Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/linekforge/forge-hub/forge-clinpx skills add LinekForge/forge-hub --skill forge-cligit clone --depth 1 https://github.com/LinekForge/forge-hubWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00827 |
| Opus 5 | $0.00000 | $0.00413 |
| Sonnet 5 | $0.00000 | $0.00165 |
| Haiku 4.5 | $0.00000 | $0.00083 |
Grade A, and why
forge-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
forge CLI
forge-hub 命令行管理工具。通过 Bash 调用。
观测(read-only,随时能跑)
fh hub status— Hub 状态(运行时间、在线实例数、已加载通道)fh hub health— 详细健康检查(每通道 consecutive failures / last error / degraded?)fh hub peers— 在线实例列表和工作描述fh hub channels— 已加载的通道插件fh hub pending— 当前挂起的审批队列fh hub allowlist [channel]— 查看所有通道的授权列表,或指定通道fh hub replay <channel> [count=50] [since_ts]— 查某通道最近 N 条聊天历史fh hub approval-audit [--last N] [--today] [--request-id ID]— 查审批审计
动作
fh hub send <channel> <to> <text>— 手动发消息(如fh hub send wechat <sender_id>@im.wechat "你好");to也可以用昵称,Hub 自动从 allowlist 查 IDfh hub summary <text>— 设置当前实例的工作描述(在fh hub peers里显示)fh hub name <id> <name>— 给实例起名(@路由用,多实例场景)fh hub listen— 查看当前实例订阅的通道fh hub listen [@TAG] <channels...>— 设置通道订阅。短名:wx=微信 /tg=Telegram /im=iMessage /fs=飞书 /all=全部。@TAG可选,指定给哪个实例。用户说"关掉微信"就跑这个命令去掉wxfh hub resolve <request_id>— 手动清除一条 stale pending 审批(本地 resolved 但 Hub 没收到 cancel 时用)
授权
fh hub allow <channel> <id> <nickname>— 授权联系人(需 Touch ID / prompt 验证)。如fh hub allow wechat <sender_id>@im.wechat 用户fh hub revoke <channel> <id|nickname>— 撤销授权(需 Touch ID / prompt 验证)fh hub owner <channel> [id|nickname|--clear]— 查看、设置或清除远程审批 owner;审批回复只认 owner
紧急锁定(panic button)
fh hub lock— 紧急锁定,立即冻结所有远程通道(出站 / 入站都拦)fh hub unlock— 解锁fh hub set-lock-phrase <暗号>— 设置锁定暗号(任意通道收到完全匹配的文字 → 自动触发 lock)
[!IMPORTANT] 绝不跑
fh hub lock-phrase(无参数版)——它会打印出用户的秘密暗号到 terminal。这是用户的秘密功能,暗号不经过 agent 上下文。
通道预设
fh hub preset list— 查看已保存的通道预设fh hub preset add <name> <ch:N>...— 新增预设(如fh hub preset add 日常 wx:100 tg:50,wx:100表示订阅 wx 并回放 100 条历史)fh hub preset remove <name>— 删除预设
发消息用昵称
fh hub send wechat 用户 "你好" — Hub 自动从 allowlist 查找昵称对应的 ID,不用记原生 ID。
What ships with it
10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- doctor.test.ts 1.6 KB runs code
- doctor.ts 2.2 KB runs code
- engine.test.ts 5.6 KB runs code
- engine.ts 8.3 KB runs code
- forge.ts 65 KB runs code
- hub-instance-view.test.ts 2.1 KB runs code
- hub-instance-view.ts 2.2 KB runs code
- lock-phrase.test.ts 1.4 KB runs code
- self-test.test.ts 2.1 KB runs code
- self-test.ts 973 B runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 49 lines · 0 tokens per session scan A 4c8bf9ea84d1
forge-cli is a skill published in the GitHub repository LinekForge/forge-hub (21 stars, last pushed 3mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 827 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bilibili-helper
B站内容助手 - 视频标题描述优化、标签策略、封面设计建议、分区选择、评论互动.
china-translate
中英互译 + 本地化 - 技术翻译、UI本地化、文化适配、避免机翻腔.
ppt-designer
PPT 演示助手 - 幻灯片设计、内容结构、视觉优化、动画建议、演讲稿.
weibo-poster
微博内容创作 - 140字优化、话题热搜、@提及策略、配图描述、发布时机.
deepseek-helper
DeepSeek API 助手 - 编程辅助、模型选择、API调用指南、定价信息.
douyin-script
抖音/快手短视频脚本 - 前3秒hook、脚本结构、热门音乐建议、话题标签策略.