Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LiPu-jpg/Openwrite --skill oh-story-long-scangit clone --depth 1 https://github.com/LiPu-jpg/OpenwriteWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-scan)<a href="https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-scan"><img src="https://agentmods.dev/badge/skills/lipu-jpg/openwrite/oh-story-long-scan/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-scan"><img src="https://agentmods.dev/badge/skills/lipu-jpg/openwrite/oh-story-long-scan.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 9 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.00560 |
| Opus 5 | $0.00034 | $0.00280 |
| Sonnet 5 | $0.00013 | $0.00112 |
| Haiku 4.5 | $0.00007 | $0.00056 |
Grade B, and why
oh-story-long-scan scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
allow_tools: ["*"] What it actually says
Oh Story 长篇市场研究
把榜单当作有偏差的市场样本，不把排名本身当作选题答案。先确认平台、榜单口径、目标读者、题材范围、采样日期和作者自身优势。
执行流程
- 收集可复核样本，并为每组数据记录平台、榜单类型、链接、访问日期、可见口径和样本量。
- 使用
references/method.md编码题材组合、情绪承诺、主角起点、核心机制、首个冲突、首次兑现和长期升级空间。 - 先报告样本频次，再解释可能机制；把样本少的新组合标为信号，不直接称为趋势。
- 输出多个选题候选，分别说明市场证据、作者适配、差异化、开篇验证方式、持续写作空间和风险。
- 市场结论只作为 Goethe 的讨论输入，不直接改写项目资产。
数据边界
- 不执行上游 Node、CDP 或平台抓榜脚本，不启动或重启浏览器，不绕过登录或访问限制。
- 只使用当前会话可访问、Deep Research 返回或用户提供的来源；无法获得实时数据时给研究框架和待查清单，不伪造最新榜单。
- 区分流量榜、付费榜、新书榜、完结榜和编辑推荐，说明推荐位、作者存量读者、热点事件等偏差。
本 Skill 改编自 oh-story-claudecode 的 story-long-scan，基于提交 48a4789d1f542eb672addf8ccb5dbdc20e63be46；MIT 许可见同目录 LICENSE。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 36 lines · 67 tokens per session scan B c25b957c3b91
oh-story-long-scan is a skill published in the GitHub repository LiPu-jpg/Openwrite (715 stars, last pushed today), licensed Apache-2.0. It adds 67 tokens to every session and 560 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
awesome-novel
A nine-agent workflow for writing a novel with AI, from creating the initial setting through organizing the finished material. It can also bring an existing novel into the workflow.
audit-playbook
A code-security audit playbook covering source-code review, runtime checks, software dependencies, deployment settings, and AI-agent security risks.
ida-reversing
Perform reverse engineering and binary analysis in IDA Pro using natural language commands powered by IDA MCP. Use this skill whenever the user wants to: analyze executable files, understand function behavior, decompile code, explore cross-references, search for strings or bytes, patch binary code, document reverse…
workflow
A command set for starting and managing step-by-step automated workflows.
local-search
A local search component that finds web results using installed command-line tools and page parsers. It supports general web search and extra sources for areas such as Chinese pages, news, code questions, academic work, and reference material.
manage-taskboard
Manage work in the native DeepSeek Harness Taskboard with exact task ids and optimistic versions. Use when an Agent must inspect project work, claim an eligible todo, record progress or blockers, verify an implementation, submit it for human review, or release its own claim; also use when a human asks how to accept…