Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LiPu-jpg/Openwrite --skill oh-story-long-writegit clone --depth 1 https://github.com/LiPu-jpg/OpenwriteWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-write)<a href="https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-write"><img src="https://agentmods.dev/badge/skills/lipu-jpg/openwrite/oh-story-long-write/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lipu-jpg/openwrite/oh-story-long-write"><img src="https://agentmods.dev/badge/skills/lipu-jpg/openwrite/oh-story-long-write.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 9 Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.00628 |
| Opus 5 | $0.00034 | $0.00314 |
| Sonnet 5 | $0.00014 | $0.00126 |
| Haiku 4.5 | $0.00007 | $0.00063 |
Grade B, and why
oh-story-long-write scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
allow_tools: ["*"] What it actually says
Oh Story 长篇写作
先读取当前作品状态和用户本轮目标，再选择开书、补纲、写指定章、续写或修订。裸调用时只诊断所处阶段并给出下一步，不自动生成正文。
执行流程
- 明确本轮交付范围和停靠点。用户没有指定正文数量时最多处理一章；只要求规划时停在候选或大纲交付。
- 让 Goethe 处理读者契约、人物、世界、关系、全书阶段、卷纲和细纲；让 Dante 根据已确认资产写正文或做局部修订。
- 使用
references/method.md检查情绪承诺、主角代理权、冲突升级、剧情单元和章末钩子。 - 写章前只召回不知道就会写错的资料：当前细纲、最近正文、出场人物状态、相关规则、伏笔和当前关注点。
- 写完检查事实连续性、角色选择、信息变化、情绪结算和章节状态；结构问题优先于句子润色。
OpenWrite 边界
- 把
src/视为确认版真源，把data/视为正文、运行态和派生数据。不要创建上游的设定/、对标/、拆文库/或追踪文件结构。 - 对大纲、人物、世界、关系等正式资产先提交候选和 diff，只在用户本轮明确确认后写入。
- 缺少可写细纲、章节编号冲突或需要改变已确认设定时停止正文，转回 Goethe 讨论。
- 只使用当前 Agent 已有工具；不执行上游 hooks、脚本或安装流程。
本 Skill 改编自 oh-story-claudecode 的 story-long-write，基于提交 48a4789d1f542eb672addf8ccb5dbdc20e63be46；MIT 许可见同目录 LICENSE。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 37 lines · 69 tokens per session scan B e3c64f164feb
oh-story-long-write is a skill published in the GitHub repository LiPu-jpg/Openwrite (709 stars, last pushed today), licensed Apache-2.0. It adds 69 tokens to every session and 628 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
awesome-novel
A nine-agent workflow for writing a novel with AI, from creating the initial setting through organizing the finished material. It can also bring an existing novel into the workflow.
audit-playbook
A code-security audit playbook covering source-code review, runtime checks, software dependencies, deployment settings, and AI-agent security risks.
ida-reversing
Perform reverse engineering and binary analysis in IDA Pro using natural language commands powered by IDA MCP. Use this skill whenever the user wants to: analyze executable files, understand function behavior, decompile code, explore cross-references, search for strings or bytes, patch binary code, document reverse…
workflow
A command set for starting and managing step-by-step automated workflows.
local-search
A local search component that finds web results using installed command-line tools and page parsers. It supports general web search and extra sources for areas such as Chinese pages, news, code questions, academic work, and reference material.
manage-taskboard
Manage work in the native DeepSeek Harness Taskboard with exact task ids and optimistic versions. Use when an Agent must inspect project work, claim an eligible todo, record progress or blockers, verify an implementation, submit it for human review, or release its own claim; also use when a human asks how to accept…