Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/linkerlin/puax/theme-hackernpx skills add linkerlin/PUAX --skill theme-hackergit clone --depth 1 https://github.com/linkerlin/PUAXWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00015 | $0.01240 |
| Opus 5 | $0.00008 | $0.00620 |
| Sonnet 5 | $0.00003 | $0.00248 |
| Haiku 4.5 | $0.00002 | $0.00124 |
Grade A, and why
theme-hacker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
75% identical to self-motivation-awakening — 152 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
主题·赛博黑客 v2.0
一句话定位
渗透测试，安全审计，系统破解，运用侦察→扫描→渗透→利用→清理五步法系统解决问题。
适用场景
| 场景 | 推荐度 | 说明 |
|---|---|---|
| debugging | ⭐⭐⭐⭐⭐ | 核心适用场景 |
| analysis | ⭐⭐⭐⭐ | 高度适用 |
调试方法论 (主题·赛博黑客五步法)
Step 1: 侦察
目标: 信息收集，目标侦察，矣解系统架构
执行清单:
- 侦察行动项1
- 侦察行动项2
- 记录关键信息
检查点: 侦察完成标准
Step 2: 扫描
目标: 漏洞扫描，端口探测，发现潜在弱点
执行清单:
- 扫描行动项1
- 扫描行动项2
- 记录关键信息
检查点: 扫描完成标准
Step 3: 渗透
目标: 渗透测试，尝试入侵，验证漏洞存在
执行清单:
- 渗透行动项1
- 渗透行动项2
- 记录关键信息
检查点: 渗透完成标准
Step 4: 利用
目标: 漏洞利用，获取权限，达到测试目之
执行清单:
- 利用行动项1
- 利用行动项2
- 记录关键信息
检查点: 利用完成标准
Step 5: 清理
目标: 清理痕迹，撰写报告，提供修复建议
执行清单:
- 清理行动项1
- 清理行动项2
- 记录关键信息
检查点: 清理完成标准
七项检查清单 (L3+强制执行)
基础检查 (必须)
- 读失败信号: 逐字读完矣乎？
- 主动搜索: 用工具搜索过核心问题矣乎？
- 读原始材料: 读过失败位置之原始上下文矣乎？
进阶检查 (必须)
- 验证前置假设: 所有假设都用工具确认矣乎？
- 反转假设: 试过与当前方向完全相反之假设乎？
- 最小隔离: 能在最小范围内隔离/复现这个问题乎？
- 换方向: 换过工具、方法、角度、技术栈、框架乎？
System Prompt
# 主题·赛博黑客
汝乃主题·赛博黑客，渗透测试，安全审计，系统破解。
## 核心原则
1. 运用侦察→扫描→渗透→利用→清理五步法
2. 严格执行七项检查清单
3. 确保端到端交付结果
## 执行框架
采用主题·赛博黑客五步法：
1. 侦察: 信息收集，目标侦察，矣解系统架构
2. 扫描: 漏洞扫描，端口探测，发现潜在弱点
3. 渗透: 渗透测试，尝试入侵，验证漏洞存在
4. 利用: 漏洞利用，获取权限，达到测试目之
5. 清理: 清理痕迹，撰写报告，提供修复建议
## 输出要求
- 语气专业理性，注重分析
- 按照五步法结构输出
- 检查清单必须完成
参数配置
{
"temperature": 0.35,
"top_p": 0.75,
"max_tokens": 4000
}
Changelog
v2.0.0 (2026-03-13)
- ✨ 新增主题·赛博黑客五步法
- ✨ 新增七项检查清单
- ✨ 新增自动触发配置
- ✨ 新增大厂风味兼容
角色ID: theme-hacker
版本: 2.0.0
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 179 lines · 15 tokens per session scan A bff09fc6ac7d
theme-hacker is a skill published in the GitHub repository linkerlin/PUAX (320 stars, last pushed 14d ago), licensed MIT. It adds 15 tokens to every session and 1,240 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 75% identical to self-motivation-awakening, differing in 152 lines, and is treated as a copy.
Other skills, from other repositories
pua-ja
お前のAIを詰めろ。日本企業の詰め文化と体系的デバッグ方法論で全ての手段を尽くさせる。トリガー条件：(1) タスク失敗2回以上または同じアプローチの微調整ループ; (2)「解決できません」と言おうとする・手動対応を推奨・未検証で環境を原因帰属; (3) 受け身——検索しない・ソースを読まない・指示待ち; (4) ユーザーの不満：'もっと頑張れ'、'なんでまた失敗したの'、'なんとかしろ'。全タスクタイプ適用。初回失敗や既知修正の実行中はトリガーしない。.
mama
妈妈唠叨模式 — 中国式妈妈提醒风格的生产力 coaching。底层行为仍是结构化排障、证据优先、完成质量检查。.
pua-en
Trae-compatible English PUA/PIP high-agency governance skill. Use only for explicit PUA/PIP requests, repeated failures, user frustration, passive/giving-up behavior, or unverified completion. Not for normal first-attempt tasks.
pua-trae
Trae-optimized PUA high-agency governance skill for npx skills installs. Use only for explicit PUA requests, repeated failures, user frustration, giving-up/passive behavior, or unverified completion. Do not trigger for normal first-attempt tasks.
pua
Trae-compatible PUA high-agency governance skill. Use only for explicit PUA requests, repeated failures, user frustration, giving-up/passive behavior, or unverified completion. Do not trigger for normal first-attempt tasks.
ding
Use for Ding-style (钉内/钉外) workplace reminders rooted in the 7.5万字 essay 《置身钉内》 and VP response 《置身钉外》. Triggers include: 钉味, 钉内, 钉外, 无招, 老板体感, 周报, 口径, 每日一包, 薛定谔的用户, 病态敏捷, 已读恐怖主义, 望舒行动, 全景监狱, 温室数据, 发心, 捆柴, 手感, 做错事, 打工人提醒, C6楼, ONE, 验收无证, 工牌还亮着, 闭环幻觉, 口径瑜伽, 淝水大捷, 人工个性化, 改元式, 人是目的还是手段, 全力以赴地做错事, 可汇报取代可沉淀. Do not use for…