.md 摘要同步
幫某個 skill 的 references/*.md 加新內容時,兩件事一起做,缺一都算沒改完:
- 改之前先看該 reference 檔開頭宣告的範圍(例如「Read this file when ...」)是否覆蓋新主題。 題材對不上就不要硬塞——擴大宣告範圍,或改放進更貼切的位置(往往是 SKILL.md 本體裡已經在談同主題的段落)。
- 改之後同步 SKILL.md 本體對這份 reference 檔案的摘要(列出的條數、bullet 清單)——SKILL.md 是永遠會被載入的主體,reference 檔是 on-demand;摘要沒同步,新內容等於沒人看得到。
為什麼:/maigo:crystallize 一次批次畢業多筆記憶時踩過兩次——references/*.md 加了新內容,
但 SKILL.md 本體的條數摘要(如「Three cross-cutting patterns」)沒跟著改成新的數字。這條檢查
不限 crystallize;/maigo:quick、/maigo:go 只要動到 skills/ 都算。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 76 lines · 58 tokens per session scan A 7f2a75c577ae
maigo-self-check is a skill published in the GitHub repository Lee-W/maigo (14 stars, last pushed today), licensed MIT. It adds 58 tokens to every session and 1,098 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
research-engineer
An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.
tika-eval-compare
Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".
neuron-evaluation-engineer
Create and run AI evaluations with datasets, assertions, and output drivers in Neuron AI. Use this skill whenever the user mentions evaluation, testing AI systems, creating evaluators, dataset-driven testing, assertion-based validation, or wants to measure AI system performance. Also trigger for tasks involving…
jetson-validate-image
Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.
atmos-validation
Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.
skill-benchmark
Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.